Subscribe to How-To Geek
We encourage you to register on our forums and post any questions you might have. The How-To Geeks monitor this forum and will respond to your question quickly.
I appear to have accidental moved a System Folder called "AppData" from its rightful location into My Documents. Without realising, I tried to delete it, but a message signalled that "System Files cannot be deleted" or something that effect.
I would like to replace this file to its original destination.
Also, I appear to either have a virus or have deleted important System files as a result of this
Please help.
whs, you can call me ISI if you like :L But stop complaining because you do it on all my posts lol
Okay I tried that thing in the "Run" box. Once I clicked "okay", it opened a folder called "Roaming" (which is actualy located inside the "AppData" folder that I referred to above. If you likeI can also describe syntoms of my supposed virus etc?
ISI, the AppData folder is a special folder that holds configuration data for programs. Inside of AppData there are Local, LocalLow, and Roaming folders. Inside those, and especially Roaming, there are folders for the software that you have installed.
Are these folders in the standard location, shell:appdata, or in My Documents\AppData where you accidentally moved them?
SottW, yes you are right, the AppData folder does contain Local, LocalLow and Roaming folders. The AppData folder is not in the standard location "shell:appdata" as you referred to but in My Document.
Also, during this time, I installed Avast Anti Virus and ran a scan before windows started up when I switched on my laptop. The result of this scan revealed 3 infected files and apparently a Trojan virus, which I selected to be Deleted
OK. After the virus threat has been removed, you need to move those folders from My Documents\AppData back over to the shell:profile\AppData folder.
I think that I may have caused some confusion. The AppData folder itself belongs in the shell:profile directory. The shell:appdata shortcut takes you to the AppData\Roaming folder. The point of running shell:appdata was to see if there was an error message if the AppData folder was missing. Of course, Windows will just re-create those folder if they are missing. Just get the data back where it belongs as described in the previous paragraph. If I have left you confused, please ask for clarification.
I forgot to add that I would like to replace the AppData folder back to its original location.
Also, is there any way to check that I have indeed deleted important files etc
In light of your Information Scottw, I did observe that my MSN deleted my saved email addy and that Windows Media Player deleted all my music from itself (although not from the computer)
Also, whenever I tried to run a program that Windows needs to ask for my permission to run (e.g. Disk Cleanup, Disk Defrag) when I clicked yes, the compute would freeze. Clicking Ctrl+Alt+Del would un-freeze this.
The one and only proper location for the AppData folder is in shell:profile. When you moved AppData to another location, Windows re-created the AppData folder in shell:profile. So now you have two so you can't move it back. Instead, move the sub-folders back -- Local, LocalLow and Roaming. You will want to delete the existing ones first or overwrite them.
I understand what you mean by having two copies now. However everytime I try to go to the original folder, it takes me to "C:\Users\Haroun Rashid Khan" where the second "false" copy is.
Also, within "C:\Users\Haroun Rashid Khan" there are two files called ntuser.dat.LOG1 and ntuser.dat.LOG2 which did not used to be here.
oh okay, after removing the Trojan I didn’t recognise the folder therefore apologies for anytime wasted. Have you know anything of the two files, ntuser.dat.LOG1 and ntuser.dat.LOG2 that are now located in "C:\Users\Haroun Rashid Khan\"
These were not here before and cannot be deleted as they "are open in another program" even when no other program is running so this sounds like it must be a window program.
ISI, I am sorry. I did not mean to flame you. But as you can see from my number of posts, I try to answer many posts and I find it really inconveniant to work with those long member names. I did not even remember that I mentioned that already once before - LOL. But I can deal with "ISI" - no hard feelings, I hope.
LH, I do not have a clue where the files ntuser.dat.LOG1 and ntuser.dat.LOG2 came from. I would like to replace them wherever they are from. However I just dont know.
WHS, you are correct, you do a brilliant job on this site and I salute you :) After this post has been solved, I am going to delete this account and get a new one with only 3 digits in honour of your great work :P
You must log in to post.
