Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Windows XP recovery virus infected many errors

Started by inferno007 , May 19 2011 02:56 PM

  • This topic is locked This topic is locked

#16
Render
Posted 20 May 2011 - 01:12 PM

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Are your programs/folders back?

Do this now:

Download fresh AVPTool from Here to your desktop

Run the program you have just downloaded to your desktop (it will be randomly named )

We will run a virus scan only
  • On the first tab select all elements down to including Computer and then select start scan (1)
  • Once it has finished select report (2) and post that.

Posted Image

  • Please be patient as this scan could take a long time to complete.
  • Click on Exit to uninstall AVP tool. You may need to restart your computer after that.

  • 0

Advertisements

#17
inferno007
Posted 20 May 2011 - 01:17 PM

inferno007

    Member

  • Topic Starter
  • Member
  • PipPip
  • 61 posts
Hey nope programs or folders are not back still hidden and i have to do tools in windows explorer and show hidden files to view them
my start menu is still empty
but now i got my desktop background back and i can change it :)

im going to scan now

thanks for your fast response
  • 0

#18
inferno007
Posted 20 May 2011 - 02:43 PM

inferno007

    Member

  • Topic Starter
  • Member
  • PipPip
  • 61 posts
completed the scan here is the report

20/05/2011 20:27:25 Task started

20/05/2011 21:36:01 Detected: Exploit.Java.CVE-2010-4452.a D:\Documents and Settings\JAYEN.SN049851020181\Application Data\Sun\Java\Deployment\cache\6.0\12\3cc664c-45f7c30e

20/05/2011 21:36:01 Detected: Exploit.Java.CVE-2010-4452.a D:\Documents and Settings\JAYEN.SN049851020181\Application Data\Sun\Java\Deployment\cache\6.0\0\6685d300-53904c18

20/05/2011 21:36:03 Detected: Exploit.Java.CVE-2010-4452.a D:\Documents and Settings\JAYEN.SN049851020181\Application Data\Sun\Java\Deployment\cache\6.0\40\3d9858a8-480dd135

20/05/2011 21:36:32 Deleted: Exploit.Java.CVE-2010-4452.a D:\Documents and Settings\JAYEN.SN049851020181\Application Data\Sun\Java\Deployment\cache\6.0\12\3cc664c-45f7c30e

20/05/2011 21:36:32 Deleted: Exploit.Java.CVE-2010-4452.a D:\Documents and Settings\JAYEN.SN049851020181\Application Data\Sun\Java\Deployment\cache\6.0\40\3d9858a8-480dd135

20/05/2011 21:36:33 Deleted: Exploit.Java.CVE-2010-4452.a D:\Documents and Settings\JAYEN.SN049851020181\Application Data\Sun\Java\Deployment\cache\6.0\0\6685d300-53904c18

20/05/2011 21:42:53 Task completed

Posted Image

Edited by inferno007, 20 May 2011 - 02:47 PM.

  • 0

#19
Render
Posted 20 May 2011 - 02:48 PM

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Logs looks clean. Now let's try to put back your shortcuts. Do the following and let me now the results:
  • Download and run unhide.exe by grinler from HERE
  • Once complete, you should now have all of your folders and icons visible again

  • 0

#20
inferno007
Posted 20 May 2011 - 03:06 PM

inferno007

    Member

  • Topic Starter
  • Member
  • PipPip
  • 61 posts
i have run it and i have most of my files and folders back showing up.
but in my start menu for some programs the program folder is back but it is shown empty anything i can do about it??

most of them are actually shown empty

Edited by inferno007, 20 May 2011 - 03:07 PM.

  • 0

#21
Render
Posted 20 May 2011 - 03:13 PM

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Let's see what we can do about it. Please do this:

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:

    :dir
%Temp%\smtmp /s
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

Also, please, tell me what programs in Start menu are affected.
  • 0

#22
inferno007
Posted 20 May 2011 - 03:20 PM

inferno007

    Member

  • Topic Starter
  • Member
  • PipPip
  • 61 posts
hi thanks for your quick replay! :) :unsure:

almost all programs are affected in the start menu
i.e. tuneup utilities, yahoo messenger, real player, winodws live etc and i also have windows xp recovery in the start menu which was the virus it has 2 links in it uninstall and windows xp recovery
my guess is the shortcuts for it has left behind

Edited by inferno007, 20 May 2011 - 03:21 PM.

  • 0

#23
inferno007
Posted 20 May 2011 - 03:20 PM

inferno007

    Member

  • Topic Starter
  • Member
  • PipPip
  • 61 posts
here is the report u asked for

SystemLook 04.09.10 by jpshortstuff
Log created at 22:17 on 20/05/2011 by JAYEN
Administrator - Elevation successful

========== dir ==========

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp - Parameters: "/s"

---Files---
None found.

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1 d------ [20:26 19/05/2011]
desktop.ini --ahs-- 272 bytes [00:11 24/06/2009] [11:12 25/06/2009]
Driving Theory Test Express.lnk ------- 612 bytes [17:17 12/07/2010] [17:17 12/07/2010]
HP Solution Center.lnk ------- 869 bytes [09:03 24/06/2009] [09:03 24/06/2009]
TV ON-OFF.lnk ------- 1481 bytes [16:24 23/06/2009] [08:13 24/06/2009]
Windows Catalog.lnk ------- 398 bytes [00:11 24/06/2009] [23:59 10/08/2004]
Windows Messenger.lnk ------- 609 bytes [00:11 24/06/2009] [23:54 10/08/2004]
Windows Update.lnk ------- 1434 bytes [00:11 24/06/2009] [16:46 13/12/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs d------ [20:26 19/05/2011]
Adobe Reader 9.lnk --a---- 2181 bytes [15:22 06/10/2010] [11:06 23/04/2011]
desktop.ini --ahs-- 150 bytes [00:11 24/06/2009] [23:57 10/08/2004]
Mozilla Firefox.lnk --a---- 625 bytes [17:38 23/03/2011] [17:38 23/03/2011]
TuneUp Utilities 2011.lnk --a---- 1628 bytes [17:39 15/03/2011] [18:34 05/05/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Accessories d------ [20:26 19/05/2011]
Calculator.lnk --a---- 1419 bytes [00:11 24/06/2009] [16:46 13/12/2010]
desktop.ini --ahs-- 255 bytes [00:11 24/06/2009] [19:20 05/10/2009]
Paint.lnk --a---- 1430 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Remote Desktop Connection.lnk --a---- 1504 bytes [11:12 25/06/2009] [17:50 15/03/2011]
Scanner and Camera Wizard.lnk --a---- 623 bytes [18:28 23/06/2009] [19:20 05/10/2009]
WordPad.lnk --a---- 786 bytes [00:11 24/06/2009] [23:54 10/08/2004]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Accessibility d------ [20:26 19/05/2011]
Accessibility Wizard.lnk --a---- 1431 bytes [00:11 24/06/2009] [16:46 13/12/2010]
desktop.ini --ahs-- 90 bytes [00:11 24/06/2009] [23:54 10/08/2004]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Communications d------ [20:26 19/05/2011]
desktop.ini --ahs-- 516 bytes [00:11 24/06/2009] [11:13 25/06/2009]
HyperTerminal.lnk --a---- 693 bytes [00:11 24/06/2009] [23:54 10/08/2004]
Network Connections.lnk --a---- 1682 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Network Setup Wizard.lnk --a---- 1547 bytes [00:11 24/06/2009] [16:46 13/12/2010]
New Connection Wizard.lnk --a---- 1553 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Wireless Network Setup Wizard.lnk --a---- 1563 bytes [00:11 24/06/2009] [16:46 13/12/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Entertainment d------ [20:26 19/05/2011]
desktop.ini --ahs-- 146 bytes [00:11 24/06/2009] [23:54 10/08/2004]
Sound Recorder.lnk --a---- 1435 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Volume Control.lnk --a---- 1435 bytes [00:11 24/06/2009] [16:46 13/12/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Microsoft Interactive Training d------ [20:26 19/05/2011]
Microsoft Interactive Training Help.lnk --a---- 710 bytes [00:11 24/06/2009] [00:15 11/08/2004]
Microsoft Interactive Training.lnk --a---- 803 bytes [00:11 24/06/2009] [00:15 11/08/2004]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Accessories\System Tools d------ [20:26 19/05/2011]
Character Map.lnk --a---- 1430 bytes [00:11 24/06/2009] [16:46 13/12/2010]
desktop.ini --ahs-- 703 bytes [00:11 24/06/2009] [23:59 10/08/2004]
Disk Cleanup.lnk --a---- 1439 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Disk Defragmenter.lnk --a---- 1487 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Files and Settings Transfer Wizard.lnk --a---- 1492 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Scheduled Tasks.lnk --a---- 1678 bytes [00:11 24/06/2009] [16:46 13/12/2010]
System Information.lnk --a---- 977 bytes [00:11 24/06/2009] [23:56 10/08/2004]
System Restore.lnk --a---- 1511 bytes [00:11 24/06/2009] [16:46 13/12/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Administrative Tools d------ [20:26 19/05/2011]
Component Services.lnk --a---- 1489 bytes [00:11 24/06/2009] [23:55 10/08/2004]
Computer Management.lnk --a---- 1515 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Data Sources (ODBC).lnk --a---- 1509 bytes [00:11 24/06/2009] [16:46 13/12/2010]
desktop.ini --ahs-- 476 bytes [00:11 24/06/2009] [23:59 10/08/2004]
Event Viewer.lnk --a---- 1505 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Microsoft .NET Framework 1.1 Configuration.lnk --a---- 970 bytes [16:19 23/06/2009] [08:07 24/06/2009]
Microsoft .NET Framework 1.1 Wizards.lnk --a---- 1011 bytes [16:19 23/06/2009] [08:07 24/06/2009]
Performance.lnk --a---- 1506 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Services.lnk --a---- 1515 bytes [00:11 24/06/2009] [16:46 13/12/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Adobe d------ [20:26 19/05/2011]
dreamweaver CS4.lnk --a---- 683 bytes [14:38 18/09/2009] [12:37 18/09/2009]
Flash CS4.lnk --a---- 552 bytes [14:38 18/09/2009] [13:49 18/09/2009]
Photoshop CS4.lnk --a---- 667 bytes [14:38 18/09/2009] [13:38 18/09/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\avast! Free Antivirus d------ [20:26 19/05/2011]
avast! Free Antivirus.lnk --a---- 1589 bytes [18:07 20/01/2010] [11:00 27/07/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\DivX Plus d------ [20:26 19/05/2011]
Check for Updates.lnk --a---- 706 bytes [17:52 24/10/2010] [16:21 13/12/2010]
Codec Settings.lnk --a---- 708 bytes [17:52 24/10/2010] [19:53 13/05/2011]
DivX Plus Converter.lnk --a---- 672 bytes [17:52 24/10/2010] [19:52 13/05/2011]
DivX Plus Player.lnk --a---- 648 bytes [19:53 13/05/2011] [19:53 13/05/2011]
DivX Support.lnk --a---- 1034 bytes [17:21 29/11/2010] [19:54 13/05/2011]
Post DivX® video to your website.lnk --a---- 1034 bytes [17:53 24/10/2010] [19:54 13/05/2011]
Register.lnk --a---- 718 bytes [17:52 24/10/2010] [16:21 13/12/2010]
Why Buy DivX Pro.lnk --a---- 1040 bytes [17:53 24/10/2010] [19:54 13/05/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Games d------ [20:26 19/05/2011]
desktop.ini --ahs-- 798 bytes [00:11 24/06/2009] [23:54 10/08/2004]
Freecell.lnk --a---- 1435 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Hearts.lnk --a---- 1433 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Internet Backgammon.lnk --a---- 820 bytes [00:11 24/06/2009] [23:54 10/08/2004]
Internet Checkers.lnk --a---- 820 bytes [00:11 24/06/2009] [23:54 10/08/2004]
Internet Hearts.lnk --a---- 820 bytes [00:11 24/06/2009] [23:54 10/08/2004]
Internet Reversi.lnk --a---- 820 bytes [00:11 24/06/2009] [23:54 10/08/2004]
Internet Spades.lnk --a---- 820 bytes [00:11 24/06/2009] [23:54 10/08/2004]
Minesweeper.lnk --a---- 1430 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Pinball.lnk --a---- 792 bytes [00:11 24/06/2009] [23:54 10/08/2004]
Solitaire.lnk --a---- 1414 bytes [00:11 24/06/2009] [16:46 13/12/2010]
Spider Solitaire.lnk --a---- 1419 bytes [00:11 24/06/2009] [16:46 13/12/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Harbor Lights ScSv d------ [20:26 19/05/2011]
Configure Harbor Lights ScSv.lnk --a---- 665 bytes [10:04 12/01/2011] [10:04 12/01/2011]
Run Harbor Lights ScSv.lnk --a---- 507 bytes [10:04 12/01/2011] [10:04 12/01/2011]
Uninstall Harbor Lights ScSv.lnk --a---- 450 bytes [10:04 12/01/2011] [10:04 12/01/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment d------ [20:26 19/05/2011]
PowerCinema.lnk --a---- 1440 bytes [08:43 24/06/2009] [08:43 24/06/2009]
Windows Movie Maker.lnk --a---- 693 bytes [00:11 24/06/2009] [23:57 10/08/2004]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX d------ [20:26 19/05/2011]
Check for DivX Updates.lnk --a---- 1599 bytes [08:51 25/06/2009] [10:25 02/10/2009]
Post DivX® video to your website.lnk --a---- 1028 bytes [08:51 25/06/2009] [10:25 02/10/2009]
Why Buy DivX Pro.lnk --a---- 1034 bytes [08:51 25/06/2009] [10:25 02/10/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX\DivX Codec d------ [20:26 19/05/2011]
Register Products.lnk --a---- 1601 bytes [08:51 25/06/2009] [10:25 02/10/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX\DivX Codec\Links d------ [20:26 19/05/2011]
Latest DivX Codec news.lnk --a---- 1018 bytes [08:51 25/06/2009] [10:25 02/10/2009]
Learn about DivX Pro Codec.lnk --a---- 1040 bytes [08:51 25/06/2009] [10:25 02/10/2009]
Why Buy DivX Pro.lnk --a---- 1034 bytes [08:51 25/06/2009] [10:25 02/10/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX\DivX Converter d------ [20:26 19/05/2011]
Register Products.lnk --a---- 1601 bytes [10:26 02/10/2009] [10:26 02/10/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX\DivX Converter\Links d------ [20:26 19/05/2011]
Latest DivX Converter news.lnk --a---- 1032 bytes [10:26 02/10/2009] [10:26 02/10/2009]
Learn about DivX Converter.lnk --a---- 1050 bytes [10:26 02/10/2009] [10:26 02/10/2009]
Why Buy DivX Pro.lnk --a---- 1034 bytes [10:26 02/10/2009] [10:26 02/10/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX\DivX Player d------ [20:26 19/05/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX\DivX Player\Links d------ [20:26 19/05/2011]
Latest DivX Player news.lnk --a---- 1262 bytes [08:51 25/06/2009] [08:51 25/06/2009]
Learn about DivX advanced features.lnk --a---- 1274 bytes [08:51 25/06/2009] [08:51 25/06/2009]
Learn about DivX Player.lnk --a---- 1316 bytes [08:51 25/06/2009] [08:51 25/06/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX\DivX Plus DirectShow Filters d------ [20:26 19/05/2011]
H264 Decoder Config.lnk --a---- 669 bytes [08:51 25/06/2009] [10:26 02/10/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX\DivX Web Player d------ [20:26 19/05/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX\DivX Web Player\Links d------ [20:26 19/05/2011]
Learn about DivX Web Player.lnk --a---- 1298 bytes [08:51 25/06/2009] [08:51 25/06/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\DivX\Helpful Links d------ [20:26 19/05/2011]
DivX Forums.lnk --a---- 1016 bytes [08:51 25/06/2009] [10:25 02/10/2009]
DivX Labs.lnk --a---- 1006 bytes [08:51 25/06/2009] [10:25 02/10/2009]
DivX Products.lnk --a---- 1020 bytes [08:51 25/06/2009] [10:25 02/10/2009]
DivX Support.lnk --a---- 1028 bytes [08:51 25/06/2009] [10:25 02/10/2009]
Learn about DivX advanced features.lnk --a---- 1030 bytes [08:51 25/06/2009] [10:25 02/10/2009]
Learn about DivX Author.lnk --a---- 1026 bytes [08:51 25/06/2009] [10:25 02/10/2009]
Learn about DivX software.lnk --a---- 1030 bytes [08:51 25/06/2009] [10:25 02/10/2009]
Visit DivX.com.lnk --a---- 1024 bytes [08:51 25/06/2009] [10:25 02/10/2009]
Why Buy DivX Pro.lnk --a---- 1034 bytes [08:51 25/06/2009] [10:25 02/10/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Home Entertainment\Total Video Converter d------ [20:26 19/05/2011]
Media Burner.lnk --a---- 591 bytes [13:06 28/06/2009] [13:06 28/06/2009]
Total Video Converter on the Web.lnk --a---- 385 bytes [13:06 28/06/2009] [13:06 28/06/2009]
Total Video Player.lnk --a---- 561 bytes [13:06 28/06/2009] [13:06 28/06/2009]
Uninstall Total Video Converter.lnk --a---- 582 bytes [13:06 28/06/2009] [13:06 28/06/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\HP d------ [20:26 19/05/2011]
HP Document Viewer.lnk --a---- 1687 bytes [09:05 24/06/2009] [09:05 24/06/2009]
HP Photosmart Express.lnk --a---- 1754 bytes [09:04 24/06/2009] [09:04 24/06/2009]
HP Photosmart Transfer.lnk --a---- 1694 bytes [09:04 24/06/2009] [09:04 24/06/2009]
HP Product Assistant.lnk --a---- 949 bytes [09:03 24/06/2009] [09:03 24/06/2009]
HP Solution Center.lnk --a---- 869 bytes [09:03 24/06/2009] [09:03 24/06/2009]
HP Update.lnk --a---- 1705 bytes [10:18 25/06/2009] [10:18 25/06/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\HP\Photosmart C4100 series d------ [20:26 19/05/2011]
Help.lnk --a---- 741 bytes [09:06 24/06/2009] [09:06 24/06/2009]
Product Registration.lnk --a---- 709 bytes [09:06 24/06/2009] [09:06 24/06/2009]
Product Support Website.lnk --a---- 851 bytes [09:06 24/06/2009] [09:06 24/06/2009]
Readme.lnk --a---- 667 bytes [09:06 24/06/2009] [09:06 24/06/2009]
Uninstall.lnk --a---- 982 bytes [09:06 24/06/2009] [09:06 24/06/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Internet & Security d------ [20:26 19/05/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Internet & Security\avast! Antivirus d------ [20:26 19/05/2011]
avast! Web Site.url --a---- 87 bytes [08:14 25/06/2009] [08:14 25/06/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Internet & Security\Mozilla Firefox d------ [20:26 19/05/2011]
Mozilla Firefox (Safe Mode).lnk --a---- 1525 bytes [17:04 08/07/2009] [17:04 08/07/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Internet & Security\Spybot - Search & Destroy d------ [20:26 19/05/2011]
File Shredder.lnk --a---- 703 bytes [08:43 25/06/2009] [08:43 25/06/2009]
Spybot - Search & Destroy.lnk --a---- 812 bytes [08:43 25/06/2009] [08:43 25/06/2009]
Tutorial.lnk --a---- 810 bytes [08:43 25/06/2009] [08:43 25/06/2009]
Uninstall Spybot-S&D.lnk --a---- 828 bytes [08:43 25/06/2009] [08:43 25/06/2009]
Update Spybot-S&D.lnk --a---- 742 bytes [08:43 25/06/2009] [08:43 25/06/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Logitech d------ [20:26 19/05/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Logitech\Logitech Webcam Software d------ [20:26 19/05/2011]
Logitech Webcam Software.lnk --a---- 2291 bytes [19:01 05/10/2009] [19:06 05/10/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Office d------ [20:26 19/05/2011]
Microsoft Access 2010.lnk --a---- 2333 bytes [12:16 08/01/2011] [12:23 08/01/2011]
Microsoft Excel 2010.lnk --a---- 2341 bytes [12:16 08/01/2011] [12:21 08/01/2011]
Microsoft PowerPoint 2010.lnk --a---- 2345 bytes [12:16 08/01/2011] [12:21 08/01/2011]
Microsoft Publisher 2010.lnk --a---- 2389 bytes [12:16 08/01/2011] [12:21 08/01/2011]
Microsoft Word 2010.lnk --a---- 2379 bytes [12:16 08/01/2011] [19:05 16/05/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office 2010 Tools d------ [20:26 19/05/2011]
Digital Certificate for VBA Projects.lnk --a---- 2365 bytes [12:16 08/01/2011] [12:24 08/01/2011]
Microsoft Clip Organizer.lnk --a---- 2325 bytes [12:16 08/01/2011] [12:24 08/01/2011]
Microsoft Office 2010 Language Preferences.lnk --a---- 2247 bytes [12:16 08/01/2011] [12:24 08/01/2011]
Microsoft Office 2010 Upload Center.lnk --a---- 2283 bytes [12:16 08/01/2011] [12:24 08/01/2011]
Microsoft Office Picture Manager.lnk --a---- 2293 bytes [12:16 08/01/2011] [12:24 08/01/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Nexon d------ [20:27 19/05/2011]
Combat Arms EU.lnk --a---- 1437 bytes [15:30 11/04/2011] [15:30 11/04/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Packard Bell Support d------ [20:27 19/05/2011]
Smart restore.lnk --a---- 1423 bytes [16:40 23/06/2009] [08:19 24/06/2009]
Snapsys.lnk --a---- 1405 bytes [16:40 23/06/2009] [08:19 24/06/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\QuickTime d------ [20:27 19/05/2011]
About QuickTime.lnk --a---- 1802 bytes [19:38 25/03/2011] [19:38 25/03/2011]
PictureViewer.lnk --a---- 1812 bytes [19:38 25/03/2011] [19:38 25/03/2011]
QuickTime Player.lnk --a---- 1802 bytes [19:38 25/03/2011] [19:38 25/03/2011]
Uninstall QuickTime.lnk --a---- 1554 bytes [19:38 25/03/2011] [19:38 25/03/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Rainmeter d------ [20:27 19/05/2011]
RainBackup.lnk --a---- 1694 bytes [12:43 28/12/2010] [12:43 28/12/2010]
RainBrowser.lnk --a---- 1706 bytes [12:43 28/12/2010] [12:43 28/12/2010]
Rainmeter Help.URL --a---- 68 bytes [12:43 28/12/2010] [12:43 28/12/2010]
Rainmeter.lnk --a---- 1473 bytes [12:43 28/12/2010] [12:43 28/12/2010]
Rainstaller.lnk --a---- 1706 bytes [12:43 28/12/2010] [12:43 28/12/2010]
RainThemes.lnk --a---- 1694 bytes [12:43 28/12/2010] [12:43 28/12/2010]
Remove Rainmeter.lnk --a---- 1456 bytes [12:43 28/12/2010] [12:43 28/12/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Real d------ [20:27 19/05/2011]
RealPlayer Converter.lnk --a---- 727 bytes [16:55 31/12/2010] [16:55 31/12/2010]
RealPlayer Trimmer.lnk --a---- 673 bytes [16:55 31/12/2010] [16:55 31/12/2010]
RealPlayer.lnk --a---- 649 bytes [16:54 31/12/2010] [16:54 31/12/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\RocketDock d------ [20:27 19/05/2011]
PunkSoftware.com.lnk --a---- 393 bytes [15:05 09/01/2011] [15:05 09/01/2011]
RocketDock Documentation.lnk --a---- 666 bytes [15:05 09/01/2011] [15:05 09/01/2011]
RocketDock.lnk --a---- 555 bytes [15:05 09/01/2011] [15:05 09/01/2011]
Uninstall RocketDock.lnk --a---- 549 bytes [15:05 09/01/2011] [15:05 09/01/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Startup d------ [20:27 19/05/2011]
desktop.ini --ahs-- 84 bytes [00:11 24/06/2009] [23:59 10/08/2004]
HP Digital Imaging Monitor.lnk --a---- 1681 bytes [09:04 24/06/2009] [09:04 24/06/2009]
Rainmeter.lnk --a---- 1473 bytes [12:43 28/12/2010] [12:43 28/12/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Streaker 2 d------ [20:27 19/05/2011]
Configure Streaker 2.lnk --a---- 649 bytes [10:06 12/01/2011] [10:06 12/01/2011]
Run Streaker 2.lnk --a---- 483 bytes [10:06 12/01/2011] [10:06 12/01/2011]
Uninstall Streaker 2.lnk --a---- 450 bytes [10:06 12/01/2011] [10:06 12/01/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\TuneUp Utilities 2011 d------ [20:27 19/05/2011]
TuneUp Software Website.url --a---- 48 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Utilities 2011.lnk --a---- 1628 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Utilities Help.lnk --a---- 1388 bytes [16:43 13/12/2010] [18:34 05/05/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\TuneUp Utilities 2011\All functions d------ [20:27 19/05/2011]
TuneUp 1-Click Maintenance.lnk --a---- 1634 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Disk Doctor.lnk --a---- 1664 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Disk Space Explorer.lnk --a---- 1698 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Drive Defrag.lnk --a---- 1653 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Gain Disk Space.lnk --a---- 1682 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Live Optimization.lnk --a---- 1675 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Optimization Report.lnk --a---- 1618 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Process Manager.lnk --a---- 1694 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Program Deactivator.lnk --a---- 1762 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Registry Cleaner.lnk --a---- 1717 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Registry Defrag.lnk --a---- 1678 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Registry Editor.lnk --a---- 1700 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Repair Wizard.lnk --a---- 1660 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Rescue Center.lnk --a---- 1670 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Shortcut Cleaner.lnk --a---- 1637 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Shredder.lnk --a---- 1686 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp StartUp Manager.lnk --a---- 1664 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp StartUp Optimizer.lnk --a---- 1672 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Styler.lnk --a---- 1665 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp System Control.lnk --a---- 1657 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp System Information.lnk --a---- 1701 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Undelete.lnk --a---- 1660 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Uninstall Manager.lnk --a---- 1728 bytes [16:43 13/12/2010] [18:34 05/05/2011]
TuneUp Update Wizard.lnk --a---- 1690 bytes [16:43 13/12/2010] [18:34 05/05/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Visual Task Tips d------ [20:27 19/05/2011]
Uninstall.lnk --a---- 439 bytes [17:52 21/04/2011] [17:52 21/04/2011]
Visual Task Tips.lnk --a---- 643 bytes [17:52 21/04/2011] [17:52 21/04/2011]
VisualTaskTips.com.lnk --a---- 649 bytes [17:52 21/04/2011] [17:52 21/04/2011]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Windows Live d------ [20:27 19/05/2011]
Windows Live Call.lnk --a---- 1563 bytes [08:33 25/06/2009] [20:48 11/12/2010]
Windows Live Messenger .lnk --a---- 1714 bytes [08:34 25/06/2009] [20:49 11/12/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\WinRAR d------ [20:27 19/05/2011]
Console RAR manual.lnk --a---- 600 bytes [11:27 26/06/2009] [11:27 26/06/2009]
WinRAR help.lnk --a---- 613 bytes [11:27 26/06/2009] [11:27 26/06/2009]
WinRAR.lnk --a---- 613 bytes [11:27 26/06/2009] [11:27 26/06/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\1\Programs\Yahoo! Messenger d------ [20:27 19/05/2011]
Yahoo! Messenger.lnk --a---- 687 bytes [18:38 31/03/2010] [18:38 31/03/2010]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\2 d------ [20:27 19/05/2011]
desktop.ini --ahs-- 119 bytes [08:25 24/06/2009] [08:25 24/06/2009]
Launch Internet Explorer Browser.lnk ------- 692 bytes [08:25 24/06/2009] [18:00 04/09/2009]
Mozilla Firefox.lnk ------- 625 bytes [17:38 23/03/2011] [17:38 23/03/2011]
Windows Media Player.lnk ------- 1669 bytes [09:06 25/06/2009] [20:10 26/06/2009]

D:\DOCUME~1\JAYEN~1.SN0\LOCALS~1\Temp\smtmp\4 d------ [20:27 19/05/2011]

-= EOF =-
  • 0

#24
Render
Posted 20 May 2011 - 03:24 PM

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
So... For example if you go to Start then Programs then Accessories there is no Calculator? :)
  • 0

#25
inferno007
Posted 20 May 2011 - 03:27 PM

inferno007

    Member

  • Topic Starter
  • Member
  • PipPip
  • 61 posts
yes the calculator is there but some other program folders are empty here is a screen shot:



Posted Image

Edited by inferno007, 20 May 2011 - 03:36 PM.

  • 0

Advertisements

#26
Render
Posted 20 May 2011 - 03:41 PM

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
It seems that unhide.exe tool didn't done it's job because your system is on partition C but your profile is on partition D. So... We have to manually do that.

Try to copy all content of this folder:
D:\Documents and Settings\JAYEN.SN049851020181\Local Settings\Temp\smtmp\1
and paste it to this folder:
D:\Documents and Settings\JAYEN.SN049851020181\Start Menu
  • 0

#27
inferno007
Posted 20 May 2011 - 03:44 PM

inferno007

    Member

  • Topic Starter
  • Member
  • PipPip
  • 61 posts
AHH YES!

start menu now display everything

thanks!!!

is my system clean now??

i still have winodws xp recovery in the start menu shall i just delete it??

Edited by inferno007, 20 May 2011 - 03:45 PM.

  • 0

#28
Render
Posted 20 May 2011 - 03:50 PM

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Please proceed with these:

Copy all content of this folder:
D:\Documents and Settings\JAYEN.SN049851020181\Local Settings\Temp\smtmp\2
and paste it to this folder:
D:\Documents and Settings\Application Data\Microsoft\Internet Explorer\Quick Launch

and finally:

Copy all content of this folder:
D:\Documents and Settings\JAYEN.SN049851020181\Local Settings\Temp\smtmp\4
and paste it to this folder:
D:\Documents and Settings\All Users\Desktop
  • 0

#29
Render
Posted 20 May 2011 - 04:38 PM

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts

is my system clean now??

Nope. Not yet. We have to do some things when you will be ready.
And please don't edit your posts as it's hard to me to follow your progress. Instead just post a new reply.
  • 0

#30
inferno007
Posted 21 May 2011 - 02:25 AM

inferno007

    Member

  • Topic Starter
  • Member
  • PipPip
  • 61 posts

is my system clean now??

Nope. Not yet. We have to do some things when you will be ready.
And please don't edit your posts as it's hard to me to follow your progress. Instead just post a new reply.


Okay :yes: i will do that :unsure:

and once again thanks for your help.

My start menu now displays all the programs and now all the files are showing up and are not hidden. :)
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Forum
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP