Parallels Desktop: Windows 7 User Profile lost all files

I posted the below on the Ask Different site. I am also posting here in the hope I can get an answer.

My boss logged into her Windows 7 Parallels Desktop VM (runs on an 2014 iMac) and noticed that all files where missing from the desktop. When she left yesterday they all were there. She rebooted and still no luck.

When I came in and checked I tried the following:

1. Unhide hidden files
2. Reboot the VM
3. Check the Windows error log: Did not find something that I could link to this.
4. I went to: C:\Users[Username]\Desktop - nothing.
5. Called Paralles tech support: They did not have an idea.
6. Called them back and thhey suggested to run a recovery program. (Not Done yet)
7. I checked the Windows Logs again and found that they have NOT been purged. i.e. there are still log files from yesterday, last week etc etc. Logs are intact. Only files are gone.

Additional things to note:

• Time Machine is NOT configured. (I just turned it on!)
• Windows Backup is NOT configured.
• The last thing she did last night was open the recycle bin and delete older files (i.e. not the entire recycle bin). Then suddenly all files were gone from the bin.
• Windows boots fine
• I somehow have the feeling that the VM was reset to an earlier image or something. But I do not know how and if this is possible.
• Mac seems to work fine
• The Mac and Windows are both offline so no updates have been done in a while.

Any ideas would be greatly appreciated.

EDIT:
I asked a colleague and he suggested to check for snapshots of Parallels. He thinks that Parallels automatically reverted to an earlier snapshot. How can I test for for this and confirm?

 

Hi PhilipS2, to find whether your Windows virtual machine was reverted to a previous snapshot, go to Actions > Manage Snapshots and check if you have any existing snapshots. Also, check if you have Smart Guard turned on which will take snapshots automatically.

 

Thanks Arun@Parallels,
There is one snapshot from November 2015. Smart Guard is no enabled.

 

Parallels Desktop will not automatically revert to previous snapshots. Please check the size of Windows pvm file and also look for the recent restore point, if created, in Windows virtual machine.

 

Thanks Arun,

The Windows PVM file is about 64 GB.

There is only one System Restore point: Automatic Restore Point from 20 Jul @ 2:15 am. It could be that this Restore point was created before everything went to hell.

What do you recommend? Do a backup and then test to restore on the copy first? Would this also return the files?

 

PhilipS2, take a snapshot of Windows virtual machine from Actions > Take Snapshot.
Take a Backup of your Windows virtual machine (pvm file) before restoring it from the restore point.
Let us know if it helps.