Just wanted to submit my utility for mod approval:
Undo the changes that Rouge AntiVirus called "Windows XP/Vista/7 Recovery" makes after removal. This is the same malware that hides all your desktop icons, and empties out your start menu.
pass for WinRar Archive: f3n!X5t(_)d10S
Boot computer in safe mode with networking using F8 before windows loading screen.
Download and install Malwarebytes to remove (it gets into [SYSTEM VOLUME INFORMATION])
Stage 1 of command line utility resets all "hidden" attributes using attrib.
Stage 2 restores all Start Menu, Quick Launch Shortcuts from Temp dir.
Stage 3 resets known registry modifications by this bugger.
EDIT: After doing research, I have found that activating the malware with a key of 8475082234984902023718742058948 makes it go into a reversal mode. It unhides all files, restores desktop links, and allows you to right click on its icon and "Quit". There are a few minor registry changes it doesnt change back, nor does it remove itself...just a "developer" mode//uninfection mode.
Edited by Fenix Studios, 04 June 2011 - 07:58 PM.