I was clicking through some video links, one of which opened a new tab with a message window which either stated that it was downloading something or scanning something - I'm sorry I didn't stop to get a good look, it just seemed like the average malwarian shennanigans so I kept clicking X to close the window, which caused another message window to open asking if I was sure I wanted to leave the page and another warning that I would lose all my files if I restarted, to which I kept trying to close the window and eventually resorted to just shutting down Firefox then re-opening. Everything was working okay until my Netflix audio started sounded wonky and I had to do a hard shutdown.
When I rebooted I got a long "preparing your desktop" message before the desktop loaded - to a completely different desktop background and none of my files or icons. I ran AVG anti-virus which found nothing, then I ran Malwarebytes Anti-malware which found PUP.BundleInstaller.Bl which is associated with a FreeYoutubeDownloaderInstaller.exe file (I didn't try to fix/delete it), then I ran a Advanced System Care 6 scan and found no malware and a bunch of junk files, registery issues, etc (I didn't try to fix/delete anything). Then I downloaded Unhide which ran for a bit and said that there were no tempfiles found. Then I remembered to try a restart in Safe Mode - and I can see all my missing files and desktop folders/icons, so I know they're still there. Unfortunately when I did the safe mode restart I lost the log from the Unhide scan.
I didn't delete anything from my temp folder so I'm wondering why Unhide didn't work and now I'm not sure if it is indeed a FakeHDD problem or something else. I'm not sure if I should proceed with the manual restoration of the desktop shortcuts b/c I'm not sure that's the right solution and also because I'm not that computer literate and the instructions are blowing my mind. Can someone please help? Will a manual restoration create more problems if it's not a FakeHDD?
UPDATE: I forgot to mention that when my desktop opens a message in the lower right hand corner says "you have been logged into a temporary account". Also, I ran the script from this site to restore the start menu items if the temp files were deleted (I'm not sure they were deleted I just had to try something) and nothing happened.
Edited by wh030, 02 November 2012 - 05:35 PM.