Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

post virus removal all start menu programs empty


  • Please log in to reply
11 replies to this topic

#1 thebronze1

thebronze1

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:05:29 AM

Posted 01 June 2011 - 07:41 PM

I managed to contract the Trojan.Fake MS virus, but successfully removed using malwarebytes.

However, all the start menu folders are now empty. I have tried:
unhide.exe
regfix.exe
and several other fixes I found googling the problem.

One post here said use System Look, which I did and it generated the following log:
Set Video mode to DirectX (no video overlay).lnk --a---- 883 bytes [18:15 23/02/2010] [18:15 23/02/2010]
Set Video mode to DirectX.lnk --a---- 877 bytes [18:15 23/02/2010] [18:15 23/02/2010]
Set Video mode to OpenGL.lnk --a---- 841 bytes [18:15 23/02/2010] [18:15 23/02/2010]

C:\DOCUME~1\JAMIEG~1\LOCALS~1\Temp\smtmp\1\Programs\VLC Connection Utility d------ [01:46 01/06/2011]
Uninstall VLC Connection Utility.lnk --a---- 848 bytes [18:30 23/02/2010] [18:30 23/02/2010]
VLC Connection Utility.lnk --a---- 848 bytes [18:30 23/02/2010] [18:30 23/02/2010]

C:\DOCUME~1\JAMIEG~1\LOCALS~1\Temp\smtmp\1\Programs\WindLDR d------ [01:46 01/06/2011]
Readme.lnk --a---- 1560 bytes [01:36 02/12/2009] [01:36 02/12/2009]
Update Check Settings.lnk --a---- 1733 bytes [01:36 02/12/2009] [01:36 02/12/2009]
WindLDR.lnk --a---- 1713 bytes [01:36 02/12/2009] [01:36 02/12/2009]

C:\DOCUME~1\JAMIEG~1\LOCALS~1\Temp\smtmp\1\Programs\WinRAR d------ [01:46 01/06/2011]
Console RAR manual.lnk --a---- 685 bytes [14:07 06/05/2011] [14:07 06/05/2011]
WinRAR help.lnk --a---- 704 bytes [14:07 06/05/2011] [14:07 06/05/2011]
WinRAR.lnk --a---- 704 bytes [14:07 06/05/2011] [14:07 06/05/2011]

C:\DOCUME~1\JAMIEG~1\LOCALS~1\Temp\smtmp\1\VAIO Recovery d------ [01:46 01/06/2011]
VAIO Recovery.lnk --a---- 699 bytes [20:05 22/07/2006] [23:59 03/03/2005]

C:\DOCUME~1\JAMIEG~1\LOCALS~1\Temp\smtmp\1\VAIO Recovery\VAIO Recovery Tools d------ [01:46 01/06/2011]
Create Recovery Discs.lnk --a---- 805 bytes [20:05 22/07/2006] [01:54 27/08/2005]
Reinstall Applications or Drivers.lnk --a---- 692 bytes [20:05 22/07/2006] [01:21 08/03/2005]
Restore C Drive.lnk --a---- 687 bytes [20:05 22/07/2006] [23:09 03/03/2005]
Restore Complete System.lnk --a---- 699 bytes [20:05 22/07/2006] [23:15 03/03/2005]
Restore Windows Only.lnk --a---- 699 bytes [20:05 22/07/2006] [22:43 03/03/2005]

C:\DOCUME~1\JAMIEG~1\LOCALS~1\Temp\smtmp\2 d------ [01:46 01/06/2011]
desktop.ini --a---- 177 bytes [03:49 19/01/2007] [10:10 20/10/2008]
Launch Internet Explorer Browser.lnk ------- 815 bytes [03:49 19/01/2007] [22:51 15/03/2010]
Launch Microsoft Office Outlook.lnk ------- 792 bytes [01:24 15/09/2009] [13:16 15/05/2011]
Mozilla Firefox.lnk ------- 1620 bytes [23:45 25/04/2010] [23:45 25/04/2010]
NetMeeting.lnk ------- 679 bytes [00:39 10/04/2007] [00:39 10/04/2007]
Picasa 3.lnk ------- 634 bytes [00:36 26/01/2011] [00:36 26/01/2011]
Show Desktop.scf ------- 79 bytes [03:49 19/01/2007] [18:53 22/07/2006]
Sony Download Taxi.lnk ------- 780 bytes [20:30 20/01/2007] [20:30 20/01/2007]
Windows Media Player.lnk ------- 800 bytes [10:56 21/01/2007] [10:10 20/10/2008]

C:\DOCUME~1\JAMIEG~1\LOCALS~1\Temp\smtmp\4 d------ [01:46 01/06/2011]
Adobe Reader X.lnk ------- 1734 bytes [01:03 26/04/2011] [01:03 26/04/2011]
AutoCAD R14.lnk ------- 724 bytes [16:35 31/10/2007] [16:35 31/10/2007]
CCleaner.lnk ------- 682 bytes [01:37 30/12/2010] [01:37 30/12/2010]
Citrix Program Neighborhood.lnk2 ------- 2367 bytes [01:32 16/02/2010] [21:57 03/04/2011]
Google Earth.lnk ------- 1915 bytes [23:49 28/09/2010] [23:49 28/09/2010]
iTunes.lnk ------- 1542 bytes [01:34 19/04/2011] [01:34 19/04/2011]
Lightroom 3.3.lnk ------- 1834 bytes [01:53 07/01/2011] [01:53 07/01/2011]
Mastercam X5.lnk ------- 1681 bytes [00:33 17/03/2011] [00:33 17/03/2011]
Maxtor Manager.lnk ------- 1819 bytes [01:47 10/11/2008] [00:19 26/03/2010]
PerfectDisk 11.lnk ------- 1864 bytes [12:59 25/03/2010] [12:59 25/03/2010]
Picasa 3.lnk ------- 666 bytes [00:36 26/01/2011] [00:36 26/01/2011]
Rosetta Stone 2.1.5.3A.lnk ------- 1836 bytes [23:36 06/08/2007] [23:36 06/08/2007]
VLC media player.lnk ------- 719 bytes [18:15 23/02/2010] [18:15 23/02/2010]
WindLDR.lnk ------- 1701 bytes [01:36 02/12/2009] [01:36 02/12/2009]

-= EOF =-

Anything else I can try?

BC AdBot (Login to Remove)

 


#2 SweetTech

SweetTech

    Agent ST


  • Members
  • 13,421 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Antarctica
  • Local time:06:29 AM

Posted 02 June 2011 - 03:08 PM

This is a manual fix for XP users:

1. Copy the entire content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\1
and paste it to this folder:
C:\Documents and Settings\All Users\Start Menu

2. Copy the entire content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\2
and paste it to this folder:
C:\Documents and Settings\user_name\Application Data\Microsoft\Internet Explorer\Quick Launch

3. Copy the entire content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\3
and paste it to this folder:
C:\Documents and Settings\user_name\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar

4. Copy the entire content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\4
and paste it to this folder:
C:\Documents and Settings\All Users\Desktop

If the above does not work then you can restore the defaults for the Start Menu, Accessories and Administrative Tools as follows:
For any other missing program shortcuts you will probably need to reinstall the application or manually create new shortcuts.

Have I helped you? If you'd like to assist in the fight against malware, click here Posted Image


The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.


#3 thebronze1

thebronze1
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:05:29 AM

Posted 03 June 2011 - 06:53 PM

Thank you
Thank you
Thank you - I was diddling with the registry w/o success and getting very frustrated.
Owe U 1

#4 SweetTech

SweetTech

    Agent ST


  • Members
  • 13,421 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Antarctica
  • Local time:06:29 AM

Posted 03 June 2011 - 07:19 PM

Glad to hear that the above solution worked for you.

Please take good care!

Have I helped you? If you'd like to assist in the fight against malware, click here Posted Image


The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.


#5 zstray

zstray

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:29 AM

Posted 06 June 2011 - 05:38 PM

Thank you for this solution. Do you know if there is a similar cache stored on Vista or 7?

#6 SweetTech

SweetTech

    Agent ST


  • Members
  • 13,421 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Antarctica
  • Local time:06:29 AM

Posted 06 June 2011 - 06:12 PM

Yes there is;

This is a manual fix for Vista/Windows 7 users:

1. Copy the entire content of this folder:
C:\Users\user_name\AppData\Local\Temp\smtmp\1
and paste it to this folder:
C:\Program Data\Start Menu

2. Copy the entire content of this folder:
C:\Users\user_name\AppData\Local\Temp\smtmp\2
and paste it to this folder:
C:\Users\user_name\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

3. Copy the entire content of this folder:
C:\Users\user_name\AppData\Local\Temp\smtmp\3
and paste it to this folder:
C:\Users\user-name\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar

4. Copy the entire content of this folder:
C:\Users\user_name\AppData\Local\Temp\smtmp\4
and paste it to this folder:
C:\Program Data\Desktop

-- Note: The "Start Menu", "Quick Launch" and "Desktop" folders are system folders. In order to see them, you need to Reconfigure Windows to show hidden files, folders. In Windows Explorer go to Tools > Folder Options and click on the View tab. Under Advanced settings > Files and Folders > Hidden Files and Folders, uncheck "Hide Protected operating system Files (recommended)" and hit Apply > OK. In order to access the "Start Menu" folder, you may need to "take ownership" of that folder as shown here.

If the above does not work, then you can restore the defaults for the Start Menu and Administrative Tools as follows:
For any other missing program shortcuts you will probably need to reinstall the application or manually create new shortcuts.

Have I helped you? If you'd like to assist in the fight against malware, click here Posted Image


The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.


#7 Cyberblack

Cyberblack

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 30 June 2011 - 10:30 AM

I am having this very same issue but all of the other program file folders (Microsoft office, Cyberlink, Itunes etc) still show as empty, the malware has been removed and the default folders have been restored. Have these folder truly been emptied out or are they still hidden. Please advise. I have an XP and a Windows 7 Home Premium machine with the same issue

#8 odin89

odin89

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:08:29 PM

Posted 17 November 2011 - 02:16 AM

Hi guys, I have had the same problem but for some reason I cannot find or see the smtmp folder. I.e. the pathway C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\1 doesn't exist. What can I do, as I can't see any of my programs properly in the start menu. Any help would be greatly appreciated. Thanks!!

#9 dcherr

dcherr

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:29 AM

Posted 17 November 2011 - 12:24 PM

Hi guys,

I seem to be having the same/similar issues...all of my program files are showing as empty (I'm using Windows XP professional). I tried the manual fix suggested above for XP users, but unfortunately I don't have an "smtmp\3 folder as suggested in step 3 below:

3. Copy the entire content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\3
and paste it to this folder:
C:\Documents and Settings\user_name\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar

The paste location doesn't seem to exist either...I can only get to ..\Quick Launch. I don't show a "User Pinned\TaskBar

Any suggestions?

Thanks for the help,
D.

#10 gamma3

gamma3

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:02:29 AM

Posted 21 January 2012 - 03:32 PM

That was great! Thanks for your give-back to the community. I really needed this information.

#11 elandy

elandy

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:29 AM

Posted 26 January 2012 - 08:30 AM

Thank you to all the great posts. These tips helped me a lot with the System Check Virus.

After doing all the things mentioned above, if you still can't see any of your start menu icons try this:

To view all the start menu icons, right click on the start menu button, go to properties and click on the "Start Menu" tab. From there tick the box that reads "Store and display a list of recently opened programs". You will have to manualy pin any program icons to the start menu but at least you should have your start menu looking normal again.

Hope that helps.

#12 fredmertz1

fredmertz1

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:29 AM

Posted 09 November 2012 - 01:13 PM

I have searched so many times and tried so many things to get my start menu folders to contain the correct information and all have failed until I found this. I h ad a rootkit virus and after I cleaned its clock, I had empty start menu folders. I just created a username for this site specifically to send out a BIG thank you. Everything is working perfectly on my computer again!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users