kfde Posted May 13, 2011 ID:428653 Share Posted May 13, 2011 I recently had some kind of virus activity on this machine, but I think I cleared it up. The problem is, during the bad times, my desktop icons and all my files/folders disappeared. I managed to unhide all the folders, but I can't get my desktop back. Here is the mbam log:Malwarebytes' Anti-Malware 1.50.1.1100www.malwarebytes.orgDatabase version: 6550Windows 6.0.6002 Service Pack 2Internet Explorer 8.0.6001.190485/13/2011 6:34:53 AMmbam-log-2011-05-13 (06-34-53).txtScan type: Quick scanObjects scanned: 152887Time elapsed: 1 minute(s), 26 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
LDTate Posted May 14, 2011 ID:429157 Share Posted May 14, 2011 Download unhide.exe & save it to your windows folder: Right click on unhide.exe and select Run as administrator (In case you have Vista or Win7) RebootThis will unhide folders/files that were set to be hidden by the infection you had.Let me know if that solved your problem. Link to post Share on other sites More sharing options...
kfde Posted May 15, 2011 Author ID:429477 Share Posted May 15, 2011 So that worked - kind of. It shows all of my documents and files and such, but my applications are still gone.. Link to post Share on other sites More sharing options...
LDTate Posted May 15, 2011 ID:429521 Share Posted May 15, 2011 The applications are only missing under your user profile.Logs will be closed if you haven't replied within 3 days Please do not attach the scan results from Combofx. Use copy/paste.DO NOT use any TOOLS such as Combofix, or HijackThis fixes without supervision.Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.Vista and Windows 7 users:1. These tools MUST be run from the executable. (.exe) every time you run them 2. With Admin Rights (Right click, choose "Run as Administrator")Stay with this topic until I give you the all clean post.You might want to print these instructions out.I suggest you do this:XP UsersDouble-click My Computer. Click the Tools menu, and then click Folder Options. Click the View tab.Uncheck "Hide file extensions for known file types." Under the "Hidden files" folder, select "Show hidden files and folders." Uncheck "Hide protected operating system files." Click Apply, and then click OK.Vista UsersTo enable the viewing of hidden and protected system files in Windows Vista please follow these steps:Close all programs so that you are at your desktop.Click on the Start button. This is the small round button with the Windows flag in the lower left corner.Click on the Control Panel menu option.When the control panel opens you can either be in Classic View or Control Panel Home view: If you are in the Classic View do the following: Double-click on the Folder Options icon.Click on the View tab.If you are in the Control Panel Home view do the following: Click on the Appearance and Personalization link.Click on Show Hidden Files or Folders.Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.Remove the checkmark from the checkbox labeled Hide extensions for known file types.Remove the checkmark from the checkbox labeled Hide protected operating system files.Please do not delete anything unless instructed to. Next:Please download RogueKiller.exe and save it to your desktop.Now quit all running programs.Double click RogueKiller.exe to run it.When prompted, type 1 and hit Enter.A RKreport.txt should appear on your desktop.Note: If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe .Please post the contents of the RKreport.txt in your next Reply. Link to post Share on other sites More sharing options...
kfde Posted May 16, 2011 Author ID:429738 Share Posted May 16, 2011 Followed the directions, but my applications are still not showing on desktop. I suppose they may have been deleted...Here's rogue killer log:RogueKiller V5.1.2 [05/13/2011] by Tigzycontact at http://www.sur-la-toile.commail: tigzyRK<at>gmail<dot>comFeedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.htmlOperating System: Windows Vista (6.0.6002 Service Pack 2) 64 bits versionStarted in : Normal modeUser: Owner [Admin rights]Mode: Scan -- Date : 05/16/2011 06:32:53Bad processes: 0Registry Entries: 0HOSTS File:127.0.0.1 localhost::1 localhostFinished : << RKreport[1].txt >>RKreport[1].txt Link to post Share on other sites More sharing options...
LDTate Posted May 16, 2011 ID:429739 Share Posted May 16, 2011 Run RogueKiller again and select Option 6 Link to post Share on other sites More sharing options...
kfde Posted May 17, 2011 Author ID:430003 Share Posted May 17, 2011 Run RogueKiller again and select Option 6Did not change the desktop. Here is the log:RogueKiller V5.1.2 [05/13/2011] by Tigzycontact at http://www.sur-la-toile.commail: tigzyRK<at>gmail<dot>comFeedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.htmlOperating System: Windows Vista (6.0.6002 Service Pack 2) 64 bits versionStarted in : Normal modeUser: Owner [Admin rights]Mode: Shortcuts HJfix -- Date : 05/16/2011 19:15:51Bad processes: 0File attributes restored: Desktop: Success 0 / Fail 0Quick launch: Success 0 / Fail 0Programs: Success 0 / Fail 0Start menu: Success 0 / Fail 0User folder: Success 16 / Fail 0My documents: Success 6 / Fail 0My favorites: Success 0 / Fail 0My pictures: Success 0 / Fail 0My music: Success 0 / Fail 0My videos: Success 0 / Fail 0Local drives: Success 28 / Fail 3Finished : << RKreport[2].txt >>RKreport[1].txt ; RKreport[2].txt Link to post Share on other sites More sharing options...
LDTate Posted May 17, 2011 ID:430113 Share Posted May 17, 2011 After you open the programs do they show again in All Programs? Link to post Share on other sites More sharing options...
kfde Posted May 18, 2011 Author ID:430548 Share Posted May 18, 2011 After you open the programs do they show again in All Programs?I'm afraid I'm not sure what you mean. The programs in question (for a specific example, D&D Adventure Tools) are gone from the desktop. They don't show up in all programs. They don't turn up on search. I'm not sure how I would open them to answer your question. Link to post Share on other sites More sharing options...
LDTate Posted May 18, 2011 ID:430550 Share Posted May 18, 2011 If you can't find them doing a search, then my best guess is, they're gone.You'll need to re-install them.Another option would be to create a new user and see if they show up when you login with the new user account. Link to post Share on other sites More sharing options...
kfde Posted May 19, 2011 Author ID:431319 Share Posted May 19, 2011 Thanks - it's not a huge loss if they're gone. I appreciate the effort. Link to post Share on other sites More sharing options...
LDTate Posted May 20, 2011 ID:431341 Share Posted May 20, 2011 You're more than welcome. Glad we were able to helpPeace be with you Link to post Share on other sites More sharing options...
LDTate Posted May 20, 2011 ID:431342 Share Posted May 20, 2011 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts