Items missing from Windows 7 Start Menu


Recommended Posts

Hello a customer of mine is having a strange problem. The other night something occurred on her PC where everything disappeared. I started looking around in the system and finally noticed that everything was set to hidden. I had seen something similar like this in the past from a virus but in her case no virus warning has come up, etc.

When I say everything I mean Icons, program short cuts, wallpaper, Start Menu items, etc.

I removed the hidden setting on everything I could and was able to get back the machine to a normal state but up to a point. I thought about a system restore but only yesterdays date appears. The rest were erased somehow.

The biggest problem now is that the text items on the right of the Start Menu like Control Panel, Computer, User Name, etc are all gone. I have never seen this before. Is there a way to restore this? It really looks abnormal.

I am changing her antivirus today (MSE) to a full security suite NIS 2012 in case it was malware. Since 2010 I have had experience with Windows 7 and it has been wonderful. It is very rare for me to see things like this happen. It would not surprise me on XP

Victor

http://www.<< spam >>/general-discussion/19329-all-programs-list-start-menu-disappearing.html

This is not spam, why is it saying its spam? It's win 7 bords

What site are you linking? Some were banned for spamming a long time ago :p

That's a malware infection... we've seen that pop up at work a lot recently. They can be difficult to get rid of, but try these:

http://www.geekstogo...den-files-help/

http://wyzguys.blogs...les-hidden.html

http://www.<< spam >>/system-security/219919-all-files-hidden-after-malware-popup.html

Edit: that last one was from the Windows 7 Forums, but the spam filter caught it.

This did not help me. The program folders do show but when you click to open most show empty. The big problem is the standard items on the right are totally gone and that I have never seen before.

See attached screen capture and you will see what I am talking about. This is what I am trying to get back. I should mention I purchased for her a Norton Internet Security 2012 with 2 years updates and have installed it and and running a scan. Prior to this I had MSE on here and I checked the quarantine before I removed it and saw that from 5-1-2012 thru 5-5-2012 it removed several malware.

This is probably what caused this problem. They are gone now.

post-325180-0-63137200-1336742475_thumb.

Reset start menu to default from right clicking the taskbar and going to properties. Also scan with Mbam and unhide the users directory to restore back to normal. Also make sure all the start menu links for the applications are there. If they aren't, they are in appdata/local

Well DUHH! On me!!

Sorry I forgot to check in there. Everything is back to normal. This malware really did a number.

  • 2 weeks later...

I fixed the problem and sorry for late reply. Everything was hidden due to a virus that came in. I unhid everything and then found a link to a program from someone called unhide,exe and that removed the hidden from many other aspects of the system and now all is well for the customer.

This topic is now closed to further replies.
  • Posts

    • FWIW StatCounter has been trash for over 25+ years! Back in the day (circa 2000 and GeoCities pre-Blogger era), it was useful to paste a number on your webpage indicating how many visitors you had. In the ensuing 25+ years, they've grown in reputation and changed their ways... but their overall consumer value has remained abysmal. Serious marketing agencies only cite StatCounter when there's literally no other sources available to support any marketing claims! They are the absolute lowest threshold serious companies use to push any sort of narrative about this-or-that happening. Besides their credibility being what it is, they are forever subject to quality issues. They're so bad that my DNS-level ad-filter prevents me from even viewing their main website! HA!
    • Microsoft had to shut down 70+ GitHub repos after getting hacked, brings back some by Aditya Tiwari The self-replicating malware campaign known as Miasma took the open-source world by storm. It was reported that almost 73 Microsoft GitHub repositories were infected by the worm and had to be temporarily shut down to determine how attackers compromised projects and stuffed password-stealing malware in the code. These GitHub repos span across different organizations, including Microsoft Azure, Azure-Samples, Microsoft, and MicrosoftDocs. The malware enabled attackers to steal passwords and credentials when compromised tools were opened in popular AI coding apps, including Claude Code, Gemini CLI, VS Code, and Cursor. The security firm Cloudsmith, malware analysis site OpenSourceMalware, and 404 Media were among the first to report the hack. For background, Miasma is a variant of the Mini Shai-Hulud worm, open-sourced by the threat group TeamPCP. It started its journey by compromising a Red Hat employee's GitHub account to attack the @redhat-cloud-services npm namespace. Earlier this month, Microsoft Threat Intelligence reported that the Miasma attackers published 32 malicious packages across more than 90 versions under the @redhat-cloud-services npm scope to steal cloud credentials. The worm didn't take long to start attacking source repos directly rather than package registries. It is known to skip the npm registry entirely for several targets and plant malicious code straight into public repos like "icflorescu/mantine-datatable." The delivery approach was designed to weaponize AI coding tools. Miasma's malicious payload embedded into projects can trigger automatic code execution when the infected repo is opened in an AI coding tool or IDE. The list of affected projects includes "durabletask", a Python package compromised by TeamPCP a month earlier to deliver an information stealer designed for Linux systems. That said, Microsoft has begun restoring some repos affected by the malware campaign, The Hacker News reports. A company spokesperson stated the following: Microsoft will continue to investigate the attack. It has notified a small number of customers who may have removed their content from the affected repos. The company will reach out to customers again through established support channels "if anything further is identified that requires customer action."
    • Why is Opera doing this notification at all? They have their own extension store. They don't have to obey anything dictated by Google. Others like Brave and Vivaldi that rely on Chrome's extension store, not so much. Firefox is entirely separate as well with its own extensions store. I honestly don't understand why entire world is just insisting on Chrome. Like, why? It's a stupid fat browser with barely any functionality. But sure, it's installed on everything by default. I don't understand how people even use web that's filled with tracking garbage and ads all over the place.
  • Recent Achievements

    • Week One Done
      rubentuben8 earned a badge
      Week One Done
    • Week One Done
      ARaclen earned a badge
      Week One Done
    • One Year In
      jojodbn earned a badge
      One Year In
    • One Month Later
      jojodbn earned a badge
      One Month Later
    • Week One Done
      jojodbn earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      529
    2. 2
      PsYcHoKiLLa
      231
    3. 3
      +Edouard
      131
    4. 4
      ATLien_0
      88
    5. 5
      Steven P.
      82
  • Tell a friend

    Love Neowin? Tell a friend!