Spyware, viruses, &amp; security forum: Recover deleted files and icons after Trojan?

Total posts: 14 (Showing page 1 of 1)

Thread display preference:
Collapsed
Expanded

Back to Spyware, viruses, & security

Tracked Track this thread

Answers

Answer Best answer as chosen by user mjfuller

Tried "Unhide.exe'?

by Grif Thomas - 11/23/11 9:11 AM

In Reply to: Recover deleted files and icons after Trojan? by mjfuller

Some of the newer trojans create a registry entry that "hides" the items you're referring to.. They aren't really gone, they're just hidden.. Please download and run the file from the link below:

Clicking on the link below will immediately open a download dialogue window.

http://download.bleepingcomputer.com/grinler/unhide.exe

Hope this helps.

Grif

Was this reply helpful? (1) (0)

Staff pick

Discussion locked

Tried it, no dice.

by mjfuller - 11/23/11 10:22 AM

In Reply to: Tried "Unhide.exe'? by Grif Thomas

Grif,
Thanks. I was hopeful but it doesn't seem to do anything. The program told me if it doesn't restore everything to try disabling your AV and I did that. It still doesn't seem to work. Any other suggestions?

I probably should have provided basic system info also. I have a 6-yr-old Dell Dimensions desktop PC with XP Home. I use TrendMicro Internet Security, Windows Defender, Spyware Blaster, Spybot Search & Destroy, Malware Bytes, and Ad Aware. I scan the computer religiously, but it still wasn't enough! I think I got the bug from a shopping site, but not sure which one.
Mike

Was this reply helpful? (0) (0)

Staff pick

Discussion locked

See if following the FIX ...

by Edward ODaniel - 11/25/11 12:25 PM

In Reply to: Tried it, no dice. by mjfuller

in this link helps you:
http://hateadub.wordpress.com/2011/05/21/start-menu-folders-are-empty-start-menu-programs-are-empty/

Was this reply helpful? (0) (0)

Staff pick

Discussion locked

Grif, please come in.

by mjfuller - 12/2/11 7:33 AM

In Reply to: Tried "Unhide.exe'? by Grif Thomas

Grif,
Did you have any more suggestions? Please see the last post. Do you suggest I try the solution in the blog it links to-- or something else? Thanks.
Mike

Was this reply helpful? (0) (0)

Staff pick

Discussion locked

No need to try ...

by Edward ODaniel - 12/2/11 4:10 PM

In Reply to: Grif, please come in. by mjfuller

the fix I recommended -- Just keep trying the one that didn't work again and again until magic happens and it does work.

ONLY YOU sitting in front of your PC can follow the steps in the fix to see if they apply or not. NONE of us here can see if you have the directories mentioned in step one - if you do go on to step two and if not STOP because it does not apply.

Was this reply helpful? (0) (0)

Staff pick

Discussion locked

And You Tried The One Provided By Edward O?

by Grif Thomas - 12/5/11 11:22 AM

In Reply to: Grif, please come in. by mjfuller

Sorry I haven't got back quicker. My home had a power, phone, and internet outage all weekend.. Powers on, but still no phone of DSL..

Either way, continue running the scanning tools you have installed, especially Malwarebytes, and give the suggestion posted by mister ODaniel above.

Hope this helps.

Grif

Was this reply helpful? (0) (0)

Staff pick

Discussion locked

Icons

by naren_1 - 12/15/11 7:34 AM

In Reply to: Grif, please come in. by mjfuller

In case if you deleted temp file from the Os Then you dont have any choice. You have you to copy all the icons from c:\ Program files\* Specific Application *\ icons and past it in C:\Documents and Settings\All Users\Start Menu.

Was this reply helpful? (0) (0)

Staff pick

Discussion locked

System Fix Malware

by nhojremlap - 12/3/11 9:10 AM

In Reply to: Tried "Unhide.exe'? by Grif Thomas

I was hit with System Fix - it got past updated antispyware and antivirus programs running in realtime!

Long story short: Before I was able to get onto the Internet and find the BleepingComputer.com instructions, I deleted all temp files and in the process, lost all the files and folders that were moved by System Fix. I've been manually copying shortcuts to the empty folders on the Start menu.

Was this reply helpful? (0) (0)

Staff pick

Discussion locked

win32/tibs.it and win32alurian.fe

by 21sandals - 7/23/12 1:20 PM

In Reply to: Tried "Unhide.exe'? by Grif Thomas

I had a vista and xp laptop infected with the above trojans and the link you supplied worked great on both. Once the file is opened a Dos window appears and sits there but be patient, give it a few minutes and the software will work its wonders...Many Thanks Grif

Was this reply helpful? (0) (0)

Staff pick

Discussion locked

Answer Best answer as chosen by user mjfuller

deleted files

by getreadyfor - 12/8/11 11:31 PM

In Reply to: Recover deleted files and icons after Trojan? by mjfuller

you may try freeware to restore.

there are many programs free could do the job

recuva
icare data recovery free
pc inspector

google the names

Was this reply helpful? (0) (0)

Staff pick

Discussion locked

Answer Best answer as chosen by user mjfuller

hidden files after virus

by tralynd - 2/2/12 9:58 PM

In Reply to: Recover deleted files and icons after Trojan? by mjfuller

Try this, it worked for me:
<blockquote class="jive-quote">This may be the solution you are
seeking.
I recently removed the Vista Recovery Center malware from another one of our
company laptops. It has ATI graphics installed. This malware hides most of the
files on the PC in an attempt to fool you into thinking that your PC is really
damaged like it is reporting. Removing the malware does not undo the hidden aspects. In
Vista, the c:\Users\"your profile name
(usually Owner)" folder contains the AppData subdirectory that the
Catalyst Control Center needs to access in order to function. When this
directory is hidden, then CCC cannot locate the necessary files to launch. To
fix this issue, I use the following steps.
Navigate to c:\ and right click on Users. Select properties. Under the General tab, look at the
bottom for the Hidden selection. If there is not a check mark in the box, place
a check mark there. Hit apply, select yes to apply to all subdirectories. If you
clicked ok, you may notice that it disappeared from the right pane once it
finishes. It should still be listed under the tree on the left. Right click on
it again. This time remove the check mark and apply to all subdirectories. Once
it has finished, your files in the Users directory should reappear and Catalyst
Control Center should function normally again. This has worked in all cases that
I have encounterd so far. Hopefully this works for you as
well..
</blockquote>

Was this reply helpful? (1) (0)

Staff pick

Discussion locked

AppPaths

by rhabdomantist - 2/3/12 7:08 AM

In Reply to: hidden files after virus by tralynd

To assist in restoring Start menu Programs shortcuts. See post #16 by Broni in the following thread.
http://www.bleepingcomputer.com/forums/topic404865.html/page__st__15

AppPaths
http://cdnetworks-us-2.dl.sourceforge.net/project/apppaths/AppPaths.exe

Was this reply helpful? (0) (0)

Staff pick

Discussion locked

Answer Best answer as chosen by user mjfuller

'bleepingcomputer/unhide

by morag_3750 - 4/21/12 2:43 AM

In Reply to: Recover deleted files and icons after Trojan? by mjfuller

I used this link and it worked. Magic! Many Thanks

Was this reply helpful? (1) (0)

Staff pick

Discussion locked