Steam apps folder wiped all my games

[Carrot]

So i was just starting to play some VR when i got an error message regarding my steam apps folder eventually it launched and i was going to play boneworks which it then had to update and now all the games in my steam apps folder are gone and it hasn't free'd up any space at all so i cant even reinstall them because there isn't enough space on my pc

[AmirAli]

My whole steam folder and everything has disappeared from my hard drive 2 or 3 times recently, very frustrating, I don't have any antivirus, and I also added an exception in the Windows firewall for the steam folder before the last time everything disappeared just like that.

[AmirAli]

I'm gonna try track the deletion of my files following this link https://www.manageengine.com/products/active-directory-audit/how-to/track-file-and-folder-creation-deletion-in-windows.html

[AmirAli]

I've turned off Storage Sense in my Windows settings, removed my antivirus software and made an exception in the Windows firewall for the steam folder, but the steam folder disappeared anyway, so that is why I will try to use the link above. I recommend you to backup your steam files on another hard drive.

[AmirAli]

The process C:/Users/myUserName/AppData/Local/Temp/~nsuA.tmp/Un_A.exe has deleted all the files now recently again (when I tracked the deletion in Windows)! Now it is deleted from my system. Will try again later.

[Papa]

AmirAli님이 먼저 게시:

The process C:/Users/myUserName/AppData/Local/Temp/~nsuA.tmp/Un_A.exe has deleted all the files now recently again (when I tracked the deletion in Windows)! Now it is deleted from my system. Will try again later.

That .exe file is sometimes legitimate, but there is known malware that disguises itself with that same filename. You should check your computer thoroughly for infections.

[AmirAli]

Thanks Papa, I did with some softwares but didnt find anything. I'm going to reinstall Windows 10 and start from scratch (saving all important files and downloading drivers before).

[crunchyfrog]

AmirAli님이 먼저 게시:

Thanks Papa, I did with some softwares but didnt find anything. I'm going to reinstall Windows 10 and start from scratch (saving all important files and downloading drivers before).

Yeah,.that won't solve your issues as this is just flailing around wildly.

Here's what you should try. Restart Windows in safe mode WITH networking. Run Steam, and see how you get on (once you've made sure you've made exception for steam in your antivirus beforehand).

If everything works, then your problem is your antivirus or firewall or some other type of security utility.

[AmirAli]

Maybe I need to use a good 3rd party firewall or antivirus, it doesn't find anything when I scan the computer. The file I mentioned just pops up out of the blue and does the deletion of the files. I wonder if I can prevent the steam folder and all its files from being deleted by fixing the permissions in the security options for the folder? I tried to block the file from doing things through the Windows Firewall but it wasn't possible.

Haven't tried crunchyfrog's suggestion yet.

[ReBoot]

AmirAli님이 먼저 게시:

Maybe I need to use a good 3rd party firewall or antivirus, it doesn't find anything when I scan the computer. The file I mentioned just pops up out of the blue and does the deletion of the files. I wonder if I can prevent the steam folder and all its files from being deleted by fixing the permissions in the security options for the folder? I tried to block the file from doing things through the Windows Firewall but it wasn't possible.

Haven't tried crunchyfrog's suggestion yet.

It is possible to mess with securiy settings to protect the Steam folder from rogue processes, but that's rather complicated and comes with side-effects.

As is often the case, your best option is to fix the root cause. What is this rogue process that kills your stuff for the lulz?

I suggest you set up Process Monitor to look what's going on. Something else is putting that Un_A.exe there. Find out what it is and make it shut up.

[crunchyfrog]

AmirAli님이 먼저 게시:

Maybe I need to use a good 3rd party firewall or antivirus, it doesn't find anything when I scan the computer. The file I mentioned just pops up out of the blue and does the deletion of the files. I wonder if I can prevent the steam folder and all its files from being deleted by fixing the permissions in the security options for the folder? I tried to block the file from doing things through the Windows Firewall but it wasn't possible.

Haven't tried crunchyfrog's suggestion yet.

The thing about safe mode with networking is that it neatly divides the problem down to a few possibilities.

If you find the whole thing works when using safe mode with networking, then it proves that it IS software on your computer causing this.

The trick then is to find out what.

But generally speaking even if you can't see the programs being excluded in your antivirus, you can still set up exceptions and see if you can fix it.

[AmirAli]

Thanks for all suggestions by the way!
Gonna try this link now https://www.ryadel.com/en/windows-10-server-block-infected-exe-executables-software-restriction-group-policy-gpedit/
I noticed I had to put these restrictions after I had installed PUBG.
It didn't work, but better than last time I think.
Now I found some differences in the file paths for different OS-versions in the link above and in this link http://woshub.com/how-to-block-viruses-and-ransomware-using-software-restriction-policies/
It didn't work anyway. I also wrote on a Microsoft forum, but the guy who tried to help me there couldn't fix the issue...

[AmirAli]

(I did all this after I had installed both Steam and PUBG)

I followed this link and it works for now https://answers.microsoft.com/en-us/windows/forum/windows_7-files/protect-files-from-being-deleted/814dbe4c-8957-4e39-9fd7-b613e2812851?auth=1

I also added the real path to the Temp folder like C:\Users\userName\AppData\Local\Temp\*.exe and C:\Users\userName\AppData\Local\Temp\*\*.exe when restricting it following the ryadel link mentioned before.

I'll try to play again tonight, the most interesting is that Un_A.exe got some friends from the whole alphabet like Un_B.exe etc in the same folder but Steam is still here!

Edit: Steam is working, but PUBG was uninstalled though the files were still there. The steam shortcut disappeared from the desktop aswell, but that isnt a big problem.

Edit: I also got banned for 2 days for strange gaming behaviour, but I don't know if it is because of this or something else, I feel innocent.

Edit: Now I played and my Steam-folder or PUBG hasn't disappeared since yesterday.

Edit: Now PUBG was uninstalled again and almost everything from its folder disappeared. I might have changed some permissions for the folder, will have another look at it again. Steam is still installed and working. I must track the PUBG folder from now on in Event log in Windows to see what deleted the files. I think one reason is that PUBG needed an update.

Edit: Now after two days I can start the game but it stops before the lobby, I also get the error “Failed To Create Tslgame.exe” when starting the game.

Edit: Now it worked again after a few times starting the game with the last mentioned error.

Edit: After the last PUBG-update most of the files disappeared for no special reason in the PUBG folder after I rebooted my computer, so Steam works normal, PUBG is uninstalled and has only a few MB left in the folder. The good thing is that I have a backup of the whole common folder on another HD.