Windows recovery, deleted files?

[wez]

My brother's pc had WR virus, I removed it with a combo of registry hacking and mbam, but the virus deleted/hid files on the computer to make the threat more realistic and now I can't locate them even through search.

is there a common place the virus puts them?

I'm fairly certain they have not been deleted as the hdd space is consistent with before.

Help much appreciated, thanks

[Firefox]

Hello and

Download unhide.exe saving it to your desktop: http://download.bleepingcomputer.com/grinler/unhide.exe

Right click on unhide.exe and select Run as administrator (In case you have Vista or Win7)

Reboot

This will unhide folders/files that were set to be hidden by the infection you had.

Let me know if that solved your problem.

[wez]

thank you so much firefox, worked a treat

[Firefox]

You are quite welcome, let us know should you have other questions or comments....

[garyg]

hey firefox, impressed from what i c involving u. i am infected by w recovery. got the kill on a portable memory. should i also replace my malware after i attack with the kill.

[Firefox]

hey firefox, impressed from what i c involving u. i am infected by w recovery. got the kill on a portable memory. should i also replace my malware after i attack with the kill.

Hello garyg, and Welcome to Malwarebytes

I am sorry to hear you are infected, and every case can be different. I suggest that you seek help from the experts to remove your infection and they can help you get your computer back in working order. Please follow my insturctions below....

Here are the steps needed to get your computer cleaned....

Please read the following so that you can begin the cleaning process:

You have 3 Options that you can choose from as listed below:

[*]Option 1