Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Windows XP Recovery Virus

  • Please log in to reply
1 reply to this topic

#1 LMull


  • Members
  • 1 posts
  • Local time:10:25 AM

Posted 18 May 2011 - 11:12 AM

I recently got the Windows XP Recovery Virus on my computer and like many others on this forum had my Programs in the Start Menu showing up empty. Yesterday, I found them all in the following location on my c: drive

c: Documents and Settings\User Name\Local Settings\Temp\smtmp\1

I was able to copy all items from this directory and then just pasted them back to the correct directory (Start Menu on my c: drive) and now all my programs on the start menu are no longer empty.

Hopefully this helps others having this same issue.

BC AdBot (Login to Remove)


#2 hamluis



  • Moderator
  • 56,573 posts
  • Gender:Male
  • Location:Killeen, TX
  • Local time:10:25 AM

Posted 18 May 2011 - 01:15 PM

I don't know if I would have done that...did you do a Google search for the folder indicated...to see what it might represent?

Reason I ask is that path on my system...does not include a folder labeled smtmp.

I don't know if that's significant, but the only other readable/valid reference I find to such folder...is at http://www.threatexpert.com/report.aspx?md5=d53a228938822dd04236ed9a76891951 .

I would be concerned since that folder seems (my uneducated opinion) to have been created as a consequence of some malware item...at least, that's the interpretation I give it.


Edited by hamluis, 18 May 2011 - 01:16 PM.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users