My Documents and favorites of IE hidden by "Windows Recovery" Trojan

Yesterday, my computer was struck by the "Windows Recovery" Trojan.  After clearing the virus, all "My Documents" folders and files and Internet explore "Favorites" have become hidden.  Are there any suggestions how to unmask them?

Thank you/Mike

Hello

read the information at the bottom of the below link about what makes this malware hide your data files and the cure for it regarding

Read article 17

http://www.bleepingcomputer.com/virus-removal/remove-Windows-Recovery

also follow the correct for that malware removal steps, just to be safe, let's

Tags: Windows

Similar Questions

  • Lost documents and Favorites after running CCleaner and AVG scan

    I had a virus, tr/crypt.XPack.Gen., which caused the black screen and the digitization of the messages that I had never seen before. Safe mode, I did a restore of the system for 3 days before. I then ran CCleaner and moy. ALL My Documents and favorites are now gone! How can I get back them? Help, please.

    Some time ago I got virus then my favorites and other documents have disappeared.
    Try this:
    1 configure the compputer to display the hidden files and folders.
    http://Windows.Microsoft.com/en-us/Windows-Vista/Show-hidden-files

    2. go into your Favorites folder. C:\Users\\Favorites

    3. right click on it-> properties on its 'attributes' uncheck 'Hidden', click on the button 'Apply', now check your Favorites.

    4. If the box before 'Hidden' is already disabled, put a control over it and click on the "Apply" button, on the guest "Confirm change" click the box before "apply changes to this folder, subfolders and files. Click OK to confirm. Now, turn off the "Hidden" attribute and apply to all folders, subfolders and files. I did this because some files are hidden and some are not, so I can't change the attributes of each hidden file one at a time, I hid all then show all. Now check your favorites if they show. If they appear, do the same for your missing documents.

  • How to get the documents and pictures off dead PC with Windows XP to Windows 7?

    have a computer laptop w / W7 and a pc with XP that does not work. on the laptop, I can only find documents/photos for the user of the original laptop. We use msn as our Internet service provider. can I get my documents/pictures power off the pc dead to show on the laptop. I get my mail and I know it's on the storage of Ms do not know what can be done on the other info. I have a driver to drive external but not ready to be the pc immediately. There is an icon on the desktop page original user ID but have not been able to get an icon for my log show.

    Hello

    1. you try to transfer data from the laptop XP to Windows 7 computer?

    2. What do you mean by icon storage and user of MS?

    3. what exactly happened to the XP computer?

    Be more specific to help you better. Visit this link: http://support.microsoft.com/kb/555375

  • Cannot run Aerotow, message error "access denied, needs access to the FSX.cfg file in My Documents and Settings folder'.

    Original title: I need assistance with My Documents and Settings folder

    I have Windows XP, Norton Internet security.

    OK, so I have FSX. I'm having a little program called "Aerotow. To run, you must Access the FSX.cfg file in My Documents and Settings folder.
    But access to this file is denied.
    The most funny thing is - I can access the folder without problem. Open it and sail away. But my system seems to have blocked Aerotow.exe and configure.exe to access this folder. It's VERY frustrating. How can I access this folder? Why the program is blocked?
    Thank you.

    Hello

    I suggest you to contact the developer of the application for assistance.

  • I am trying to access my documents and I get a pop up saying "windows explore has stopped working".

    Original title: "windows Explorer does not work.

    I try to access my documents and I get a pop saying "Windows Explorer has stopped working", he spends next to her saying "windowse Explorer restarts" the box with all the options of my document is then stopped. I tried accessin while market and stop the internet, and it makes no difference.

    What should I do

    Hello

    Use the startup clean and other methods to try to determine the cause of and eliminate
    the questions.

    ---------------------------------------------------------------

    What antivirus/antispyware/security products do you have on the machine? Be one you have NEVER
    on this machine, including those you have uninstalled (they leave leftovers behind which can cause
    strange problems).

    ----------------------------------------------------

    Follow these steps:

    Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

    Enter this at the command prompt - sfc/scannow

    How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
    generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Also run CheckDisk, so we cannot exclude as much as possible of the corruption.

    How to run the check disk at startup in Vista
    http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

    ==========================================

    After the foregoing:

    How to troubleshoot a problem by performing a clean boot in Windows Vista
    http://support.Microsoft.com/kb/929135
    How to troubleshoot performance issues in Windows Vista
    http://support.Microsoft.com/kb/950685

    Optimize the performance of Microsoft Windows Vista
    http://support.Microsoft.com/kb/959062
    To see everything that is in charge of startup - wait a few minutes with nothing to do - then right-click
    Taskbar - the Task Manager process - take a look at stored by - Services - this is a quick way
    reference (if you have a small box at the bottom left - show for all users, then check that).

    How to check and change Vista startup programs
    http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.html

    A quick check to see that load method 2 is - using MSCONFIG then put a list of
    those here.
    --------------------------------------------------------------------

    Tools that should help you:

    Process Explorer - free - find out which files, key of registry and other objects processes have opened.
    What DLLs they have loaded and more. This exceptionally effective utility will show you even who has
    each process.
    http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653.aspx

    Autoruns - free - see what programs are configured to start automatically when you start your system
    and you log in. Autoruns also shows you the full list of registry and file locations where applications can
    Configure auto-start settings.
    http://TechNet.Microsoft.com/en-us/sysinternals/bb963902.aspx
    Process Monitor - Free - monitor the system files, registry, process, thread and DLL real-time activity.
    http://TechNet.Microsoft.com/en-us/Sysinternals/bb896645.aspx

    There are many excellent free tools from Sysinternals
    http://TechNet.Microsoft.com/en-us/Sysinternals/default.aspx

    -Free - WhatsInStartUP this utility displays the list of all applications that are loaded automatically
    When Windows starts. For each request, the following information is displayed: Type of startup (registry/Startup folder), Command - Line String, the product name, Version of the file, the name of the company;
    Location in the registry or the file system and more. It allows you to easily disable or remove unwanted
    a program that runs in your Windows startup.
    http://www.NirSoft.NET/utils/what_run_in_startup.html

    There are many excellent free tools to NirSoft
    http://www.NirSoft.NET/utils/index.html

    Window Watcher - free - do you know what is running on your computer? Maybe not. The window
    Watcher says it all, reporting of any window created by running programs, if the window
    is visible or not.
    http://www.KarenWare.com/PowerTools/ptwinwatch.asp

    Many excellent free tools and an excellent newsletter at Karenware
    http://www.KarenWare.com/

    ===========================================

    Vista and Windows 7 updated drivers love then here's how update the most important.

    This is my generic how updates of appropriate driver:

    This utility, it is easy see which versions are loaded:

    -Free - DriverView utility displays the list of all device drivers currently loaded on your system.
    For each driver in the list, additional useful information is displayed: load address of the driver,
    Description, version, product name, company that created the driver and more.
    http://www.NirSoft.NET/utils/DriverView.html

    For drivers, visit manufacturer of emergency system and of the manufacturer of the device that are the most common.
    Control Panel - device - Graphics Manager - note the brand and complete model
    your video card - double - tab of the driver - write version information. Now, click on update
    Driver (this can do nothing as MS is far behind the certification of drivers) - then right-click.
    Uninstall - REBOOT it will refresh the driver stack.

    Repeat this for network - card (NIC), Wifi network, sound, mouse, and keyboard if 3rd party
    with their own software and drivers and all other main drivers that you have.

    Now in the system manufacturer (Dell, HP, Toshiba as examples) site (in a restaurant), peripheral
    Site of the manufacturer (Realtek, Intel, Nvidia, ATI, for example) and get their latest versions. (Look for
    BIOS, Chipset and software updates on the site of the manufacturer of the system here.)

    Download - SAVE - go to where you put them - right click - RUN AD ADMIN - REBOOT after
    each installation.

    Always check in the Device Manager - drivers tab to be sure the version you actually install
    presents itself. This is because some restore drivers before the most recent is installed (sound card drivers
    in particular that) so to install a driver - reboot - check that it is installed and repeat as
    necessary.

    Repeat to the manufacturers - BTW in the DO NOT RUN THEIR SCANNER device - check
    manually by model.

    Look at the sites of the manufacturer for drivers - and the manufacturer of the device manually.
    http://pcsupport.about.com/od/driverssupport/HT/driverdlmfgr.htm

    How to install a device driver in Vista Device Manager
    http://www.Vistax64.com/tutorials/193584-Device-Manager-install-driver.html

    If you update the drivers manually, then it's a good idea to disable the facilities of driver under Windows
    Updates, that leaves about Windows updates but it will not install the drivers that will be generally
    older and cause problems. If updates offers a new driver and then HIDE it (right click on it), then
    get new manually if you wish.

    How to disable automatic driver Installation in Windows Vista - drivers
    http://www.AddictiveTips.com/Windows-Tips/how-to-disable-automatic-driver-installation-in-Windows-Vista/
    http://TechNet.Microsoft.com/en-us/library/cc730606 (WS.10) .aspx

    ===========================================

    Refer to these discussions because many more excellent advice however don't forget to check your antivirus
    programs, the main drivers and BIOS update and also solve the problems with the cleanboot method
    first.

    Problems with the overall speed of the system and performance
    http://support.Microsoft.com/GP/slow_windows_performance/en-us

    Performance and Maintenance Tips
    http://social.answers.Microsoft.com/forums/en-us/w7performance/thread/19e5d6c3-BF07-49ac-a2fa-6718c988f125

    Explorer Windows stopped working
    http://social.answers.Microsoft.com/forums/en-us/w7performance/thread/6ab02526-5071-4DCC-895F-d90202bad8b3

    I hope this helps.

    Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle="" -="" mark="" twain="" said="" it="">

  • Bootcamp error: "the startup disk cannot be partitioned or restored to a single partition" and Windows recovery partitions

    I have Setup with Bootcamp Windows 8 and then upgrade to Windows 8.1, and then upgrade to Windows 10.

    When I want to restart the training camp that I got the error message: "the startup disk cannot be partitioned or restored to a single partition.

    According to this page, it is because of Windows recovery partitions added during the 8 to 8.1 migration and 8.1 to 10.

    I check with diskutil and I found 2 partitions of Windows Recovery:

    diskutil list

    / dev/disk0 (internal, physical):

    #: NAME SIZE TYPE IDENTIFIER

    0: GUID_partition_scheme * GB 500,3 disk0

    1: disk0s1 EFI EFI 209.7 MB

    2: Apple_CoreStorage Macintosh HD 419,4 GB disk0s2

    3: disk0s3 Apple_Boot Recovery 650.0 MB HD

    4: Microsoft database BOOTCAMP 79.1 GB disk0s4

    5: Windows Recovery 471.9 MB disk0s5

    6: Windows Recovery 472,9 MB disk0s6

    / dev/disk1 (internal, virtual):

    #: NAME SIZE TYPE IDENTIFIER

    0: Apple_HFS Macintosh HD GB + 419,0 disk1

    Logical volume on disk0s2

    C961E459-1E0D-4060-A467-3B4A705264AA

    Unencrypted

    I tried to delete the Windows Recovery 2 partitions with disk utility tools but the button "-" to remove them were leaving is disabled.

    Is it a good idea to remove these partitions? If yes how?

    1. What is the year/model of your Mac?

    2. you are trying to install a new copy of the W10 or remove the existing installation?

    3. do you have the W8 or installation/upgrade W8.1 had problems before the upgrade of the W10?

  • How can I copy restored c:\documents and settings\myusername\favorites\bookmarks at tab bookmarks Firefox bookmarks?

    My computer crashed and I had to restore it to its condition of purchase (2008). I had backed up all my data on Mozy. After the restoration of 12 GB of files, the 'Favorites' folder is in C:\Documents and Settings\myusername\favorites. The old shortcuts are in the folder, but I can't have them at my bookmarks Firefox tab. How can I do this?

    You can't do it this way. Those are the Favorites of IE and Firefox can't handle these files. You need to export your IE Favorites in bookmarks.htm format so that you then import this file into Firefox.

    In Internet Explorer:

    File > Import/Export - Export to HTML file

    then in Firefox:

    Bookmarks > show all bookmarks-> import and backup - import HTML... = HTML file

  • My "file, editing, display, history, Favorites, tools and help" options are hidden, I do not know how to make them visible.

    My "file, editing, display, history, Favorites, tools and help" options are hidden, I do not know how to make them visible.

    This has happened

    Just once or twice

    == My father-in-law messed with settings and downloaded a toolbar.

    Press the Alt key to display the Menu bar, then open view > toolbars and select menu bar, so it has a check mark.

  • How can I recover my old data settings document files firefox bookmarks and favorites of ie8.

    I need to reinstall windows xp sp2 I turned off my pc by updating the os now I ask a question after the reinstallation of the sp2 would be it possible to recover my old data settings firefox favorites bookmarks of ie8 and norton antivirus 360 documents.

    You might see if this folder is located on your computer.  Depending on how you installed Windows, it could be an old version of some files in pre-installation.

    C:\Windows.Old\

    But beyond that, there's no other place I could think that perhaps it would be after a reinstallation.

    Shameless plug for the new version:
    If you used Windows 8, all of your documents, files, Favorites, bookmarks are saved on your Microsoft Account so that you can use them even if you get a new computer (or reinstall an old one).

  • Can't see hidden files to delete in the folder C:\Documents and Settings\William\Local Settings\Temporary Internet Files

    C:\Documents and Settings\William\Local Settings\Temporary Internet Files folder there are more than 135,000 files; nearly 2,000 cases and close to 3 GB of data. These files do not display and I can't remove them by deleting temporary Internet files. When I try to see the files to help to locate hidden files, only three very small files appear. How can I delete these files? Can I delete the folder and create a new one?

    William

    You can also enter your options Internet Explorer (via Control Panel), on the general tab, in the browsing history, there should be a settings button, once there, you should be able to select Show files in the temporary Internet files section.  Who will open the file for you and you can do CTRL + A (select all), and then delete.

    Some of the files in the folder may be used, and if they are in use, you will not be able to remove them.  You will need to know what is their use, cannot be used, then delete them.

  • After Windows Recovery virus, all programs, folders, and documents are hidden

    Hey there. I think I just cleaned my old machine to windows XP from a virus apparently known as Windows Recovery using software Malwarebytes' Anti Malware. I have two questions:
    1. How can I be sure that I deleted everything about the virus?
    2. the virus seems to have converted all my documents, files and programs to the State that is 'hidden '. Here is what happened: at his first connection after removing all the stuff found virus, all items in my office were missing from the office, and no program was included in the area of all programs on the start menu. I did a few fishermen and found that all of my programs and documents are in fact still on the computer, but they just seem to be have a "hidden" attribute So I changed my settings folder options to "show the hidden files and folders" and now I see all my old files on my desktop and files, but they are all gray. If I right click on any file or folder, then click Properties, it still shows that specific file as 'hidden '. This attribute at this level then really UN-hides compensation file. How can I apply this to all files and folders instead of each individually?

    In addition, I still don't see any programs in the field of all programs on the start menu. I must go to c:\Program Files and navigate so (unless I have a shortcut on the desktop or the start menu). No idea how to get my programs listed in the programs area all over again?

    Hi Lea4Stas,

    Try the method of register: listed @ http://www.softwaretipsandtricks.com/forum/windows-xp/37769-unable-unhide-see-hidden-folders.html

    You must copy under settings (in) - in Notepad and click Save as "restore.reg" in quotes.

    ----------------------------------------------

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden]
    'Text"="@shell32.dll,-30499 '.
    'Type '=' group '.
    "Bitmap" = hex (2): 25, 00, 53, 00, 79, 00, 73, 00, 74, 00, 65, 00, 6 d, 00, 52, 00, 6f, 00, 6f
    00,74,------.
    00,25,00 5 C 00, 73, 00, 79, 00, 73, 00, 74, 00, 65, 00, 6 D, 00, 00, 33, 32.
    00, 5 C, 00, 53, 00,------.
    48,00,45,00, 4 c, 00, 4 c, 33, 00, 00, 32, 00, 2nd, 00, 64, 00, 6 c, 00, 6 c, 00.
    2 C, 34, 00, 00, 00,------.
    00
    "HelpID"="shell.hlp #51131.

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN]
    "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced."
    'Text"="@shell32.dll,-30501 '.
    'Type '=' radio '.
    "CheckedValue" =: 00000002
    "ValueName"="Hidden".
    "DefaultValue" =: 00000002
    "HKeyRoot" = dword:80000001
    "HelpID"="shell.hlp #51104.

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
    "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced."
    'Text"="@shell32.dll,-30500 '.
    'Type '=' radio '.
    "CheckedValue" = DWORD: 00000001
    "ValueName"="Hidden".
    "DefaultValue" =: 00000002
    "HKeyRoot" = dword:80000001
    "HelpID"="shell.hlp #51105.

    -----------------------------------

    I hope this helps.

  • Cannot reset the Documents folder; Favorites and library - Win Vista

    Dear community of Microsoft

    My Cousin gave me this window Vista Home Basics, to clean a find as much space as possible for her.

    She is not sure that with some things, she need to do to preserve the safety of his PC, and he has to make it work as well as can be.

    I did everything I can to this day, and now is well run, but I have a problem with the folder documents and other file docs in his name.

    It can be worn to, which, in my view, should be his State of origin and the image below, shows the State it is in now, from the left, with the favorite links and below, records.

    Records retract, but will not be retraced and it seem to be in the order mixed up.

    Anyone any ideas how I could rectify this please.

    I also tried to "Shut down" in the menu start to Win, as the default PC stop, but this operation to fix this problem, seems to be missing.

    Your image looks normal to me.  Windows Vista is not libraries made of the way in which Windows 7.  What you see there actually resembles a standard installation of Windows Vista.

    This is to show a brand new Windows Vista computer:

    (Click here to enlarge the photo)

  • Default programs seem to all have disappeared. help - my documents, pictures, and favorites are all gone

    My documents and pictures, and favorites are all gone!

    Hi Valerie,

    If the problem occurs is no longer, it is very difficult to say what happened in the first place.

    Usually this problem is caused by:

    1. a virus
    2. permissions on files
    3. file system corruption

    You can perform a scan for virus - just in case.

    It is also possible that the permissions of files were out of sorts and slipped somewhere along the way.

    Best regards

    Matthew_Ha

  • Why is the 'Documents and Settings' folder hidden and inaccessible?

    I used PC backup for backing up my XP files.  When I restore the files on my Windows 7 computer, I tried to bring it back to the "C:\Users\name\Desktop\test".  There is now a "Documents and Settings" folder hidden and inaccessible in my "C:\Users\name\Desktop\test".  How can I view/delete this folder?

    Short answer:  Because there isn't actually.  Please do not try to access it, you will help break your operating system if you try, and you will lose the ability to run several programs or worse.

    Why?  The tale:
    The Documents and Settings folder does not really exist in Windows 7.  This is only to fool the bad programs by redirecting to the right place (the Users folder).  Apparently he also deceived you.  It is not a real issue, do not try to access it.

    Or if you prefer, here's the long Version:
    First of all, the Documents and Settings folder came into existence in Windows 2000.  In order to shorten the path name (there is a limit to how many long letters we) as well as to create other languages of the operating system for use throughout the world, this folder has been renamed a few users in 2006 with the release of Windows Server and Windows Vista.
    Programs built the right way, that is not the real name or spelling (or language) of the book by fine user path, because they use the variable %UserProfile%.  However, many programs have been built the wrong way.  They are absolutely dependent on the existence of a folder called "Documents and Settings", spelled in English.  This program will crash if they do not find the file they want.  So to keep these plant program, Microsoft has created a record of false (called a junction Point) that redirects these programs on the folder of the user.  So if a program think he saved a file in c:\documents and settings\joe\desktop- the file will actually be saved to c:\users\joe\desktop.  The program never knows that he cheated.
    What you need to do:  Go to your Folder Options, tell him to Hide protected operating system files, and then use your computer normally.
  • My documents, backups and favorites are now in my pictures folder. How reverse whateve I did it and get it back to normal?

    I did some looking around inside the 'computer' on my windows machine 7.  I clicked on network just to see what it was, and something began to happen.  Now, my documents, my excel spreadsheets, backups, and favorites are appearing in my photo folder.  How to make?  Removing them and sending them to the trash gets rid of them permanently and I don't want to do that.  I want to just only my images in the image file and only my documents in the documents folder.  Help, I'm not real smart PC then wouldn't someone to tell me how to get this back to normal.

    Hello

    Please go to the Microsoft Community Forums.
     
    I would ask you to copy or move the files and folders you do not want in the photo folder to the location of your choice.
     
    See the section "copying and moving files and folders" from the link:
    Work with files and folders
     
    I hope this helps.

Maybe you are looking for