Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Recovery Virus


  • Please log in to reply
8 replies to this topic

#1 texmex01

texmex01

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:36 AM

Posted 30 May 2011 - 05:27 AM

After removing the Windows Recovery Virus my desktop icons are grayed out and there are no programs in my program start file.

rmonroe01

BC AdBot (Login to Remove)

 


#2 SweetTech

SweetTech

    Agent ST


  • Members
  • 13,421 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Antarctica
  • Local time:06:36 AM

Posted 30 May 2011 - 10:12 AM

Try this:

Please download UnHide.exe by Grinler.

It will unhide folders/files that were set to be hidden by the infection you had.

Have I helped you? If you'd like to assist in the fight against malware, click here Posted Image


The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.


#3 texmex01

texmex01
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:36 AM

Posted 31 May 2011 - 12:24 PM

SweetTech,

That file worked great to where I can see my program file in the start menu and my desktop icons are not ghosted out. But, the only thing is all my program files are empty. If I go to windows explorer I can see the different file in each of my program.

I'm making some progress

Thanks for your valuable help

texmex01

#4 LD5

LD5

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:36 AM

Posted 31 May 2011 - 12:59 PM

I wish I could help you texmex, but I think you (we) are in the right place. BC was a god-send. My computer was also infected by the Windows Recovery virus/malware. BC provided the info needed to get my computer running again. I also had trouble with hidden files and folders. The unhide.exe program from grinler restored all but the system utilities functions. I cannot run disk cleanup, defrag or similar functions. The only item that appears in my system tools folder is Internet Explorer(no Add-ons). I am still running XP Home on this computer. Any help would be appreciated.

#5 Omgwtfapples

Omgwtfapples

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:36 AM

Posted 31 May 2011 - 01:03 PM

Hey texmex01,

I am new here but I had the same problem as you but I fixed it. Go to your Documents and Settings>(your user name)>Local settings>temp and look for "smtnp" folder. Inside that folder is all your start menu's shortcuts. Just copy and paste them back to Documents and Settings>(your user name)>Start Menu and you should have all your programs back in your start menu.

#6 texmex01

texmex01
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:36 AM

Posted 01 June 2011 - 11:28 AM

Good Afternoon to all,

I'm still having the problem not seeing my program files. I can see all the different program folders but when I click on the folder I get (Empty). Also, I had a few different PLC software programs with license, so when I try to open the program it does not recognize the license. If I look inside my registry I think they are there, but I do not have alot of experience with the registry.

rmonroe

Edited by texmex01, 01 June 2011 - 02:29 PM.


#7 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,656 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:36 AM

Posted 01 June 2011 - 10:52 PM

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

64-bit users go HERE
  • Double-click SystemLook.exe to run it.
  • Vista\Win 7 users:: Right click on SystemLook.exe, click Run As Administrator
  • Copy the content of the following box into the main textfield:
    :dir
    %Temp%\smtmp /s
    
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#8 texmex01

texmex01
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:36 AM

Posted 02 June 2011 - 03:25 AM

SystemLook 04.09.10 by jpshortstuff
Log created at 04:17 on 02/06/2011 by Randy Monroe
Administrator - Elevation successful

========== dir ==========

C:\DOCUME~1\RANDYM~1\LOCALS~1\Temp\smtmp - Unable to find folder.

-= EOF =-

I cannot find this folder...

The most important thing for me at this point is to try to retrieve the license for the PLC programs.

Thanks for your patients

rmonroe01

Attached Files



#9 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,656 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:36 AM

Posted 02 June 2011 - 06:20 PM

Unfortunately, it looks like you ran some temporary files cleaner since the issue happened and that crucial folder in "temp" directory is gone.

There is no other option, but to recreate missing shortcuts manually....

You can restore the defaults for the Start Menu, Accessories and Administrative Tools as follows:
Posted Image
  • Then click on the Restore button.


To manually recreate "All Programs" entries, follow these steps...

  • Download App Paths
  • Double click on AppPaths.exe to run the program.
  • Keep the program open.

In this example I'll recreate an entry for Avast antivirus program.
  • Go Start>All Programs.
  • Right click on Avast entry, click "Properties".

Posted Image
NOTE. Make sure, you right click on Avast program, NOT on Avast folder.

  • You'll see this window:

Posted Image

Due to the damage caused by the infection, you'll find "Target" box empty.

  • Go back to AppPaths window and find Avast entry.
  • Right click on Avast line, click "Edit".
  • A pop-up window will open:

Posted Image

  • Highlight everything in "Path" box, right click on it, click "Copy"
  • Go back to Avast "Properties" window, right click inside "Target" box, click "Paste".
  • IMPORTANT! Add quotation marks at the beginning of the path and at the end
  • Click OK and you're done.

Posted Image


In case, program's link shows as (empty):

Posted Image

  • Open Windows Explorer, navigate to Avast folder in Program Files
  • Right click on Avast ".exe" file, click "Create shortcut":

Posted Image

  • Copy that shortcut, go back to Start menu.
  • Right click on avast!Free Antivirus, click "Paste".
  • You'll see Avast shortcut recreated replacing (empty) entry.

Alternatively....
...you paste that shortcut in:
(XP) - C:\Documents and Settings\All Users\Start Menu\Programs\Avast
(Vista/7) - C:\Program Data\Start Menu\Programs\Avast

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users