We help IT Professionals succeed at work.

Windows Vista malware has "hidden" program list + quicklaunch menu

703 Views
Last Modified: 2013-11-22
Hi all,

I was recently hit with a bad case of malware which caused most of my files and programs to be hidden. Not exactly sure where the virus came from, possibly a bad torrent...

I believe I was able to get rid of the virus thanks to MalwareBytes, however, most of my files and programs seem to be hidden. I was able to use "unhide.exe" from Bleeping Computer (http://www.bleepingcomputer.com/forums/topic405109.html) to get my desktop files back to normal, however, my program folders under the start menu are all marked as "(empty)" and my QuickLaunch menu has also been cleaned out. I can still locate and use the majority of the programs upon a search, so they exist, just not in the appropriate spot. I've tried to copy and paste the program list into the appropriate start menu folder, but the user control permissions seems to be making this impossible.. I assume it's possible the malware had some sort of affect on user control although I could be wrong.

Unfortunately a system restore freezes on the initializing stage (both in regular mode and safe mode) so I assume the virus corrupted something with the system restore.

I was previously using AVG (free edition) when the malware hit and have since switched to Microsoft Security Essentials. I've scanned with MSE (full scan) and MalwareBytes (full scan) and it's no longer picking up anything malicious although I've noticed the annoying "Google redirect" bug taking place within Firefox, which leads me to believe that the virus came from somewhere within Firefox (like I said, possibly a torrent I downloaded, etc) and could possibly still exist on my system? Aside from the misplaced program list, missing quick launch items, missing system restore, and Google redirect virus (lol), I often get a random “Windows Explorer has stopped working.” notification in which Windows Explorer then restarts itself.. I would estimate this error takes place about once or twice an hour.

I’ve also run “rkill” and “Microsoft Fixit”, neither of which helped.

I've read a TON of threads about people having similar issues but nothing seems to be working for my particular case.

I am running Windows Vista, 32 Bit Home Edition.  

Any suggestions? Thanks!
Comment
Watch Question

CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
CERTIFIED EXPERT
Most Valuable Expert 2013
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
Thanks

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.