Windows Recovery Virus

[Halder]

Thanks Rev. for your reply. I did download the program you mentioned and it found nothing as did kaspersky. I guess the system restore got rid of it.

For the benefit of others who might run across this virus; the virus hides all your desk top icons, your drives and your programs on the start menu. They are all still there but the impression one gets is that they are gone.

When you finally get them back after system restore, you may note that
pdf, MS Word and media files stay translucent (grayed out) as if they are not accessible (though they are). I had to go into each file and change the attributes (from hidden) to make it fully visible. There is also a program called unhide.exe which does this system wide

Another thing the virus does is it appears to delete all your favorites folders (and subfolders) from Internet Explorer, when you try to add them on again you get the message that they already exist. You need to use windows explorer to access the favorites folder and unhide them (or add them) again.

Thanks for your assistance and I hope that no one else gets this virus.

I need to tell you that I am not a newbie and was fairly convinced at the windows box that came up (the virus itself) telling me of the hard drive failure, it was only the “Pay here for full version of Windows Recovery” that alerted me to it being a virus. I have added an image of it to this post to alert others.
halder

http://www.google.ca/imgres?imgurl=h...1t:429,r:0,s:0