Because we're not sure what damage was done, we clone the drive so we can go back and try again.
Step 2. POWERSHELL finds files by date.
Try this: https://www.google.com/search?q=powershell+files+after+certain+date
forfiles /P . /S /D +05/27/2017
Someone turned my user file into a bak file now I can not access my computer other than with windows reboot flash drive. I only have only discovered how to open regedit and command prompt from it. Also since my user profile was turned into a bak file it disappeared but I know it has not been deleted. Please help me find the bak file so that I can change it back

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic