Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.If you can please print this topic
it will make it easier for you to follow the instructions and complete all of the necessary steps.
If the %Temp%\smtmp\ are still around this tool will restore your files.
To make your files visible again, please download the following program to your desktop:Unhide.exe
Once the program has been downloaded, double-click on the Unhide.exe icon on your desktop and allow the program to run. This program will remove the +H, or hidden, attribute from all the files on your hard drives. If there are any files that were purposely hidden by you, you will need to hide them again after this tool is run.
This may take sometime, please let if finish.
However, the newer variants of the FakeHDD rogue programs are now deleting the following folders and storing them into a numbered folder under %Temp%\smtmp\
%Temp%\smtmp\1\ => %AllUsersProfile%\Start Menu
%Temp%\smtmp\2\ => %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch
%Temp%\smtmp\3\ => %AppData%\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar
%Temp%\smtmp\4\ => %AllUsersProfile%\DesktopIt goes without saying that running a %temp% cleaner ahead of restoration would result in loss of these folders
Empty START program files - If still empty you will have to populate them the hard way.
Right click on each of the folders and selected Open, to open the start menu folder in Explorer. Then browse to C:\Program Files\<program name> (or whatever location the program is installed in), locate the main program's .exe file (it will usually have a name very similar to the program name and the same icon), copy and paste it into the start menu folder you have open. Then close the folders and look in your start menu again, the shortcut should be there and functioning!
So for example, the start menu folder SpeedCrunch show up as (Empty). Right clicked on the folder and selected Open, then opened C:\Program Files\SpeedCrunch and located the .exe file named "speedcrunch". Copy and paste that file into the start menu folder".
Third party programs if not up to date can be the cause infiltration of an infection.
Please run this security check for my review.
Download Security Check
by screen317 from here
- Save it to your Desktop.
- Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
- A Notepad document should open automatically called checkup.txt; please post the contents of that document.
Please let me know what problem persists with this computer.