METHOD 1 – automatic
Download and run UnHide
Note 1. If the first run doesn’t fix the issue, try to re-run UnHide.
Note 2. If any temporary file cleaner has been run after the infection, the above method will NOT work.
(credit goes to Grinler at http://www.bleepingcomputer.com)
=========================================================================================
METHOD 2 – semi-automatic
Vista/Windows 7
IF folder C:\Users\user_name\AppData\Local\Temp\smtmp exist…
Copy all content of this folder:
C:\Users\user_name\AppData\Local\Temp\smtmp\1
and paste it to this folder:
C:\Program Data\Start Menu
NOTE. “Start Menu” folder is a system folder, so in order to see it, in Windows Explorer, go Tools>Folder Options>View tab and UN-check “Hide protected operating system files”.
In order to access “Start Menu” folder, you may need take ownership of that folder: http://www.howtogeek…-menu-in-vista/
Copy all content of this folder:
C:\Users\user_name\AppData\Local\Temp\smtmp\2
and paste it to this folder:
C:\Users\user_name\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
NOTE. “Quick Launch” is also a system folder. See note above.
Copy all content of this folder:
C:\Users\user_name\AppData\Local\Temp\smtmp\3
and paste it to this folder:
C:\Users\user-name\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar
Copy all content of this folder:
C:\Users\user_name\AppData\Local\Temp\smtmp\4
and paste it to this folder:
C:\Program Data\Desktop
NOTE. “Desktop” folder is also a system folder. See note above.
==================================================================
Windows XP
IF folder C:\Documents and Settings\user_name\Local Settings\Temp\smtmp exist…
Copy all content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\1
and paste it to this folder:
C:\Documents and Settings\All Users\Start Menu
Copy all content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\2
and paste it to this folder:
C:\Documents and Settings\user_name\Application Data\Microsoft\Internet Explorer\Quick Launch
Copy all content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\3
and paste it to this folder:
C:\Documents and Settings\user_name\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar
Copy all content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\4
and paste it to this folder:
C:\Documents and Settings\All Users\Desktop
==================================================================================================
METHOD 3 – manual
If, for any reason, Method 1, or Method 2 don’t work you can…
***** …restore the defaults for the Start Menu, Accessories and Administrative Tools as follows:
Windows 2000 US English
http://download.blee…00-sm-reset.exe
Windows XP Pro 32-bit US English
http://download.blee…it-sm-reset.exe
Windows Vista 32-bit US English
http://download.blee…32-sm-reset.exe
Windows Vista 64-bit US English
http://download.blee…64-sm-reset.exe
Windows 7 32-bit US English
http://download.blee…32-sm-reset.exe
Windows 7 64-bit US English
http://download.blee…64-sm-reset.exe
(credit for the above goes to Grinler from http://www.bleepingcomputer.com)
***** …manually recreate “All Programs” entries, following these steps…
NOTE. In case programs links shows as (empty) see HERE
- Download App Paths
- Double click on AppPaths.exe to run the program.
- Keep the program open.
In this example I’ll recreate an entry for Avast antivirus program.
- Go Start>All Programs.
- Right click on Avast entry, click “Properties”.
NOTE. Make sure, you right click on Avast program, NOT on Avast folder.
- You’ll see this window:
Due to the damage caused by the infection, you’ll find “Target” box empty.
- Go back to AppPaths window and find Avast entry.
- Right click on Avast line, click “Edit”.
- A pop-up window will open:
- Highlight everything in “Path” box, right click on it, click “Copy”
- Go back to Avast “Properties” window, right click inside “Target” box, click “Paste”.
- IMPORTANT! Add quotation marks at the beginning of the path and at the end
- Click OK and you’re done.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In case, program’s link shows as (empty):
- Open Windows Explorer, navigate to Avast folder in Program Files
- Right click on Avast “.exe” file, click “Create shortcut”:
- Copy that shortcut, go back to Start menu.
- Right click on avast!Free Antivirus, click “Paste”.
- You’ll see Avast shortcut recreated replacing (empty) entry.
Alternatively….
…you paste that shortcut in:
(XP) – C:\Documents and Settings\All Users\Start Menu\Programs\Avast
(Vista/7) – C:\Program Data\Start Menu\Programs\Avast