Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Start menu and programs still empty after using unhide.exe and systemlook.exe


  • Please log in to reply
10 replies to this topic

#1 luv09

luv09

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 21 May 2011 - 09:24 PM

Hi
I have windows 7 home premium 64bit
this has to be one of the nastiest viruses i have ever gotten and it kept telling me my hard drive clusters were messed up(laptop is barely 3 weeks old) and after i rebooted it, a program called PC performance and stability analysis kept running. I removed it though(maybe!notsure) using mbam and sas in safe mode. and ran both programs twice. after this everything was missing in the start menu and programs list. as well as the desktop shorcuts and my wallpaper was gone just a black screen. after reading over other topics of people have the same problem, i found unhide.exe which helped somewhat it found all my documents and such but not much. another topic i found explained how to use systemlook.exe and it keeps saying file not found and i have no idea of what do next? also im not even sure this trojan is gone, beacuse some programs get errors when they open up.
Any help is greatly appreciated
thanks






sorry if my english messy. wrote it in a hurry

BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:59 AM

Posted 21 May 2011 - 11:36 PM

Did you, at any point, run any temporary file cleaner?

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

64-bit users go HERE
  • Double-click SystemLook.exe to run it.
  • Vista\Win 7 users:: Right click on SystemLook.exe, click Run As Administrator
  • Copy the content of the following box into the main textfield:
    :dir
    %Temp%\smtmp /s
    
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#3 luv09

luv09
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 22 May 2011 - 10:00 AM

I did use cc cleaner once afterwards. but can i use recuva to find the temp folder?

#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:59 AM

Posted 22 May 2011 - 12:18 PM

Recuva won't restore temporary files.
Unfortunately, since you cleaned temporary files through CCleaner, we can't solve your issue.
You'll have to restore those shortcuts manually.

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#5 luv09

luv09
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 22 May 2011 - 09:47 PM

how do you do it manually? (sry if this is a stupid question)
thanks

#6 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:59 AM

Posted 22 May 2011 - 10:16 PM

I need more info first...

beacuse some programs get errors when they open up

What programs would those be, how do you try to open them and what kind of error are you getting?

Also, what exactly is missing at this point?

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#7 luv09

luv09
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 23 May 2011 - 06:54 PM

the only thing missing as of now are start menu programs they still come up empty. but if i type the programs name in the search bar the shortcut comes up. also the error problem didnt come up again so i think im fine for that.

#8 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:59 AM

Posted 23 May 2011 - 07:16 PM

This is what you have to do.

Right click on any given program in start menu, click "Properties".
In "Target" window, you'll have enter a path to that given program executable file.

Let's say, I want to recreate Firefox shortcut, I'll put this in "Target" window:
"C:\Program Files\Mozilla Firefox 4\firefox.exe"
(make sure to include quotes)

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#9 gauss

gauss

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:09:59 AM

Posted 30 May 2011 - 04:25 PM

Hi,

I had a similar problem (and I'm on Windows 7). I have the virus off, and unhide.exe worked for the most part - the start menu isn't showing programs, though. Just folders. I never used CCleaner or anything like that. Is there a way to get them back without doing it manually?

Thanks!

#10 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:59 AM

Posted 30 May 2011 - 04:31 PM

@ gauss

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

64-bit users go HERE
  • Double-click SystemLook.exe to run it.
  • Vista\Win 7 users:: Right click on SystemLook.exe, click Run As Administrator
  • Copy the content of the following box into the main textfield:
    :dir
    %Temp%\smtmp /s
    
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#11 Jacee

Jacee

    Bleeping around


  • Malware Response Team
  • 3,716 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:08:59 AM

Posted 30 May 2011 - 09:59 PM

Let's see if this works ... follow the tutorial http://www.sevenforums.com/tutorials/135246-start-menu-all-programs-windows-7-restore-default-shortcuts.html

MS_MVP.gif
MS MVP Windows-Security 2006-2016
Member of UNITE, the Unified Network of Instructors and Trusted Eliminators

Admin PC Pitstop





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users