Previous Thread
Index
Next Thread
Print Thread
Go To
Off-Topic
Joined: Jul 2007
Posts: 1,869
Expert
OP Offline
Expert
Joined: Jul 2007
Posts: 1,869
I was searching for last minute holidays and got a message, looking for all purposes like a genuine windows message stating that my hard disk had issues and needed repair. Foolishly I decided that this was a genuine message and allowed it through unser accounts control. Windows Security Essentials did nothing.

Some very nasty sad low life people then downloaded the "Recovery Virus" to my machine. This evil little program purports to dagnose variuos faluts on yuor machine and then tries to chrage you for the solution. I did not pay of course, but the damage its done is nasty.
I have managed to get rid of the virus, run various scans and eventually had to do a Windows Repair install.
However, when I hit Start/All Programs - al lthe program folders are there but they are all empty.

As this is a music machine there are lots of programs that will take weeks to reinstall.

I have been trying to google around to find out what to do and apparently this nasty *&^£" program hides them all away until you pay them money to get them back. However I fear my reinstall has wiped the folder (called smtemp) from my system as I can find no trace of it.


Does anyone know a way of restoring the "All programs" folders after they have been wiped?


thanks in advance


Win 11 64, Asus Rog Strix z390 mobo, 64 gig RAM, 8700k
Off-Topic
Joined: Feb 2007
Posts: 1,815
Expert
Offline
Expert
Joined: Feb 2007
Posts: 1,815
Yea, It is a nasty one.

In the hidden folder c:\program data\ there will be a directory that has the bad boy in it. The key is to start up in SAFE MODE (hit F8 a few times while while booting up), then launch windows explorer, show hidden files and then navigate to the \program data\ folder find the bad file/directory and rename it. It will be something like d34562723.exe (I am making up that title, because I don't remember the actual name.

You could also search for windows security virus and you will find a bunch of locations that will help. here is one: http://www.myantispyware.com/2012/07/20/how-to-remove-windows-security-renewal-virus/ . They go about fixing it a little different than I do, but I do run MalwareBytes Anti-malware (MBAM) also.

Does this help at all?


Now at bandcamp: Crows Say Vee-Eh @ bandcamp or soundcloud: Kevin @ soundcloud
Off-Topic
Joined: Feb 2007
Posts: 1,815
Expert
Offline
Expert
Joined: Feb 2007
Posts: 1,815
Oops, I noticed you did a windows repair already -- that might complicate things. Search your hard drive for your programs (like c:\bb for band-in-a-box) to ensure that it is still there. I am not 100% sure how to get all that back -- but I did get most of that back on my daughter's laptop when she got that virus. I can't remember how I did it. I just went back to the factory setting on that laptop this weekend, because I never could get things all the way back to the way I wanted it (it was infected and cleaned about 6 months ago).

... and don't pay anything -- they won't even fix your computer, just take your money.

Last edited by Kemmrich; 10/09/12 01:37 PM.

Now at bandcamp: Crows Say Vee-Eh @ bandcamp or soundcloud: Kevin @ soundcloud
Off-Topic
A
Anonymous
Unregistered
Anonymous
Unregistered
A
I have removed that with Malwarebytes and then Superantispyware. That virus is Russian and has been out every year since 2009.

Off-Topic
Joined: Jul 2007
Posts: 1,869
Expert
OP Offline
Expert
Joined: Jul 2007
Posts: 1,869
Thanks for your efforts K but As I have said above I have got rid of the virus itself, my question relates to restoring the All Programs shortcuts. I have done a lot of work restoring my machine and am getting to the position that I might have to reformat the drive and do a fresh install of everything, after which I shall install malware bytes and purchase this program specifically to get protection from this.

People should know that this SOAB also hides all the contents of your main user folder and generally ferrets around altering internet options, turning the screen black and all sorts of other nasties.

On further consdieration, I might even get an SSD drive for my system drive - this may be the time

It's a puzzle that you can't simply restore the shorctus in the Start/ All Programs folders, as its just an algo to copy a short cut for each app.


Now.. if only I could find the guy that actually wrote this virus...

Zero


Win 11 64, Asus Rog Strix z390 mobo, 64 gig RAM, 8700k
Off-Topic
Joined: Feb 2007
Posts: 1,815
Expert
Offline
Expert
Joined: Feb 2007
Posts: 1,815
Once I get my laptop installed with all the business and music software, I will do a full image backup, that I will use in the case of future infection. Going back to factory settings is OK, but it is a lot of work to get everything back to the way it needs to be.

Good luck on your re-build.


Now at bandcamp: Crows Say Vee-Eh @ bandcamp or soundcloud: Kevin @ soundcloud
Off-Topic
Joined: Jan 2007
Posts: 385
Journeyman
Offline
Journeyman
Joined: Jan 2007
Posts: 385
Quote:

As this is a music machine there are lots of programs that will take weeks to reinstall.




Well, Zero, look at the bright side.... Now you have clarified the question as to what to do on your holiday.

(Sorry, I know that wasn't helpful, but I just couldn't resist)


Brad -- My FAWM
Off-Topic
A
Anonymous
Unregistered
Anonymous
Unregistered
A
Quote:

Now.. if only I could find the guy that actually wrote this virus...




Then spend your vacation in Russia, because that's where this one comes from.

Off-Topic
Joined: May 2005
Posts: 222
Apprentice
Offline
Apprentice
Joined: May 2005
Posts: 222
The Linux users probably read this, shook their heads, and moved on.
However, I can't resist.

Windows for music... Linux for the Internet.


JBlatz
Off-Topic
Joined: Jun 2003
Posts: 1,116
Expert
Offline
Expert
Joined: Jun 2003
Posts: 1,116
Don't mess with anything until you try this!!! This is a FREE download.

You need a program called unhide.exe The reason you can't see your stuff is that the virus changes file and folder attributes to hidden. This program takes a while to run but it brings everything back.

You really haven't lost anything. The virus just fools you into thinking that you have. It is all still there.

Off-Topic
Joined: Jul 2000
Posts: 6,509
Veteran
Offline
Veteran
Joined: Jul 2000
Posts: 6,509
I can't help with this, but I can help for the future.

Get a disk image program like Norton Ghost (no relation to me) or Acronis - I use Ghost but have also read good things about Acronis. Disk image is MUCH, MUCH better than a plain old back-up app. I used to use Dantz Retrospect and a few others before that, and they were fine at restoring my data, but not the OS and they didn't clear a virus from my wife's computer.

I make a complete disk image once per month and in addition, before installing any new software. I also make incremental changes to the image every night before I turn the computer off (takes about 2 minutes).

I've not had a virus, but I've installed some nasty software that wrecked my system, but a Ghost image saved my *ss more than once.

Example case:
I got a Cubase LE disk free with a guitar pedal I bought. I hadn't tried Cubase in a long time and was curious to see if it had changed to the point where I might like it. So I made a fresh disk image and installed it. It went through most of the Cubase install, and asked me toto re-boot the computer. On re-boot the install never finished but again asked if I want to re-boot the computer. I was stuck in the re-boot loop, I wanted to finish the install so I tried the safe mode but even the safe mode wouldn't even get me out of the re-boot loop.

So I installed the Ghost rescue disk into the CD drive, booted from the CD, restored my HD from the image on my external USB drive and the computer was back to normal.

Stupid me, I tried installing Cubase LE again, and the same thing happened so it's back to Ghost again.

It should work for a virus as well. The disk image works better than a backup/restore because it supposedly re-writes your disk exactly as it was at the last back up. If you back up every night, you can get back there with no problem.

So once you get your computer up and running again, get a good disk imaging software app and back up daily. It can save your data.

Insights and incites by Notes


Bob "Notes" Norton smile Norton Music
https://www.nortonmusic.com

100% MIDI Super-Styles recorded by live, pro, studio musicians for a live groove
& Fake Disks for MIDI and/or RealTracks
Off-Topic
A
Anonymous
Unregistered
Anonymous
Unregistered
A
Just to make sure there is no confusion, running a program such as Ghost or Drive image or any of them is considered "imaging" the drive. "Back up" is a term most used to make copies of data files you can't lose. Ghost will make a snapshop of your entire drive, OS and all. I suggest you go one further and buy a second drive just like the one you have in the box now so your hard drives are identical. I prefer to not save my Ghost (I use Drive Image) images. I have heard hundreds of people go on and on about how they have "backed up" their drive and they did not understand that they backed up data but not imaged it to where they have a bootable OS on the spare drive.

Summary:

BACK UP moves copies of data files (doc, jpg, mp3, seq.....) to a secondary device

IMAGING makes a byte for byte copy of the entire drive and makes a second bootable hard drive

Off-Topic
Joined: Jul 2007
Posts: 1,869
Expert
OP Offline
Expert
Joined: Jul 2007
Posts: 1,869
Thanks for the replies folks. I tried the unhide.exe thing no joy. This nasy peice of work copies all your All program shorcuts to some folders names 1, 2, 3. It then deletes the shortcuts from there original location. As I have done a re-nistall I beleive that these folders then got wiped as trhere is no sign of them by all the search means at my disposal.

I have orders a Samsung SSD 830 256 Drive. I shall install my system folders fresh on that and probably BB folder. I have copied the BB folder to a spare hard disk. I have the everything pack 2012.5

I am not sure how to reinstall BIAB. I presume its a matter of getting out the original PG drive and then installing all the updates? I have had BIAB a good few years now.

There is a copy of Norton Ghost supplied with the SSD I shall image the drive when its pristine. Iknow the difference between image and back up, I was just lazy I confess. I did use system restore but the nasty virus wiped those files of my system - nice.

thanks for the sympathies


Win 11 64, Asus Rog Strix z390 mobo, 64 gig RAM, 8700k
Off-Topic
Joined: May 2003
Posts: 8,021
Veteran
Offline
Veteran
Joined: May 2003
Posts: 8,021
Quote:

The Linux users probably read this, shook their heads, and moved on.
However, I can't resist.

Windows for music... Linux for the Internet.



That would be me. Been saying this for quite a while.


John
ESI Gigaport HD+
Lenovo Turion II /4 Gig Ram/ Win7x64 be
15.6" Monitor
"The only Band is a Real Band"
www.wintertexaninfo.com/BANDS/JohnnyD.php
Off-Topic
Joined: Apr 2003
Posts: 886
Expert
Offline
Expert
Joined: Apr 2003
Posts: 886
IF your BiaB folder is intact, and you have used all default settings when installing, just go into it and find the "bbw" icon (it should be a little ways after the "Band-in-a-Box 2011-12-etc Manual" files, List View will help here) right Click & drag it to your desktop and Create A Shortcut. I have done this probably 100 times on a 100 nuke & paves, and it has always linked right up & found everything.

Make sure you use the bbw Icon, not the bbw3 or BBWICO ones!

And speaking of nuke & paves, don't just re-install onto the drive that got infected, or reuse it for something else, until ya do a "zero fill" and let it go. For my 1TB drive it takes about 2 days, but it will overwrite 99.9% of the software on the drive. If the program you are using has it, also do a complete wipe of the MBR before AND after your zero fill.

And I am a Acronis fan, Ghost always gave me problems. Even the Acronis versions that came with my Seagate, Maxtor, and WD HDD install disk worked better FOR ME than Ghost...

Of course this is a IMHO, YMMV, yada yada type of post....


i5 3.20GHz, 32gb RAM, 1tb SSD OS, 12tb HDD, 4gb gForce vid card, 32" monitor, Audient id44, Win10 x64, BiaB/RB 2023, Reaper 6,IK Multimedia Total Studio 3.5 MAX, Waves 10
Off-Topic
Joined: Apr 2003
Posts: 886
Expert
Offline
Expert
Joined: Apr 2003
Posts: 886
Quote:

Quote:

The Linux users probably read this, shook their heads, and moved on.
However, I can't resist.

Windows for music... Linux for the Internet.



That would be me. Been saying this for quite a while.




Linux Mint has been my go to since 11...Maya has been 100% solid on this system....


i5 3.20GHz, 32gb RAM, 1tb SSD OS, 12tb HDD, 4gb gForce vid card, 32" monitor, Audient id44, Win10 x64, BiaB/RB 2023, Reaper 6,IK Multimedia Total Studio 3.5 MAX, Waves 10
Off-Topic
Joined: Jul 2007
Posts: 1,869
Expert
OP Offline
Expert
Joined: Jul 2007
Posts: 1,869
Sorry I have no idea what a nuke, a pave, or a zoro fill is. Its OK though I feel good.


Win 11 64, Asus Rog Strix z390 mobo, 64 gig RAM, 8700k
Off-Topic
Joined: Apr 2003
Posts: 886
Expert
Offline
Expert
Joined: Apr 2003
Posts: 886
Opps! Sorry about that...

A "nuke & pave" is just a term for wiping your hard drive & re-installing everything fresh.

"Zero Fill" is where along with wiping the hard drive, you also have the program write "zeros" 0 across the entire drive, filling it with just 0...basically getting it "factory fresh".....tho there is a few more steps that can be done, this will basically clean out the drive..


i5 3.20GHz, 32gb RAM, 1tb SSD OS, 12tb HDD, 4gb gForce vid card, 32" monitor, Audient id44, Win10 x64, BiaB/RB 2023, Reaper 6,IK Multimedia Total Studio 3.5 MAX, Waves 10
Off-Topic
Joined: Oct 2008
Posts: 8,109
Veteran
Offline
Veteran
Joined: Oct 2008
Posts: 8,109
Quote:

Quote:

The Linux users probably read this, shook their heads, and moved on.
However, I can't resist.

Windows for music... Linux for the Internet.



That would be me. Been saying this for quite a while.




I finally joined the club too. (Ubuntu)
So far so good.

Off-Topic
Joined: Oct 2008
Posts: 8,109
Veteran
Offline
Veteran
Joined: Oct 2008
Posts: 8,109

Previous Thread
Next Thread
Go To

Link Copied to Clipboard
ChatPG

Ask sales and support questions about Band-in-a-Box using natural language.

ChatPG's knowledge base includes the full Band-in-a-Box User Manual and sales information from the website.

PG Music News
Last Chance! The Band-in-a-Box® 2026 for Mac® Special Ends Today (May 31, 2026) at 11:59pm PDT!

Time really is running out! Save up to 50% on Band-in-a-Box® 2026 for Mac® upgrades and receive a FREE Bonus PAK—only when you order by 11:59 PM PDT today!

We've added many major new features and new content in a redesigned Band-in-a-Box® 2026 for Mac®!

Version 2026 introduces a modernized GUI redesign across the program, with updated toolbars, refreshed windows, smoother workflows, and a new Dark Mode option. There’s also a new side toolbar for quicker access to commonly used windows, and the new Multi-View feature lets you arrange multiple windows as layered panels without overlap, making it easier to customize your workspace.

Another exciting new addition is the amazing new AI-Notes feature, which can transcribe polyphonic audio into MIDI. View the results in notation or play them back as MIDI, and choose whether to transcribe an entire track or transcribe specific parts like drums, bass, guitars/piano, or vocals. There's over 100 new features in Band-in-a-Box® 2026 for Mac®.

There's an amazing collection of new content too, including 202 RealTracks, new RealStyles, MIDI SuperTracks, Instrumental Studies, “Songs with Vocals” Artist Performance Sets, Playable RealTracks Set 5, two RealDrums Stems sets, and much more!

Upgrade your Band-in-a-Box for Mac® to save up to 50% on most Band-in-a-Box® 2026 upgrade packages!

Plus, when you order your Band-in-a-Box® 2026 Mac upgrade during our special, you'll receive a Free Bonus PAK of exciting new add-ons.

If you need any help deciding which package is the best option for you, just let us know. We are here to help!

Band-in-a-Box® 2026 Mac Special Offers Extended Until May 31st!

Good news- we've extended our Band-in-a-Box® 2026 for Mac® special offers until May 31, 2026!

Band-in-a-Box® 2026 is packed with major new features, enhancements, and an incredible lineup of new content! The program now sports a sleek, modern GUI redesign across the entire interface, including updated toolbars, refreshed windows, smoother workflows, a new dark mode option, and more. The brand-new side toolbar provides quicker access to key windows, while the new Multi-View feature lets you arrange multiple windows as layered panels without overlap, creating a flexible, clutter-free workspace. We have an amazing new “AI-Notes” feature. This transcribes polyphonic audio into MIDI so you can view it in notation or play it back as MIDI. You can transcribe an entire track (all pitched instruments and drums) or focus on individual parts like drums, bass, guitars/piano, or vocals. There's an amazing collection of new content too, including 202 RealTracks, new RealStyles, MIDI SuperTracks, Instrumental Studies, “Songs with Vocals” Artist Performance Sets, Playable RealTracks Set 5, two RealDrums Stems sets, and much more!

There are over 100 new features in Band-in-a-Box® 2026 for Mac®.

When you order purchase Band-in-a-Box® 2026 before 11:59 PM PDT on May 31st, you'll also receive a Free Bonus PAK packed with exciting new add-ons.

Check out the Band-in-a-Box® for Mac packages page to find the best package for you.

Holiday Weekend Hours

It's Victoria Day Long Weekend in Canada. Our Customer Service hours are:

Saturday, May 16: Closed
Sunday, May 17: Closed
Monday, May 18: 8:00am - 4:00pm

Regular hours
resume Tuesday, May 19th!

Today's the Last Day of the Band-in-a-Box 2026® for Mac Special!

Order before 11:59pm PDT today (May 15, 2026) to save up to 50% off your Band-in-a-Box® 2026 for Mac® upgrade and receive a FREE Bonus PAK loaded with great new Add-ons to use with this new version!

Don't wait - order today!

Check out all the new features in the redesigned Band-in-a-Box® 2026 for Mac®!

Band-in-a-Box® 2026 for Mac - Special Offers End at 11:59pm PDT on Friday, May 15th, 2026!

Order before 11:59pm PDT on Friday, May 15th and SAVE up to 50% on most Band-in-a-Box® version 2026 for Mac Upgrade packages... and that's not all! With your version 2026 for Mac purchase, we'll include a Bonus PAK full of great new Add-ons FREE! Upgrade to the 2026 49-PAK to receive even more NEW Add-ons including 20 additional RealTracks... that's 222 NEW RealTracks available with version Band-in-a-Box® 2026 for Mac!

Upgrade to Band-in-a-Box® 2026 for Mac® today for as little as $49! Check out the Band-in-a-Box® packages page for all available purchase options.

Learn more about the Free Bonus PAK and 49-PAK here.

If you have any questions about which package is the best option for you, just let us know. We're here to help!

202 New RealTracks Released with Band-in-a-Box 2026!

With Band-in-a-Box® 2026, we've released 202 incredible new RealTracks (in sets 468-488) in a variety of genres—featuring your most requested styles!

Jazz, Funk & World (Sets 468-475):
Our new jazz, funk & blues RealTracks include a groovin’ collection of RealTracks and RealDrums! These include more requested “soul jazz” RealTracks featuring artists Neil Swainson (bass), Charles Treadway (organ), Brent Mason (guitar), and Wes Little (drums). There are new “smooth jazz” styles (4), which include a RealTracks first: muted trumpet, as well as slick new smooth jazz brushes options for drums. Blues lovers will be thrilled—there are more “classic acoustic blues” styles, including guitar (5), bass (4), and drums (10) with blues master Colin Linden, featuring understated and tasty background acoustic soloing, plus brushes drums and acoustic bass. There are also new electric blues RealTracks, including electric blues with PG favorite Johnny Hiland (3) and soulful electric slide guitar from Colin Linden (4). If you love funk & gospel, there are great new options this year, including gospel organ (3) from Charles Treadway, as well as new funk, tango, and rock ’n’ roll drums (3) and bass (1). And for big, bold arrangements, we have uptempo soul horns (4) featuring a three-part hip horn section with options for a full mix or stems of each individual horn — plus an accompanying rhythm section (4) of drums, bass, guitar, and electric piano!

Rock & Pop (Sets 476–482):
Our new rock & pop RealTracks bring a powerful mix of requested favorites, fresh genres, and modern chart-inspired styles! We have more of our popular “Producer Layered Acoustic Guitars (15)” featuring Band-in-a-Box favorite Brent Mason. We’ve continued our much-requested disco styles (10), and added new Celtic guitar (5) with a more basic, accessible approach than our previous Drop-D or DADGAD offerings. There are also highly requested yacht rock styles (17), inspired by the smooth, polished soft-rock sound of the late ’70s and early ’80s — laid-back grooves, silky electric pianos, warm textures, elegant harmonic movement, and pristine production aesthetics. Fans of heavier styles will love our new glam metal (13), capturing the flashy, high-energy sound of ’80s arena-ready guitar rock. We also have a set of rootsy modern-folk rock (18), with a warm, organic sound combining contemporary folk textures and driving acoustic strumming. And we’ve added lots of new modern pop styles (16) — the kinds of sounds you’re hearing on the radio today, featuring exciting new drums, synths, and cutting-edge RealTracks arrangements.

Country, & Americana (Sets 483–488):
Our new country & Americana RealTracks deliver a rich collection of acoustic, electric, and roots-inspired styles! We have new country pop (9) with legendary guitarist Brent Mason. There is also a potpourri (14) of bouzouki, guitars, banjo, and more, perfect for adding texture and character to contemporary acoustic arrangements. We’ve added funky country guitar (5) with PG favorite Brent Mason, along with classic pedal steel styles (5) featuring steel great Doug Jernigan. There are more country songwriter styles (8) that provide intimate, rootsy foundations for storytelling and modern Americana writing. Finally, we have “background soloing” acoustic guitar (12) with Brent Mason — simpler, but still very tasty acoustic lines designed to sit beautifully behind vocals or act as a subtle standalone solo part.

Check out all the 202 new RealTracks (in sets 468-488)!

And, if you are looking for more, the 2026 49-PAK (for $49) includes an impressive collection of 20 bonus RealTracks, featuring exciting and inspiring additions to add to your RealTracks library. You'll get new country-rhythm guitar styles from PG Music favorites Johnny Hiland and Brent Mason, along with modern-pop grooves that capture today’s radio-ready sound! There are also new indie-folk styles with guitar, bass, 6-string bass used as a high-chording instrument, acoustic guitar, and banjo. Plus, dedicated "cymbal fills" RealDrums provide an added layer that work very well with low-key folky styles with other percussion.

The 2026 49-PAK is loaded with other great new add-ons as well. Learn more about the 2026 49-PAK!

2026 Free Bonus PAK & 49-PAK for Band-in-a-Box® 2026 for Mac®!

With your version 2026 for Mac Pro, MegaPAK, UltraPAK, UltraPAK+, Audiophile Edition or PlusPAK purchase, we'll include a Bonus PAK full of great new Add-ons for FREE! Or upgrade to the 2026 49-PAK for only $49 to receive even more NEW Add-ons including 20 additional RealTracks!

These PAKs are loaded with additional add-ons to supercharge your Band-in-a-Box®!

This Free Bonus PAK includes:

  • The 2026 RealCombos Booster PAK: -For Pro customers, this includes 27 new RealTracks and 23 new RealStyles. -For MegaPAK customers, this includes 25 new RealTracks and 23 new RealStyles. -For UltraPAK customers, this includes 12 new RealStyles.
  • MIDI Styles Set 92: Look Ma! More MIDI 15: Latin Jazz
  • MIDI SuperTracks Set 46: Piano & Organ
  • Instrumental Studies Set 24: Groovin' Blues Soloing
  • Artist Performance Set 19: Songs with Vocals 9
  • Playable RealTracks Set 5
  • RealDrums Stems Set 9: Cool Brushes
  • SynthMaster Sounds Set 1 (with audio demos)
  • iOS Android Band-in-a-Box® App
Looking for more great add-ons, then upgrade to the 2026 49-PAK for just $49 and you'll get:
  • 20 Bonus Unreleased RealTracks and RealDrums with 20 RealStyle.
  • FLAC Files (lossless audio files) for the 20 Bonus Unreleased RealTracks and RealDrums
  • MIDI Styles Set 93: Look Ma! More MIDI 16: SynthMaster
  • MIDI SuperTracks Set 47: More SynthMaster
  • Instrumental Studies 25 - Soul Jazz Guitar Soloing
  • Artist Performance Set 20: Songs with Vocals 10
  • RealDrums Stems Set 10: Groovin' Sticks
  • SynthMaster Sounds & Styles Set 2 (sounds & styles with audio demos)

Learn more about the Bonus PAK and 49-PAK for Band-in-a-Box® 2026 for Mac®!

Forum Statistics
Forums57
Topics86,442
Posts805,149
Members40,121
Most Online64,515
Apr 8th, 2026
Newest Members
Jerry Gerber, Fjane, vieumotar, dpckeys, Bloc
40,121 Registered Users
Top Posters(30 Days)
MarioD 127
DC Ron 95
rsdean 91
WaoBand 67
Today's Birthdays
Jan van der Linde
Powered by UBB.threads™ PHP Forum Software 7.7.5