How can I find .bak files from command prompt

May 30, 2017 at 19:22:31
Specs: Pc
Someone turned my user file into a bak file now I can not access my computer other than with windows reboot flash drive. I only have only discovered how to open regedit and command prompt from it. Also since my user profile was turned into a bak file it disappeared but I know it has not been deleted. Please help me find the bak file so that I can change it back. Also the bootable flash drive loads as drive x instead of c

See More: How can I find .bak files from command prompt

Reply ↓  Report •

#1
May 30, 2017 at 20:39:30
Can you can access your main drive (C:)? Sounds like you will need to do more than recover/rename this one file if malicious software is involved. If your computer won't boot to C:, then you will probably have to either slave the drive or use recovery methods provided by your version of windows (which was unspecified in your post). If you can't examine C: to determine its status, then you will probably have to slave it to a healthy drive and OS (as drive D: for example). Hopefully, others here will have more help, since this is just a "first response" and I'm not familiar with all aspects of recovery.

Reply ↓  Report •

#2
May 30, 2017 at 21:03:42
Every time go to C drive to try to find the bak file it can't find it and I am running windows 10 I am able to get to command prompt from a bootable windows drive

Reply ↓  Report •

#3
May 30, 2017 at 21:40:51
c:
dir /s /a *.bak /od
or, if you want to save it: on x, run from x:
dir /a /s /od c:\*.bak > bakfils

this will deliver the .bak files in date order. The latest ones are most important. You will need to rename them to their original extensions, assuming they're not corrupted.
(edited with additions)

message edited by nbrane


Reply ↓  Report •

Related Solutions

#4
May 30, 2017 at 23:42:25
Here are the files names of the files I need to move
grooveintlresouce.dll.94f42d.bak
grooveex.dll.aa80a12.bak
office.odf.67ea7b4.bak

Here is the route that they came from can you tell me the code to send them back?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProfileList.

Thank you


Reply ↓  Report •

#5
May 31, 2017 at 23:33:33
I'm just guessing at this, on drive C::

copy grooveintlresouce.dll.94f42d.bak grooveintlresouce.dll
copy grooveex.dll.aa80a12.bak grooveex.dll
copy office.odf.67ea7b4.bak office.odf

I used copy so the originals will still be available. Not sure what to do with the registry.

message edited by nbrane


Reply ↓  Report •

Ask Question