Missing Files due to Malware

Rebol
Rebol used Ask the Experts™
on
ok guys i have another issue with some Malware. I had two clients in the last week come to me with similar issues. one was missing all their files, programs and pretty much everything. the other was missing most of their files and programs. When i say programs, i mean they lost all shortcuts to the applications, even the star menu ones. One machine was XP pro, and the other was Windows 7 Home Premium. i went ahead and ran Unhide.exe, which brought back most of the files, i then ran Malware Bytes from Safe Mode.(with networking to update the definitions) On both devices it found about 5 to 6 items some were trojans etc. further scans came up clean. All the flat files (.docx, .pdf, .jpg etc.) were unhidden when i ran Unhide but several of the application launchers (i.e. the .exe files) are still missing and pretty much everything in the start menu further than one folder deep is still missing. Is there a newer version of unhide i should be trying (i downloaded this one about 8 months ago), or another way to get back the applications? I have run unhide several times with out AntiVirus running per their instruction and have not gotten a different result. It seems there would be a registry fix for this, to reassociate the program files directories with the start menu programs list. Even that would not explain why some of the executable files were simply gone(not hidden).
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Looks like it was the virus that gave message that HDD was bad.

Basically it hid all the files.  If you go to Control Panel ->  Folder Options ->  View ->  Show Hidden Files and Folders.


As far as the start menu shortcuts:

WinXP  C Drive ->  Docs and Settings ->  User Account -> Application Data -> Local Settings ->Application Data -> temp -> smtmp

Vista/7  C Driver -> Users -> useraccount -> App Data -> Local -> temp -> smtmp

Inside those folders you'll see folders with numbers.  There should be all the shortcuts you're missing.  You just have to move them back in place and you'll be all set.

As far as the .exe files, run Malwarebyte's free utility and it should fix the registry that is messing with how applications launch.

Author

Commented:
rdudek101,

Thanks buddy, that was the missing piece. i had found a few .exe's that i searched for in the app data folder but didn't realize all were there. Very good info thanks.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial