One of my client's called up with an infected system. I dont have physcial access to this machine, so safe mode is out of the question.
Although the malware seems to be removed, some of the symptoms remain. So far I have found:
Start menu is completely empty, even on the right hand side.
Cannot browse any disks. C: drive shows as empty through explorer and through cmd (dir)
You can start programs by cmd though if you know the path. I.E I can type cd c:\pro <tab> and it will auto-resolve program files. This was I am able to start programs directly.
I am able to search for programs in the Start Menu search bar.
System Restore is turned off (I think malware done it, as I've never manually turned it off and the user wouldnt know how to).
Any ideas on how to restore?