Solved

Missing Files due to Malware

Posted on 2011-09-02
2
270 Views
Last Modified: 2012-05-12
ok guys i have another issue with some Malware. I had two clients in the last week come to me with similar issues. one was missing all their files, programs and pretty much everything. the other was missing most of their files and programs. When i say programs, i mean they lost all shortcuts to the applications, even the star menu ones. One machine was XP pro, and the other was Windows 7 Home Premium. i went ahead and ran Unhide.exe, which brought back most of the files, i then ran Malware Bytes from Safe Mode.(with networking to update the definitions) On both devices it found about 5 to 6 items some were trojans etc. further scans came up clean. All the flat files (.docx, .pdf, .jpg etc.) were unhidden when i ran Unhide but several of the application launchers (i.e. the .exe files) are still missing and pretty much everything in the start menu further than one folder deep is still missing. Is there a newer version of unhide i should be trying (i downloaded this one about 8 months ago), or another way to get back the applications? I have run unhide several times with out AntiVirus running per their instruction and have not gotten a different result. It seems there would be a registry fix for this, to reassociate the program files directories with the start menu programs list. Even that would not explain why some of the executable files were simply gone(not hidden).
0
Comment
Question by:Rebol
2 Comments
 
LVL 2

Accepted Solution

by:
rdudek101 earned 500 total points
Comment Utility
Looks like it was the virus that gave message that HDD was bad.

Basically it hid all the files.  If you go to Control Panel ->  Folder Options ->  View ->  Show Hidden Files and Folders.


As far as the start menu shortcuts:

WinXP  C Drive ->  Docs and Settings ->  User Account -> Application Data -> Local Settings ->Application Data -> temp -> smtmp

Vista/7  C Driver -> Users -> useraccount -> App Data -> Local -> temp -> smtmp

Inside those folders you'll see folders with numbers.  There should be all the shortcuts you're missing.  You just have to move them back in place and you'll be all set.

As far as the .exe files, run Malwarebyte's free utility and it should fix the registry that is messing with how applications launch.
0
 

Author Comment

by:Rebol
Comment Utility
rdudek101,

Thanks buddy, that was the missing piece. i had found a few .exe's that i searched for in the app data folder but didn't realize all were there. Very good info thanks.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Introduction: I have always been a big fan of Windows but my liking towards it is slowly being eroded by the variety of other Applications that I encounter, when I browse the Web. Most of the software available is free and maybe Open Source too. …
Have you ever had a hard drive that you can't boot into, but need to change the registry? Here is the solution! This article guides you through accessing and editing a registry of a non-primary drive. To read registry information on a non-prim…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now