Recovery from virus.

Solved/Closed
Hartboel - Apr 2, 2012 at 08:04 PM
 Stu - Apr 8, 2012 at 02:15 PM
Hello,

I was hacked ealier today by that stupid S.M.A.R.T HDD
It resulted in everything getting deleted. I therefore scanned my comp, got rid og the virus and made a system recovery to regain my photos ect. However there is a problem.

Only half of the desktop folders and files were restored. Aswell as other folders such as %User%/pictures got lost too.

Weird thing is. When i search for the folder i can find it. But when i click on it, its empty. But when i search for the name of the photo, i can find it and open it. I therefore tried to open the file location. I did so fine but the file location was empty??

So somehow the files are still on my comp. But they are hidden some how. The folder is supposed to be on the desktop, but i can't find it.

Here are some screenshots:
http://gratisupload.dk/vis_billede/677084/ = FIRST PICTURE
http://gratisupload.dk/vis_billede/677085/ = SECOND PICTURE
http://gratisupload.dk/vis_billede/677086/ = THIRD PICTURE

Here is another example of the same problem:
http://gratisupload.dk/vis_billede/677087/ = FIRST PICTURE
http://gratisupload.dk/vis_billede/677088/ = SECOND PICTURE

4 replies

Anonymous User
Apr 3, 2012 at 04:48 AM
I'm sorry here is the link

https://download.bleepingcomputer.com/grinler/unhide.exe

What do you mean by malware scan?

You have to run both malwarebytes and TDSSkiller
1
Dude... You're a freaking genius! Worked like a charm!

LOVE YOU! You just saved me 1 billion years of work!
0
Anonymous User
Apr 3, 2012 at 10:41 AM
You're welcome
1
Anonymous User
Apr 2, 2012 at 10:58 PM
Download

http://download.bleepingcomputer.com/grinler/unhide

Run the tool,this should unhide your hidden files

What is your status of startmenu? does it look empty

Press Windows+R key and type

%temp% and click ok

If you have a folder called SMTMP ,copy it to a safe location

Download

https://support.kaspersky.com/downloads/utils/tdsskiller.exe

Launch it.Click on change parameters-Select TDLFS file system

Click on Scan.Please post the LOG report(log file should be in your C drive)
0
Link says:

"404 - Not Found"

I dont have the SMTMP anymore

Thanks for your super fast and kind reply! Hope however you can find time to help me further!
0
http://download.bleepingcomputer.com/grinler/unhide says "404 - Not Found"

I ran the malware scan and my comp is clean.
0
Thank you very much!!!. Worked fast & complete.
0