Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SMTMP has folders only


  • Please log in to reply
2 replies to this topic

#1 dnr_ron

dnr_ron

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:04:48 AM

Posted 15 February 2012 - 03:58 PM

A customer of mine brought in a Vista computer with the empty Startup folders, etc... I quickly located the smtmp in the user temp folder. It contained smtmp 1, 2, and 4. It did not contain smtmp 3.
However, smtmp 2 and 4 were both empty and smtmp 1 contained only folders. All the right folders were there but they were empty. I ran Unhide twice. MalwareBytes removed several malwares. But, I still could not locate the contents of the individual folders.

Is it possible that one virus rewrote the smtmps after everything was already hidden?

One more thing to add here. This customer signed up for a program called Swag Bucks that claims to pay you for surfing the web. The CouponsBar was installed at the same time. I had to uninstall CouponsBar twice as it quickly returned the first time.

I painstakingly rebuilt most of the shortcuts or copied them from their other computer. But I would like to know if there was another way. I do not have any attachments to include as they needed the computer back quickly to run their business accounting.

Thanks,
Ron

BC AdBot (Login to Remove)

 


#2 Artrooks

Artrooks

  • Members
  • 1,463 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York
  • Local time:05:48 AM

Posted 15 February 2012 - 06:31 PM

You could go to Grinler's "Unhide" page, arrow down to the bottom and download the appropriate windows version of "SM-Reset.exe."

Regards,
Brooks



 


#3 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:04:48 AM

Posted 16 February 2012 - 02:44 PM

Download recuva

http://www.filehippo.com/download_recuva/

Install it and when you get the recuva screen

Click Cancel on the wizard.
Click on Options... >> Actions Tab. Check "Restore folder structure."

Now click on SCAN

When complete, use the filter box in the upper right corner and type

smtmp

if smtmp doesnt yield any results type

*.lnk in the search option

Select all the LNK files and recover them to a folder.Browse through the folder.

You should find the SMTMP folder .You can copy the programs to appropriate place

Good luck

Edited by narenxp, 16 February 2012 - 02:51 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users