Unhide.exe - A introduction as to what this program does

#151 kevin331

New Member

Group: Members
Posts: 2
Joined: 24-January 12

Posted 24 January 2012 - 12:35 PM

Hi Grinler.

I'm running Windows 7 and there isn't a smtmp folder in the temp folder. I ran unhide but only a few icons in the pin to start menu appeared. I still have some desktop icons missing, and all the other programs in the start menu have 'empty' in their folders (even though the files are there when i drill down to the actual folder). Is there a way to find the missing desktop icons and restore the files in all the programs folders? Thanks.

#152 Grinler

Bleep Bleep!

Group: Admin
Posts: 36,603
Joined: 24-January 04
Gender:Male
Location:USA

Posted 24 January 2012 - 12:41 PM

If there is no smtmp folder in %temp%, unhide can't do anything for you. Someone reported that they found their smtmp folder in C:\Windows\Temp. Do you see it there?

Lawrence Abrams
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!

#153 kevin331

New Member

Group: Members
Posts: 2
Joined: 24-January 12

Posted 24 January 2012 - 09:50 PM

nope, not there. i'm trying broni's suggestion of bringing back the links manually:

http://www.bleepingcomputer.com/forums/topic399676.html/page__view__findpost__p__2274574

#154 Grinler

Bleep Bleep!

Group: Admin
Posts: 36,603
Joined: 24-January 04
Gender:Male
Location:USA

Posted 25 January 2012 - 08:24 AM

The first post of this topic contains links to scripts that allow you to recreate the default start menu for various Windows versions.

#155 narenxp

Forum Addict

Group: BC Advisor
Posts: 2,725
Joined: 24-October 11
Gender:Male
Location:India

Posted 25 January 2012 - 08:34 AM

If SMTMP folder is deleted,recuva can be used to restore the folder

Download recuva

http://www.filehippo.com/download_recuva/

Install it and when you get the recuva screen

Click Cancel on the wizard.
Click on Options... >> Actions Tab. Check "Restore folder structure."
Run a regular scan on the system drive.

When complete, use the filter box in the upper right corner and type

SMTMP for XP

*.lnk for Vista & 7

Select all the files and recover them to a folder.Browse through the folder.
Now you should get back the SMTMP folder

Good luck

This post has been edited by narenxp: 25 January 2012 - 08:36 AM

#156 Grinler

Bleep Bleep!

Group: Admin
Posts: 36,603
Joined: 24-January 04
Gender:Male
Location:USA

Posted 25 January 2012 - 08:39 AM

Good tip! Thanks.

#157 white_snoopy

New Member

Group: Members
Posts: 9
Joined: 17-January 12

Posted 28 January 2012 - 06:03 PM

Grinler,

I have not post the hardware problem to the forum yet because I found that I still have the trojan virus. At this time I found Win32.Genome and I posted my Genome problem at here: http://www.bleepingcomputer.com/forums/topic214010.html/page__st__15__gopid__2575032#entry2575032

Please help e out.

Thank you.

#158 iceman-x

New Member

Group: Members
Posts: 1
Joined: 30-January 12
Gender:Male
Location:Texas

Posted 30 January 2012 - 03:05 AM

Grinler, can i get the original .bat file?

I would like to add a few things at the end to streamline a few thing i have to do everyday and would you have built is great and works, why fix what not broken right? lol

Thanks
Iceman

This post has been edited by iceman-x: 30 January 2012 - 03:06 AM

#159 Grinler

Bleep Bleep!

Group: Admin
Posts: 36,603
Joined: 24-January 04
Gender:Male
Location:USA

Posted 30 January 2012 - 08:25 AM

Iceman feel free to private message me to discuss.

#160 Hulu

New Member

Group: Members
Posts: 1
Joined: 09-February 12

Posted 09 February 2012 - 11:50 PM

Hello I'm new on this, it looks like i'm also infected with this virus, already run the http://download.bleepingcomputer.com/grinler/fakehdd/win7-32-sm-reset.exe and show the hidden folders, is there anything else that i need to do to remove this virus?

thanks
hulu9758

#161 quietman7

Bleepin' Janitor

Group: Global Moderator
Posts: 25,517
Joined: 09-July 05
Gender:Male
Location:Virginia, USA

Posted 10 February 2012 - 06:24 AM

Hulu

If you are still having issues with malware infection, you should start a new topic in the Am I infected? What do I do? forum for assistance or follow the instructions provided in the Preparation Guide For Requesting Help.

Microsoft MVP - Consumer Security 2007-2012

Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#162 green1

New Member

Group: Members
Posts: 2
Joined: 15-February 12

Posted 15 February 2012 - 07:01 PM

followed video intructions and downloads from your forum here, really appreciate the help, pretty green on fixing these type issues but your tutorial was a lifesaver, thanks again !!

#163 thatguy92

New Member

Group: Members
Posts: 2
Joined: 19-February 12

Posted 19 February 2012 - 04:51 PM

I am currently attempting to fix my friends computer that has this problem and I was wondering if I made a bigger mistake by activating Norton and removing what was thought to be the virus and tracking cookies along with it. how do I know for sure if I made a mistake? I also attempted to download the suggested .exe but the computer would not give me the option of running the program what should I do?

#164 thatguy92

New Member

Group: Members
Posts: 2
Joined: 19-February 12

Posted 19 February 2012 - 05:19 PM

I just ran on my friends computer that is suffering from this and the Unhide.exe and it stated

Windows Script Host:

Can't find script Host "VBScript" for script
"C:\Users\NAME~1\AppData\Local\Temp\info.vbs".

What should I do?

If it helps any I was unaware to use this method earlier and had used a Norton Security Full Scan and deleted the "Virus" and "tracking Files" and If I remember correctly some temporary file.
Have I possible made my situation worse by doing that?

#165 whftherb

Member

Group: Members
Posts: 48
Joined: 30-November 04
Gender:Male

Posted 20 February 2012 - 03:18 PM

Grinler -

Does Unhide need to be run on each account on a Windows machine? I assume it has to have Admin privs. Just curious because I hosed my %temp% folder - bad-bad-bad!

Second: The script you put out for restoring the default Win XP desktop. Under what conditions will it NOT work. I've tried a bunch of times and it fails to populate the desktop on either my Admin or my User accts. I've changed User to Admin rights, still no glory. I still have the right half of Start, missing. I've also changed the desktop wallpaper. NG.

Thank you for trying.

H

This post has been edited by whftherb: 20 February 2012 - 03:19 PM