Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Recovery Malware - Empty "All Programs" folders


  • Please log in to reply
11 replies to this topic

#1 texcountry

texcountry

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:11:05 AM

Posted 09 May 2011 - 04:35 PM

Mod EDIT: Moved to the Am I Infected forum ~~ boopme

Hey, I figured out how to get my all programs folders restored to where they were no longer empty.

1)Go to the startup icon
2)then put cursor over "All Programs" and right click and click on "open"
3) then select the "programs" folder and right click and select "properties"
4) then select the "previous version" tab, await the previous versions to show up and select the folder that existed prior to your problems and hit restore and follow through with prompts.

VOILA!

Yours truly,
Texcountry

Edited by boopme, 18 July 2012 - 08:16 PM.


BC AdBot (Login to Remove)

 


#2 gailee

gailee

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 23 January 2012 - 04:01 PM

I can't find this in winxp pro.

#3 PhoenixMightier

PhoenixMightier

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:11:05 AM

Posted 27 January 2012 - 11:00 AM

Recent Malware likes to do this now. What I've done for all OS's is go to the properties of whatever you can't see and uncheck the hidden button. What I've also found though is that if things still are not showing up, there might still be remnants of the Malware on the PC.

#4 gailee

gailee

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 27 January 2012 - 12:20 PM

I used unhide.exe, did the trick.

#5 ShadowsofFate

ShadowsofFate

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:05 PM

Posted 07 February 2012 - 09:04 AM

depending on the type of infection that does this using unhide.exe alone doesnt always restore the all programs it will just restore the folders but they wont have any programs in them, i have a post in this section about how to restore the start menu all programs programs for windows 7 and windows vista. http://www.bleepingcomputer.com/forums/topic440607.htm

the previous versions tab is for windows vista and windows 7

#6 acid9burn

acid9burn

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 04 June 2012 - 01:38 PM

right click taskbar properties and yoiu can check the onces that you need in startmenu tab.
all your desktop items will be hidden in %temp%\smtmp folder to get ti back follow the steps below
open run and type "control folders"
view tab > show hidden files and folders,show system hidden files and folders hit apple
in run type %temp% and enter
find the folder smtmp which is hidden
copy all the contents from the folders inside the smtmp folder that say 1,2,3 etc..
you can copy those folders to apropriate locations

NB : if you dont find the smtmp folder in %temp% then look it up in c:\widnows\temp

#7 Not_sirius

Not_sirius

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:09:05 AM

Posted 17 July 2012 - 11:37 PM

Yeah had the virus go through a client machine and cleaned it up. All the folders were empty plus I was missing all the things in the right pane of the start menu such as CONTROL PANEL, DEVICES AND PRINTERS, ETC. Well, I found the SMTMP folder with 1 and 4 seemingly intact, but am not sure where to put the contents.

I feel I'm nearly there with the help I've gotten here again.

#8 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:05 AM

Posted 18 July 2012 - 02:10 AM

Not_sirius

What is your operating system?

#9 Not_sirius

Not_sirius

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:09:05 AM

Posted 18 July 2012 - 06:25 PM

Sorry, a little basic information might just help, huh?

WIN7 home premium 32 bit.

Edited by Not_sirius, 18 July 2012 - 06:29 PM.


#10 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:05 AM

Posted 18 July 2012 - 08:40 PM

Did you follow the procedure here

http://www.bleepingcomputer.com/forums/topic405109.html

#11 Not_sirius

Not_sirius

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:09:05 AM

Posted 19 July 2012 - 09:55 PM

THANK YOU!

Those were the locations I needed.

#12 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:05 AM

Posted 19 July 2012 - 09:55 PM

You're welcome :)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users