Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 7 repair hid files


  • This topic is locked This topic is locked
37 replies to this topic

#1 mydogbuddy

mydogbuddy

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:05:05 AM

Posted 27 June 2011 - 05:57 AM

I had the windows 7 repair virus. I downloaded and ran Malwarebytes in safe mode (it quarantined 8 files). Then I ran unhide.exe. Fortunately my documents the unhide.exe work to unhide all my documents, but many of the program files on my start menu are empty. Any help with unhiding those would be greatly appreciated.

BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:05 AM

Posted 27 June 2011 - 11:19 AM

Please, update and re-run Malwarebytes in normal mode.
Post the log.

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#3 mydogbuddy

mydogbuddy
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:05:05 AM

Posted 27 June 2011 - 11:34 AM

I have done that.

#4 mydogbuddy

mydogbuddy
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:05:05 AM

Posted 27 June 2011 - 11:36 AM

Sorry, I was too quick to reply. I ran Malwarebytes in Safe Mode and the program quarantined several files ( I have not deleted them yet). I then went into regular mode and ran a full scan again and it showed no infected files. Which log are you wanting?

#5 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:05 AM

Posted 27 June 2011 - 11:38 AM

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

64-bit users go HERE
  • Double-click SystemLook.exe to run it.
  • Vista\Win 7 users:: Right click on SystemLook.exe, click Run As Administrator
  • Copy the content of the following box into the main textfield:
    :dir
    %Temp%\smtmp /s
    
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#6 mydogbuddy

mydogbuddy
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:05:05 AM

Posted 27 June 2011 - 11:44 AM

I did that earlier, too (based on some of your posts regarding another virus). Here's the message I get when I cut and paste the information in the box into SystemLook:

04.09.10 by jpshortstuff
Log created at 12:41 on 27/06/2011 by rmccaw
Administrator - Elevation successful

========== dir ==========

C:\Users\rmccaw\AppData\Local\Temp\smtmp - Unable to find folder.

-= EOF =-

#7 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:05 AM

Posted 27 June 2011 - 11:49 AM

Unfortunately, that crucial backup folder is missing.
You'll have to restore everything manually.

You can restore the defaults for the Start Menu and Administrative Tools as follows:


=========================================================================================

To manually recreate "All Programs" entries, follow these steps...

  • Download App Paths
  • Double click on AppPaths.exe to run the program.
  • Keep the program open.

In this example I'll recreate an entry for Avast antivirus program.
  • Go Start>All Programs.
  • Right click on Avast entry, click "Properties".

Posted Image
NOTE. Make sure, you right click on Avast program, NOT on Avast folder.

  • You'll see this window:

Posted Image

Due to the damage caused by the infection, you'll find "Target" box empty.

  • Go back to AppPaths window and find Avast entry.
  • Right click on Avast line, click "Edit".
  • A pop-up window will open:

Posted Image

  • Highlight everything in "Path" box, right click on it, click "Copy"
  • Go back to Avast "Properties" window, right click inside "Target" box, click "Paste".
  • IMPORTANT! Add quotation marks at the beginning of the path and at the end
  • Click OK and you're done.

Posted Image


In case, program's link shows as (empty):

Posted Image

  • Open Windows Explorer, navigate to Avast folder in Program Files
  • Right click on Avast ".exe" file, click "Create shortcut":

Posted Image

  • Copy that shortcut, go back to Start menu.
  • Right click on avast!Free Antivirus, click "Paste".
  • You'll see Avast shortcut recreated replacing (empty) entry.

Alternatively....
...you paste that shortcut in:
(XP) - C:\Documents and Settings\All Users\Start Menu\Programs\Avast
(Vista/7) - C:\ProgramData\Start Menu\Programs\Avast

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#8 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:05 AM

Posted 27 June 2011 - 12:01 PM

...and?

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#9 mydogbuddy

mydogbuddy
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:05:05 AM

Posted 27 June 2011 - 06:18 PM

I started with the Windows 7 Restore Default Shortcuts link and worked through Option 2- there were three folders to extract: Programs, Default Programs and Windows Update. When I right clicked on Properties in the Default Programs and Windows update files, there was an "unblock" option, but not in the Programs folder or in any of the folders within. So I copied the Default Programs and Windows update files into the Start menu as directed, but nothing seemed to change (I didn't delete the old Default Programs and Windows Update files-I had elected the option to copy, but keet the old file).

Then I downloaded and ran AppPaths, which created a spread sheet with Type/Name/Path and Directory at the top. I left that open and went back to my Start menu. The problem is my folders are empty in my start menu, so I can't follow your instruction to open the file, not the folder (e.g., for Microsoft Office). I know it is there, because I can use it (for example, I can open a document in Excel, I just can't find Excel if I wanted to create a new document in that program.

#10 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:05 AM

Posted 27 June 2011 - 06:26 PM

Regarding your 2nd issue, you have follow other part of my instructions, starting at:

In case, program's link shows as (empty):


As for your first problem...

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

64-bit users go HERE
  • Double-click SystemLook.exe to run it.
  • Vista\Win 7 users:: Right click on SystemLook.exe, click Run As Administrator
  • Copy the content of the following box into the main textfield:
    :dir
    C:\ProgramData\Start Menu /s
    
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#11 mydogbuddy

mydogbuddy
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:05:05 AM

Posted 27 June 2011 - 06:44 PM

Then, I saw your instructions for what to do if the folder is empty. So I went into Windows Explorer and found two sets of Program files (one called program files and the other called program files (x86). Both had folders for Microsoft Office- both had subfolders, each of which had more subfolders. Clearly, I don't want all of the files in all of the folders to show on my start menu, so I decided I was lost and stopped there

#12 mydogbuddy

mydogbuddy
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:05:05 AM

Posted 27 June 2011 - 06:48 PM

Here are the results of the scan:

SystemLook 04.09.10 by jpshortstuff
Log created at 19:46 on 27/06/2011 by rmccaw
Administrator - Elevation successful

========== dir ==========

C:\ProgramData\Start Menu - Parameters: "/s"

---Files---
None found.

No folders found.

-= EOF =-

#13 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:05 AM

Posted 27 June 2011 - 07:00 PM

Both had folders for Microsoft Office- both had subfolders, each of which had more subfolders.

Start with more simple programs.
As for the Office, all you need to do is to pick. exe files for each part of Office: Word, Excel, etc.

Please, take ownership of C:\ProgramData folder and re-run System Look: http://www.howtogeek.com/howto/windows-vista/add-take-ownership-to-explorer-right-click-menu-in-vista/

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#14 mydogbuddy

mydogbuddy
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:05:05 AM

Posted 27 June 2011 - 10:48 PM

No luck. Same error message

SystemLook 04.09.10 by jpshortstuff
Log created at 23:33 on 27/06/2011 by rmccaw
Administrator - Elevation successful

========== dir ==========

C:\ProgramData\Start Menu - Parameters: "/s"

---Files---
None found.

No folders found.

-= EOF =-

#15 mydogbuddy

mydogbuddy
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:05:05 AM

Posted 27 June 2011 - 10:49 PM

Thanks for sticking with this. I'm going to go to bed and try again in the a.m.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users