Solved

Can not see files in Program Files folder

Posted on 2011-09-19
13
352 Views
Last Modified: 2012-05-12
Hi – I have a station that got infected and after cleaning it up and allowing to view hidden files the actual files in the Program Files folder can not been seen or executed and do not show up when select from the Start / All programs.

These files can be viewed from a different station on the network.

Any help will be greatly appreciated.
0
Comment
Question by:cspeaker
  • 4
  • 3
  • 2
  • +3
13 Comments
 
LVL 5

Accepted Solution

by:
jason987 earned 250 total points
Comment Utility
0
 

Author Comment

by:cspeaker
Comment Utility
Thanks - dis-abled anti-vius and ran twice but still same porblem.
0
 
LVL 5

Expert Comment

by:jason987
Comment Utility
Sounds like you may still be infected.

http://www.malwarebytes.org/
0
 
LVL 5

Expert Comment

by:jason987
Comment Utility
What virus scanner found the threat/what are you currently using?
0
 

Author Comment

by:cspeaker
Comment Utility
Malwarebytes and Trend Micro - the infection was theData Recovery Virus.

Ran both again and they both came up clean.
0
 
LVL 2

Expert Comment

by:R_odec
Comment Utility
You can try a system restore but after the restore be sure to rescan the drives.






0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 5

Expert Comment

by:AlokJain0412
Comment Utility
hi you use combofix

disable your antivirus
Download this  and run
its a amaging utility
Link
[Unofficial link removed by JustAMod]
0
 
LVL 23

Assisted Solution

by:phototropic
phototropic earned 250 total points
Comment Utility
Before using system restore, you might try running Rogue Killer:

http://www.experts-exchange.com/Virus_and_Spyware/Anti-Virus/A_4922-Rogue-Killer-What-a-great-name.html?sfQueryTermInfo=1+10+30+killer+rogu

or Rkill:

http://www.bleepingcomputer.com/download/anti-virus/rkill

and then running an updated Mbam immediately afterwards.

There are full removal instructions for this infection here:

http://www.bleepingcomputer.com/virus-removal/remove-data-recovery

Please post an Mbam scan for review.



0
 
LVL 30

Expert Comment

by:flubbster
Comment Utility
0
 

Author Comment

by:cspeaker
Comment Utility
OK - thanks everyone for you help.

Followed all of the steps above.

Most everything is working now except the program files - if you click on MS Office for example there is nothing there.
0
 
LVL 5

Expert Comment

by:AlokJain0412
Comment Utility
@ADMINISTRATOR

Sure for in future always refer legitimate sites links

  hi @cspeaker,
you please repair you msoffice once  
0
 

Author Closing Comment

by:cspeaker
Comment Utility
jason987 and  phototropic both helped so splitting points.

Thanks!
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Suggested Solutions

If you want to move up through the ranks in your technology career, talent and hard work are the bare necessities. But they aren’t enough to make you stand out. Expanding your skills, actively promoting your accomplishments and using promotion st…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
Notifications on Experts Exchange help you keep track of your activity and updates in one place. Watch this video to learn how to use them on the site to quickly access the content that matters to you.
Saved searches can save you time by quickly referencing commonly searched terms on any topic. Whether you are looking for questions you can answer or hoping to learn about a specific issue, a saved search can help you get the most out of your time o…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now