How'd u go with this Rik? Check Eventvwr for any clues. Check Language settings too, perhaps a rootkit that stealths? Also, has he plugged the external drive into other systems before the corruption?