Hi Guys, I cleaned a 64 bit Win7 machine that had, I believe it was "File Recovery" rogue AV. This rogue removed icons. 1. Used HMP removed rogue <reboot> 2. Went to c:\users\username\appdata\local\temp\smtmp found folders 1 & 4 copied 1 to c:\program data\start menu & 4 I copied to c:\program data\ desktop many icons did not reappear, desktop & all programs! 3. run UNHIDE still all programs folders were "empty" & not all icons desktop returned 4. The machine at this point is stable, & quick, many scans, nothing found. 5. With the system stable & quick, I used "System Restore" pre- infected state. After system restore all icons back plus, wallpaper restored. What could I have done to get the icons & settings back, without having to use SR or re-install apps?