Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Hijack.NoFolderOption System Infected HELP


  • This topic is locked This topic is locked

#61
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
OK.
Are you using BitLocker? I see it in your gmer log. Wonder if maybe it has decided to hide everything?
http://technet.micro...31-97b4d762cf31


If that's not it:
Download and Save

http://windirstat.in...rrent_setup.exe

and then right click on it and Run As Admin.

Accept the defaults then once it runs, click on the C:\ drive and OK. It will take 5 to 10 minutes to finish. Wait until it says 100% and the little pacmen stop chomping and a confusing colored display shows up. I like to turn off the display (Options then uncheck Show Treemap). This will show you what folder is using the drive and the percentage. To get details within a folder just click on the + in front of the folder.

This should allow you to find what is using so much of your drive space
  • 0

Advertisements


#62
Jayli

Jayli

    Member

  • Topic Starter
  • Member
  • PipPip
  • 98 posts
Hello Ron. Checked the BitLocker status via Control Panel. It is not enabled.

Ran the WinDirStat program. Looks like System Volume Information (Files) percentage is 100% @ 34.8 GB . None of the other subfolders are using a percentage.

The pagefile.sys is also at 99.2% @ 2.0GB

Program Files 23.3% @ 14.9GB

Couldn't figure out how to print out this report, so I'm sending a Screen Shot.

FYI, I went to the Users\Lisette Miller\AppData folder and hit the properties button. Showed that folder w HIDDEN box checked. Unchecked that box and now I can see the AppData folder when I search under the C drive. I still cannot Show All Hidden folders. Pls advise. Thanks.

Attached Thumbnails

  • WinDirStat10092012.jpg

  • 0

#63
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
It looks like System Restore is set a bit high and is just filling up the drive.

Since this problem started have you tried restoring to your oldest Restore Point? If you have and it did not help then I think we can go in and change the amount of space System Restore is allowed to use and also remove the old system restore points to get your space back.

Go into Control Panel, (Classic View) System, Advanced System Settings then System Protection, Configure then Delete and change the Disk Space slider to 10% Apply
  • 0

#64
Jayli

Jayli

    Member

  • Topic Starter
  • Member
  • PipPip
  • 98 posts
Ron. I did do a restore less than a week ago with no help. For some reason, at that time, the oldest restore point was only 3 days previous to that day. I just looked again and found a restore point (Combo fix) for 9-24-2012. I will, as you know, lose about 9 installed programs (I made a list). I can get those programs back later if necessary. Should I restore back to that 9-24 point before I try to reclaim some hard disk space? Or should I not restore? Thanks.
  • 0

#65
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
Go for the oldest restore.
  • 0

#66
Jayli

Jayli

    Member

  • Topic Starter
  • Member
  • PipPip
  • 98 posts
Did the restore. Ate up 6 GB of HD Space. Wow. Now @ 6.1 Free Space. Error. Only 1 folder did not install. SC_Acrobat .....couldn't see the entire folder name. Should I just continue with the process of deleting old System Restore to free up room? Thanks.
  • 0

#67
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
Yes. Delete the old system restore and then set the space limit to 10 %.

Right click on (My) Computer and select Manage (Continue) Then the Event Viewer. Next select Windows Logs. Right click on System and Clear Log, Clear. Repeat for Application.

Reboot.


1. Please download the Event Viewer Tool by Vino Rosso
http://images.malwar...om/vino/VEW.exe
and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning


Then use the 'Number of events' as follows:


1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.


Please post the Output log in your next reply then repeat but select Application.
  • 0

#68
Jayli

Jayli

    Member

  • Topic Starter
  • Member
  • PipPip
  • 98 posts
Ok Ron, here are the files. Looking at the application VEW file, it looks like Windows was in Notification period before I purchased this PC. Is that true? Just purchased on 9/21/2012. Thanks.


Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 10/10/2012 1:13:55 AM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 10/10/2012 1:39:26 AM
Type: Error Category: 0
Event: 8206 Source: System Restore
The restore point selected was damaged or deleted during the restore (Removed AVG 2013).

Log: 'Application' Date/Time: 10/10/2012 1:39:00 AM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 10/10/2012 1:00:04 AM
Type: Error Category: 0
Event: 8206 Source: System Restore
The restore point selected was damaged or deleted during the restore (Installed Java 7 Update 7).

Log: 'Application' Date/Time: 10/10/2012 12:59:29 AM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 10/10/2012 12:23:26 AM
Type: Error Category: 0
Event: 8206 Source: System Restore
The restore point selected was damaged or deleted during the restore (ComboFix created restore point).

Log: 'Application' Date/Time: 10/10/2012 12:23:04 AM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 09/10/2012 8:11:13 PM
Type: Error Category: 0
Event: 59 Source: SideBySide
Activation context generation failed for "c:\program files\signwarehouse\vinyl express lxi\Program\HSPrinterUI.dll".Error in manifest or policy file "c:\program files\signwarehouse\vinyl express lxi\Program\HSPrinterUI.dll" on line 1. Invalid Xml syntax.

Log: 'Application' Date/Time: 09/10/2012 6:19:50 PM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 09/10/2012 6:19:03 PM
Type: Error Category: 0
Event: 512 Source: Microsoft-Windows-CAPI2
The Cryptographic Services service failed to initialize the VSS backup "System Writer" object.

Details:
Could not query the status of the EventSystem service.

System Error:
A system shutdown is in progress. .

Log: 'Application' Date/Time: 09/10/2012 5:22:36 PM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 09/10/2012 4:26:17 AM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 09/10/2012 12:35:42 AM
Type: Error Category: 101
Event: 1002 Source: Application Hang
The program PandoraRecovery.exe version 2.0.4.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: a38 Start Time: 01cda5b330735584 Termination Time: 50466 Application Path: C:\Program Files\Pandora Recovery\PandoraRecovery.exe Report Id: 21420eed-11a9-11e2-b091-001a6bf9aff0

Log: 'Application' Date/Time: 08/10/2012 11:53:31 PM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 08/10/2012 10:13:05 PM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 08/10/2012 9:17:01 PM
Type: Error Category: 0
Event: 59 Source: SideBySide
Activation context generation failed for "c:\program files\signwarehouse\vinyl express lxi\Program\HSPrinterUI.dll".Error in manifest or policy file "c:\program files\signwarehouse\vinyl express lxi\Program\HSPrinterUI.dll" on line 1. Invalid Xml syntax.

Log: 'Application' Date/Time: 08/10/2012 8:03:38 PM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 08/10/2012 4:56:16 PM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 08/10/2012 11:45:03 AM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 08/10/2012 5:44:31 AM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

Log: 'Application' Date/Time: 07/10/2012 4:01:12 PM
Type: Error Category: 0
Event: 1542 Source: Microsoft-Windows-User Profiles Service
Windows cannot load classes registry file. DETAIL - The system cannot find the file specified.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 10/10/2012 1:39:01 AM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 10/10/2012 12:59:31 AM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 10/10/2012 12:23:05 AM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 09/10/2012 6:19:51 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 09/10/2012 6:19:03 PM
Type: Warning Category: 0
Event: 6000 Source: Microsoft-Windows-Winlogon
The winlogon notification subscriber <GPClient> was unavailable to handle a notification event.

Log: 'Application' Date/Time: 09/10/2012 6:19:02 PM
Type: Warning Category: 0
Event: 6000 Source: Microsoft-Windows-Winlogon
The winlogon notification subscriber <GPClient> was unavailable to handle a notification event.

Log: 'Application' Date/Time: 09/10/2012 5:22:38 PM
Type: Warning Category: 0
Event: 6000 Source: Microsoft-Windows-Winlogon
The winlogon notification subscriber <GPClient> was unavailable to handle a notification event.

Log: 'Application' Date/Time: 09/10/2012 5:22:36 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 09/10/2012 4:26:17 AM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 08/10/2012 11:53:32 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 08/10/2012 10:13:05 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 08/10/2012 8:03:38 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 08/10/2012 4:56:16 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 08/10/2012 11:45:05 AM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 08/10/2012 5:44:32 AM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 07/10/2012 4:01:13 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 06/10/2012 9:36:12 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 06/10/2012 9:29:40 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 06/10/2012 5:15:01 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Log: 'Application' Date/Time: 06/10/2012 4:31:27 PM
Type: Warning Category: 0
Event: 4105 Source: Microsoft-Windows-Winlogon
Windows is in Notification period.

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 10/10/2012 1:20:24 AM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 09/10/2012 5:22:56 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:55 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:55 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:55 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:55 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:55 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:55 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:55 PM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Log: 'System' Date/Time: 09/10/2012 5:22:54 PM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Log: 'System' Date/Time: 09/10/2012 5:22:48 PM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}

Log: 'System' Date/Time: 09/10/2012 5:22:38 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:38 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:38 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:39 PM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}

Log: 'System' Date/Time: 09/10/2012 5:22:37 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:37 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:37 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:37 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:37 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

Log: 'System' Date/Time: 09/10/2012 5:22:37 PM
Type: Error Category: 0
Event: 7001 Source: Service Control Manager
The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 10/10/2012 1:38:39 AM
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device USB\VID_0B97&PID_7772\6&1cb4ef3f&0&2.

Log: 'System' Date/Time: 10/10/2012 1:38:38 AM
Type: Warning Category: 0
Event: 4 Source: b57nd60x
Broadcom NetXtreme 57xx Gigabit Controller: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 10/10/2012 1:02:34 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 10/10/2012 12:59:21 AM
Type: Warning Category: 0
Event: 4 Source: b57nd60x
Broadcom NetXtreme 57xx Gigabit Controller: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 10/10/2012 12:59:21 AM
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device USB\VID_0B97&PID_7772\6&1cb4ef3f&0&2.

Log: 'System' Date/Time: 10/10/2012 12:25:10 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 10/10/2012 12:07:13 AM
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device USB\VID_0B97&PID_7772\6&1cb4ef3f&0&2.

Log: 'System' Date/Time: 10/10/2012 12:07:12 AM
Type: Warning Category: 0
Event: 4 Source: b57nd60x
Broadcom NetXtreme 57xx Gigabit Controller: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 09/10/2012 11:27:42 PM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 09/10/2012 6:19:40 PM
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device USB\VID_0B97&PID_7772\6&1cb4ef3f&0&2.

Log: 'System' Date/Time: 09/10/2012 6:19:38 PM
Type: Warning Category: 0
Event: 4 Source: b57nd60x
Broadcom NetXtreme 57xx Gigabit Controller: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 09/10/2012 6:19:04 PM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 09/10/2012 5:22:26 PM
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device USB\VID_0B97&PID_7772\6&1cb4ef3f&0&2.

Log: 'System' Date/Time: 09/10/2012 5:22:25 PM
Type: Warning Category: 0
Event: 4 Source: b57nd60x
Broadcom NetXtreme 57xx Gigabit Controller: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 09/10/2012 5:21:27 PM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 09/10/2012 5:21:05 PM
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device USB\VID_0B97&PID_7772\6&1cb4ef3f&0&2.

Log: 'System' Date/Time: 09/10/2012 5:21:03 PM
Type: Warning Category: 0
Event: 4 Source: b57nd60x
Broadcom NetXtreme 57xx Gigabit Controller: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 09/10/2012 6:42:13 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 09/10/2012 4:26:07 AM
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device USB\VID_0B97&PID_7772\6&1cb4ef3f&0&2.

Log: 'System' Date/Time: 09/10/2012 4:26:07 AM
Type: Warning Category: 0
Event: 4 Source: b57nd60x
Broadcom NetXtreme 57xx Gigabit Controller: The network link is down. Check to make sure the network cable is properly connected.

Edited by Jayli, 09 October 2012 - 11:24 PM.

  • 0

#69
Jayli

Jayli

    Member

  • Topic Starter
  • Member
  • PipPip
  • 98 posts
Good Morning Ron. Just waiting on how to proceed. A few things I've noticed.

On my desktop, when I right click the mouse and scroll down to "NEW", nothing is inside the context menu...like folder, shortcut, etc.

I still cannot Show All and/or Unhide files.

I also created a NEW standard user and when I log on, it will immediately log me back off.

Looking in the registry, I see a file with "asian" characters in the Win NT.....Persisted File. I just thought this was strange.

I may not have mentioned, but the seller of this laptop said it was a student laptop. Only 30 days left on my Win 7 before activation is needed.

Since deleting files, I now have 40 gb free space on the HD.

Some research says the Hive may not be Unloading, thus the problems with classes not loading into registry.

Thanks.
  • 0

#70
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
Can you export the key with the Asian characters then right click on it and Edit and then copy and paste it into a reply?
  • 0

Advertisements


#71
Jayli

Jayli

    Member

  • Topic Starter
  • Member
  • PipPip
  • 98 posts
Here it is. 㩃瑜浥屰畡慬湵档牥攮數

Registry Editor Screen Shot included.

Thanks.

Attached Thumbnails

  • ScreenShotAsianCharacterFile2.jpg

  • 0

#72
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
I would just delete it. Can't be anything you really need.
  • 0

#73
Jayli

Jayli

    Member

  • Topic Starter
  • Member
  • PipPip
  • 98 posts
Deleted. What do we try next? Thanks.
  • 0

#74
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP
Copy the next line:

set APPDATA="C:\Users\Lisette Miller\AppData\Roaming"

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Right click and Paste or Edit then Paste and the copied line should appear. Hit Enter.

Then see if unhide.exe will run if you right click and Run As Admin.
  • 0

#75
Jayli

Jayli

    Member

  • Topic Starter
  • Member
  • PipPip
  • 98 posts
Same result as before.

After running as Admin, another pop up window has the following error. "There was a problem retrieving a necessary environment variable. Unhide has terminated".

Inside the CMD window it says " appdata doesn't exist! Unhide Terminated!". Pls advise. Thanks.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP