?
Solved

Missing Files due to Malware

Posted on 2011-09-02
2
Medium Priority
?
279 Views
Last Modified: 2012-05-12
ok guys i have another issue with some Malware. I had two clients in the last week come to me with similar issues. one was missing all their files, programs and pretty much everything. the other was missing most of their files and programs. When i say programs, i mean they lost all shortcuts to the applications, even the star menu ones. One machine was XP pro, and the other was Windows 7 Home Premium. i went ahead and ran Unhide.exe, which brought back most of the files, i then ran Malware Bytes from Safe Mode.(with networking to update the definitions) On both devices it found about 5 to 6 items some were trojans etc. further scans came up clean. All the flat files (.docx, .pdf, .jpg etc.) were unhidden when i ran Unhide but several of the application launchers (i.e. the .exe files) are still missing and pretty much everything in the start menu further than one folder deep is still missing. Is there a newer version of unhide i should be trying (i downloaded this one about 8 months ago), or another way to get back the applications? I have run unhide several times with out AntiVirus running per their instruction and have not gotten a different result. It seems there would be a registry fix for this, to reassociate the program files directories with the start menu programs list. Even that would not explain why some of the executable files were simply gone(not hidden).
0
Comment
Question by:Rebol
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 2

Accepted Solution

by:
rdudek101 earned 2000 total points
ID: 36476411
Looks like it was the virus that gave message that HDD was bad.

Basically it hid all the files.  If you go to Control Panel ->  Folder Options ->  View ->  Show Hidden Files and Folders.


As far as the start menu shortcuts:

WinXP  C Drive ->  Docs and Settings ->  User Account -> Application Data -> Local Settings ->Application Data -> temp -> smtmp

Vista/7  C Driver -> Users -> useraccount -> App Data -> Local -> temp -> smtmp

Inside those folders you'll see folders with numbers.  There should be all the shortcuts you're missing.  You just have to move them back in place and you'll be all set.

As far as the .exe files, run Malwarebyte's free utility and it should fix the registry that is messing with how applications launch.
0
 

Author Comment

by:Rebol
ID: 36478101
rdudek101,

Thanks buddy, that was the missing piece. i had found a few .exe's that i searched for in the app data folder but didn't realize all were there. Very good info thanks.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes how to set permissions to allow a limited-permissions user to start and stop a particular System Service.   It is always best to give users only the permissions that they need to perform their job, so tweaking particular permi…
The way I use Experts Exchange to assist me in analyzing and diagnosing a problem is I first enter a Verbose Question at Experts Exchange like: Office 2007 will hang when opening and saving files I then launch WordPad (any text editor will do) an…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question