Virus in Users folder hid my files

[marinakomp]

Hello,



so I have a C and a D partition, and recently I noticed that my C partition is starting to get full, and I couldn't locate what is taking so much space. Then I noticed that my USERS folder has 90 GB and that there is a problem, and I made a mistake; since I couldn't see what is taking so much space, I marked "Show hidden files and folders" in folder options, and it seems that that has activated the virus (or malware or whatever) cause it started to do something like copying, and afterwards, I lost half of the files on my desktop. I restarted the computer, thinking (stupid) maybe it will solve that problem, and - still ignorant - did the same thing again, making other half of my files to disappear from my desktop, along with the Users folder, and emptying other folders on my C disk (downloads, pictures, music etc.). Fortunately, my pictures&music etc. are held on my D disk, so I don't have a large amount of data to recover, but still I would love to try to solve this problem without formating disk, and to try to save some documents I had on my desktop. And yes, I'm aware that the infection could have spread to my D disk and/or my USB disk & external hardrive (what to do about that? Is running an antivirus scan enough?)



I read that this kind of infection is probably a malware, but I haven't found anyone else having the same exact problem (and I googled alot). I have no idea how I scored this virus, since I really am careful while downloading ANYTHING from internet, I don't visit suspicious websites etc.



I have windows 10.



Please if anyone have had the similar experience, or suggestions to solve this problem without formating disk, I would be very grateful.

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Your Hard drive may be corrupted or going bad.

Find the CMD.EXE file and run it as an Administrotor.

At the DOS prompt execute this command.

CHKDSK C: /F

Let it finish.

To return to the Operating system type EXIT at the prompt and click the Enter key.

p.s.
If chkdsk cannot lock the drive, a message appears that asks you if you want to check the drive the next time you restart the computer.
Click Y and let it finish.

===

I need more information to check for malware or other problems.

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Ensure that you are in an Administrator Account
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
[img=[URL]http://deeprybka.trojaner-board.de/eset/eng/attachlogs.png[/URL]]

Attach the file(s). A 2 Steps process.
Reply to this topic.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach. <- Step 1.
Click Attach this file. <- Step 2.
Click the Add reply button.

Please post the logs for my review.

Let me know what problems persists.

Wait for further instructions

p.s.
The Farbar program is updated often.
If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided.
You should restore the program from the Quarantine folder.
====

 

[nasdaq]

Are you still with me?