?
Solved

Missing Files due to Malware

Posted on 2011-09-02
2
Medium Priority
?
283 Views
Last Modified: 2012-05-12
ok guys i have another issue with some Malware. I had two clients in the last week come to me with similar issues. one was missing all their files, programs and pretty much everything. the other was missing most of their files and programs. When i say programs, i mean they lost all shortcuts to the applications, even the star menu ones. One machine was XP pro, and the other was Windows 7 Home Premium. i went ahead and ran Unhide.exe, which brought back most of the files, i then ran Malware Bytes from Safe Mode.(with networking to update the definitions) On both devices it found about 5 to 6 items some were trojans etc. further scans came up clean. All the flat files (.docx, .pdf, .jpg etc.) were unhidden when i ran Unhide but several of the application launchers (i.e. the .exe files) are still missing and pretty much everything in the start menu further than one folder deep is still missing. Is there a newer version of unhide i should be trying (i downloaded this one about 8 months ago), or another way to get back the applications? I have run unhide several times with out AntiVirus running per their instruction and have not gotten a different result. It seems there would be a registry fix for this, to reassociate the program files directories with the start menu programs list. Even that would not explain why some of the executable files were simply gone(not hidden).
0
Comment
Question by:Rebol
2 Comments
 
LVL 2

Accepted Solution

by:
rdudek101 earned 2000 total points
ID: 36476411
Looks like it was the virus that gave message that HDD was bad.

Basically it hid all the files.  If you go to Control Panel ->  Folder Options ->  View ->  Show Hidden Files and Folders.


As far as the start menu shortcuts:

WinXP  C Drive ->  Docs and Settings ->  User Account -> Application Data -> Local Settings ->Application Data -> temp -> smtmp

Vista/7  C Driver -> Users -> useraccount -> App Data -> Local -> temp -> smtmp

Inside those folders you'll see folders with numbers.  There should be all the shortcuts you're missing.  You just have to move them back in place and you'll be all set.

As far as the .exe files, run Malwarebyte's free utility and it should fix the registry that is messing with how applications launch.
0
 

Author Comment

by:Rebol
ID: 36478101
rdudek101,

Thanks buddy, that was the missing piece. i had found a few .exe's that i searched for in the app data folder but didn't realize all were there. Very good info thanks.
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question