Hi SafeSurf, many thanks for your guidance.
I have tried the repair option but the problem is still not fixed.
I ran recuva and could see some, not all, of the missing files but they reside in a directory that i could not find on the hard drive: ...\avast! sandbox\...
Then i ran avast quick scan and the result was clean.
After that I ran malwarebytes and it detected one item. See report below. The file is now under quarantine.
==================================================
Malwarebytes Anti-Malware (Trial) 1.61.0.1400
www.malwarebytes.orgDatabase version: v2012.06.25.08
Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
acer :: TANKS [administrator]
Protection: Enabled
26/6/2012 12:22:07 AM
mbam-log-2012-06-26 (00-28-40).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 251342
Time elapsed: 5 minute(s), 12 second(s)
Memory Processes Detected: 1
C:\Windows\KMService.exe (RiskWare.Tool.CK) -> 2172 -> No action taken.
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 1
C:\Windows\KMService.exe (RiskWare.Tool.CK) -> No action taken.
(end)
=====================================================
Below is the protection log file:
2012/06/26 00:20:33 +0800 TANKS acer MESSAGE Starting protection
2012/06/26 00:20:35 +0800 TANKS acer MESSAGE Protection started successfully
2012/06/26 00:20:38 +0800 TANKS acer MESSAGE Starting IP protection
2012/06/26 00:20:40 +0800 TANKS acer MESSAGE IP Protection started successfully
2012/06/26 00:35:41 +0800 TANKS acer MESSAGE Starting protection
2012/06/26 00:35:51 +0800 TANKS acer MESSAGE Protection started successfully
2012/06/26 00:35:54 +0800 TANKS acer MESSAGE Starting IP protection
2012/06/26 00:35:56 +0800 TANKS acer MESSAGE IP Protection started successfully
================================================================