Programmes in start menu have disappeared

[jt91]

All the programes in my start menu have disappeared. There are only a couple there. Like an hour ago, I noticed a had a folder in the programme folder called 'programmes' and when i opened it I had a replica of everything in the programmes list, but when I clicked on one of the folders in the new folder, it would just appear empty.

 

I would show a screenshot, but I cant access paint to 'paste' the screenshot. Even if I type it into the search box I doesnt appear. I typed in 'calculator' to see if I could get that and t also didnt appear. Could a virus be deleting things off my Harddrive?

 

Thanks.

[snow]

Hi jt, welcome to Extreme Tech Support - Free PC Help :)

 

Your start menu items could simply have been deleted or moved, but there is also the possibility that malware caused this.

 

The first thing I'd like you to check is whether or not you can run programs. Press and hold the Windows key on your keyboard, then type:

 

mspaint

 

in the run box that appears. This box is different from the one at the bottom of Vista's start menu.

 

Press enter, or click ok. You should see paint start up. If you can use it to post a screenshot of the problem then please do so.

 

Is there anything else wrong with your copy of Windows? If you try to use a shortcut on your desktop, does it work? Can you open files normally?

[jt91]

Hi jt, welcome to Extreme Tech Support - Free PC Help :)

 

Your start menu items could simply have been deleted or moved, but there is also the possibility that malware caused this.

 

The first thing I'd like you to check is whether or not you can run programs. Press and hold the Windows key on your keyboard, then type:

 

mspaint

 

in the run box that appears. This box is different from the one at the bottom of Vista's start menu.

 

Press enter, or click ok. You should see paint start up. If you can use it to post a screenshot of the problem then please do so.

 

Is there anything else wrong with your copy of Windows? If you try to use a shortcut on your desktop, does it work? Can you open files normally?

 

Run didnt appear after holding the windows key. I held it for a good 10 seconds. As soon as I released, the start menu just appeared.

 

I typed in 'mspaint' and it appeared this time. Usually I just have to type in 'paint'.

 

Anyways, heres the screenshot:

 

http://i260.photobucket.com/albums/ii31/jamesyyyya/startmenu.png

 

Note that there's the white page thing next to the start button. That is just skype. Sometimes the logo appears and sometimes its that. Thats been happening since I got skype so that's nothing to do with this (wouldnt mind help with sorting that out as well, but its (hopefully) not important).

 

And thanks for the help. :)

[jt91]

Also, my PC had just shut down after the screen went funny. Heres the error report Iv just got. Iv received this problem 4-5 times in the past few days. I updated my graphics driver and it didn't report any problems so im not sure what do do. Could it be part of the same problem? My Graphics card is vista enabled.

 

http://i260.photobucket.com/albums/ii31/jamesyyyya/BS.png

 

http://i260.photobucket.com/albums/ii31/jamesyyyya/BS1.png

[snow]

Sorry, I forgot to tell you to press 'R' while you held down the windows key, but I'm glad you figured it out anyway.

 

I'm fairly certain the problem with your graphics card will be unrelated to the disappearance of you start menu items. If you could please create a separate thread describing the problem in the graphics-cards section:

Graphics Cards - Computer Support Forums - FreePCHelp.co.uk

 

Then we can keep the two issues separate.

 

If you right-click on the start button, and select 'Open all users', the folder that contains your start menu items should appear. Go into the 'Programs' folder. Do you see any of your old items in there, or is it empty?

[jt91]

Ok i'll make a new thread in a moment as its not related.

 

http://i260.photobucket.com/albums/ii31/jamesyyyya/Untitled-1.png

[snow]

Considering that your programs folder appears to be missing, I think that now we should consider the possibility of a Malware infection.

 

I notice you use AVG. Please disable or remove it, preferable by uninstalling it. If you check our recommended security products:

http://extremetechsupport.com/forum/malware-removal-av-firewalls-etc/3597-free-pc-help-recommended-security-products.html

 

You won't find AVG on that list. After you have completed the following steps I highly recommend using one of the programs there to replace AVG.

 

 

Your computer appears to be infected with Malware. Malware is software designed to infiltrate or damage a computer system without the owner's informed consent. It is a combination of the words malicious and software. The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

 

It is in your best interest to note the following:

1. Please disable your resident security applications (such as AVG, Spybot, WinPatrol, etc.) before performing the below procedure so that they do not interfere with the process.
   
2. Perform all the steps in the order listed to avoid any conflicts.
   
3. If unsure, please stop and voice your doubts.
   
4. You might be required to go offline during the disinfection process. Therefore, it is recommended to print off the instructions below for ease of reference.
   

If you stick to the above guidelines, all should go smoothly.

 

 

================================================

STEP 1

1. Download ATF-Cleaner by Atribune.
   
2. Save the file to your Desktop.
   
3. Double-click on the file to run the program.
   
4. On the Main tab, check the Select All button.
   
5. Next, click on the Firefox tab (if applicable) and check the Select All button.
    
   Note: If you would like to preserve your saved passwords in Firefox, then click No at the corresponding prompt.
   
6. Now, click on the Opera tab (if applicable) and check the Select All button.
    
   Note: If you would like to preserve your saved passwords in Opera, then click No at the corresponding prompt.
   
7. Press the Empty Selected button and click OK to acknowledge the corresponding prompt.
   
8. Click on the Exit button to quit the program.
   

================================================

STEP 2

1. Please click here to download Malwarebytes' Anti-Malware.
   
2. Save the file to your Desktop.
   
3. Double-click mbam-setup.exe and follow the prompts to install the program.
   
4. At the end, make sure a check mark is placed next to:
   
   1. 
      
   2. Update Malwarebytes' Anti-Malware
      
   3. Launch Malwarebytes' Anti-Malware
      

 

[*]Click Finish.

[*]The program will download and update itself if it finds the necessity to do so. Please allow this.

[*]Once the program has loaded, select Perform full scan, then click Scan.

 

 

Note: Depending on your computer specifications, the scan may take some time to complete. Please wait patiently and do not interrupt the process.

[*]When the scan is complete, click OK, and then Show Results to view the results.

[*]Make sure that every entry is selected, and click Remove Selected.

[*]Restart your computer.

================================================

STEP 3

1. Please click here to download SUPERAntiSpyware (Free Version).
   
2. Save the file to your Desktop.
   
3. Double-click SUPERAntiSpyware.exe and follow the prompts to install the program.
   
4. Open SUPERAntiSpyware.
   
5. Under Configuration and Preferences, click the Preferences button.
   
6. Click the Scanning Control tab.
   
7. Under Scanner Options make sure the following fields checked:
   

    

   [*]Click the Close button to leave the control center screen.

   [*]On the main screen, under Scan for Harmful Software click Scan your computer.

   [*]On the left, make sure you check mark All the Fixed Drives.

   [*]On the right, under Complete Scan, choose Perform Complete Scan.

   [*]Click Next to start the scan. Please be patient while it scans your computer.

   [*]After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.

   [*]Make sure every entry has a check mark next to it and click Next.

   [*]A notification will appear that Quarantine and Removal is Complete. Click OK and then Finish to return to the main menu.

   [*]Restart your computer.

   ================================================

   STEP 4
   1. Please visit the ESET Online Scanner, using Internet Explorer to initiate the scan.
       
      Note: If you are running Windows Vista, then you will need Administrative privileges to complete the latter part of the procedure. To do so, right-click on the Internet Explorer icon in the Start Menu and select the Run As Administrator option in the shell context menu.
      
   2. Check mark the YES, I accept the Terms of Use box.
      
   3. Click the Start button.
      
   4. Click the Install button on the following screen.
      
   5. Click Start. This will will initialize and update the scanner engine.
      
   6. Check mark the box beside Remove found threats.
      
   7. Click the Scan button. This will start the scan. Please be patient while it is in progress.
      
   8. Restart your computer.
      

   ================================================

   STEP 5
   1. Click on Start > Programs > Accessories > System Tools and select System Restore.
      
   2. Choose the radio button marked Create a Restore Point on the first screen and click Next. Give the restore point a name then click Create. The new point will be stamped with the current date and time. Keep a note of this so you can find it easily should you need to use System Restore.
      
   3. Next, click on Start > Run, type Cleanmgr and click on OK.
      
   4. Click on the More Options tab.
      
   5. Click the Clean Up button in the System Restore section to remove all previous restore points except the most recent one.
      

   This will remove any infected files that have been backed up by Windows. The files in "System Restore" are protected to prevent any programs changing those files. This is the only foolproof way to ensure the deletion of those files.

    

   Note: Do not clear restore points on a regular basis as doing so will clear all previous restore points even those that you may need. System Restore is a useful tool to revert your computer back to a working condition if something goes wrong.

    

   Re-enable all your security applications and please return here and tell us how the computer seems to be operating.

    

   Happy Safe Computing! http://extremetechsupport.com/forum/../images/additional-smilies/thumb.gif

Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining

[jt91]

Step 1 went ok, Step 2 found nothing, step 3 found a little spyware, step 4 found something.

 

How can I do step 5? I cant get to Start > Programs > Accessories > System Tools as accessories is part of the stuff missing.

 

And thank you for your time :) Means a lot.

[Guest Wolfeymole]

What exactly did they find JT because with you running Poker Stars I'll bet it found a whole mess of spyware.

[jt91]

I havnt received warning of spyware from poker stars.

 

Eset log:

 

C:\Users\James\Desktop\Nero-9.4.13.2b_trial.exe Win32/Toolbar.AskSBar application deleted - quarantined

 

 

I got the nero trial off there site, so it should be fine, right?

 

Superspyware thing:

 

SUPERAntiSpyware Scan Log

SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

 

Generated 08/01/2009 at 04:00 PM

 

Application Version : 4.27.1000

 

Core Rules Database Version : 4032

Trace Rules Database Version: 1972

 

Scan type : Complete Scan

Total Scan Time : 00:40:03

 

Memory items scanned : 696

Memory threats detected : 0

Registry items scanned : 5870

Registry threats detected : 0

File items scanned : 25316

File threats detected : 12

 

Adware.Tracking Cookie

C:\Users\ME\AppData\Roaming\Microsoft\Windows\Cookies\james@atdmt[2].txt

C:\Users\ME\AppData\Roaming\Microsoft\Windows\Cookies\james@serving-sys[1].txt

C:\Users\ME\AppData\Roaming\Microsoft\Windows\Cookies\james@bs.serving-sys[2].txt

C:\Users\ME\AppData\Roaming\Microsoft\Windows\Cookies\Low\james@popcapgames.122.2o7[1].txt

C:\Users\ME\AppData\Roaming\Microsoft\Windows\Cookies\Low\james@cgm.adbureau[1].txt

C:\Users\ME\AppData\Roaming\Microsoft\Windows\Cookies\Low\james@atdmt[2].txt

C:\Users\ME\AppData\Roaming\Microsoft\Windows\Cookies\Low\james@adbureau[1].txt

C:\Users\ME\AppData\Roaming\Microsoft\Windows\Cookies\Low\james@skype.122.2o7[1].txt

C:\Users\SISTER\AppData\Roaming\Microsoft\Windows\Cookies\Low\michelle@atdmt[1].txt

C:\Users\SISTER\AppData\Roaming\Microsoft\Windows\Cookies\Low\michelle@doubleclick[1].txt

C:\Users\SISTER\AppData\Roaming\Microsoft\Windows\Cookies\Low\michelle@socialmedia[2].txt

C:\Users\SISTER\AppData\Roaming\Microsoft\Windows\Cookies\michelle@atdmt[2].txt

 

Changed the user names to 'ME' and 'SISTER' for security reasons.

[Guest Wolfeymole]

Where did you get Nero from James?

[jt91]

Nero - Nero 9 | The World's Leading DVD and CD Burning Software

 

Clicked try and went for the full version (15 days I think it was). it was to burn some pics to DVD disc as a slideshow.

[Guest Wolfeymole]

Well see here's the problem I have, I searched Nero for this version and couldn't find it at all.

 

Nero-9.4.13.2b_trial.exe

 

I have found it elsewhere though via sites that perhaps possess a dubious reputation.

 

Can you show me where that version exists on Nero please.

[jt91]

Well see here's the problem I have, I searched Nero for this version and couldn't find it at all.

 

Nero-9.4.13.2b_trial.exe

 

I have found it elsewhere though via sites that perhaps possess a dubious reputation.

 

Can you show me where that version exists on Nero please.

 

If you actually click on this it will take you to the official nero site (well as far as im aware its the official site - got it from google):

 

Nero - Nero 9 | The World's Leading DVD and CD Burning Software

 

Click on 'try' and select the full 15 day trial. You dont need to download it, but just look at the file name and you'll see that its from them (or iv been fooled onto a dodgy site listed by google).

 

Have we settled that matter? If so, how would I go about getting my 'programmes' list full again?

[Guest Wolfeymole]

Put this;

 

Nero-9.4.13.2b_trial.exe

 

Into this Nero search box James.

 

Nero - Search

 

See what happens.

[jt91]

Put this;

 

Nero-9.4.13.2b_trial.exe

 

Into this Nero search box James.

 

Nero - Search

 

See what happens.

 

Ok, so go to 'products' and select 'nero 9' and try it. I promise you that the trial file they let you download is called that.

 

Heres a screenshot for you:

 

http://i260.photobucket.com/albums/ii31/jamesyyyya/nerotrial.png

[jt91]

As Wolfeymole hasn't replied (but looking at the who's online page he has been on this thread) im guessing that I have successfully proved that I downloaded the nero trial from there site.

 

Please can we get back to sorting out my start menu? Really need to access the folders there. Is there anything I can do about that please?

[RandyL]

Hi jt;

 

This is usually caused by malware but try this first. Type "Programs" without the quotes into the search for files box. There is a small chance the folder has been moved. You'll likely see several results so open any "Programs" folders you find to look for the correct one.

[jt91]

The only 'Programs' folder that appears is 'media center programs'.

[RandyL]

Ok let's see if malware has changed your policies.

 

Open Superantispyware and click on Preferences. Click on the Repair tab.

 

Click on Remove Explorerer Policies Restrictions to highlite it.

 

Click on the Perform Repair tab.

 

I'm not sure but you may have to reboot.

[jt91]

Ok. Done that. I didnt need to reboot (or at least I didnt get a prompt to). Programs still missing :(

[RandyL]

jt on the off chance your Programs folder got deleted check in your recycle bin.

[jt91]

Recycle bin is empty.

[Plastic Nev]

OK Jt, Shame, but it was only an off chance sort of thing, can you get into system restore or did you turn that off and cleared all points during the malware removal sequence?

[RandyL]

Try a System Restore jt.

 

Open Computer and click on your main drive to highlite it.

 

On the Command bar click System Properties.

 

On the left side click System Protection.

 

Click the System protection tab.

 

Click the System restore button and choose a point before this happened.

 

Note you may have to tic "Choose a different restore point" to show older dates.