Solved

Missing Files due to Malware

Posted on 2011-09-02
2
277 Views
Last Modified: 2012-05-12
ok guys i have another issue with some Malware. I had two clients in the last week come to me with similar issues. one was missing all their files, programs and pretty much everything. the other was missing most of their files and programs. When i say programs, i mean they lost all shortcuts to the applications, even the star menu ones. One machine was XP pro, and the other was Windows 7 Home Premium. i went ahead and ran Unhide.exe, which brought back most of the files, i then ran Malware Bytes from Safe Mode.(with networking to update the definitions) On both devices it found about 5 to 6 items some were trojans etc. further scans came up clean. All the flat files (.docx, .pdf, .jpg etc.) were unhidden when i ran Unhide but several of the application launchers (i.e. the .exe files) are still missing and pretty much everything in the start menu further than one folder deep is still missing. Is there a newer version of unhide i should be trying (i downloaded this one about 8 months ago), or another way to get back the applications? I have run unhide several times with out AntiVirus running per their instruction and have not gotten a different result. It seems there would be a registry fix for this, to reassociate the program files directories with the start menu programs list. Even that would not explain why some of the executable files were simply gone(not hidden).
0
Comment
Question by:Rebol
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 2

Accepted Solution

by:
rdudek101 earned 500 total points
ID: 36476411
Looks like it was the virus that gave message that HDD was bad.

Basically it hid all the files.  If you go to Control Panel ->  Folder Options ->  View ->  Show Hidden Files and Folders.


As far as the start menu shortcuts:

WinXP  C Drive ->  Docs and Settings ->  User Account -> Application Data -> Local Settings ->Application Data -> temp -> smtmp

Vista/7  C Driver -> Users -> useraccount -> App Data -> Local -> temp -> smtmp

Inside those folders you'll see folders with numbers.  There should be all the shortcuts you're missing.  You just have to move them back in place and you'll be all set.

As far as the .exe files, run Malwarebyte's free utility and it should fix the registry that is messing with how applications launch.
0
 

Author Comment

by:Rebol
ID: 36478101
rdudek101,

Thanks buddy, that was the missing piece. i had found a few .exe's that i searched for in the app data folder but didn't realize all were there. Very good info thanks.
0

Featured Post

Enroll in May's Course of the Month

May’s Course of the Month is now available! Experts Exchange’s Premium Members and Team Accounts have access to a complimentary course each month as part of their membership—an extra way to increase training and boost professional development.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
Many times while working on a computer regardless of any Operating System, lag and crashes seem to creep in, hindering your working speed. Sometimes, it can also cause your work to be lost unexpectedly and as a result, you are unable to meet your de…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question