[sayan.dg]

i will post in 12 hours

have some issues

[Advertisements]

Hello godawags

sorry for the late reply

Here is what i have done

first i changed my login username from Sayan to User

This helped me recover 20 Gb disk space which had been spent on duplication of the profiles

I created a new user called Sayan with admin prieveleges... and copied as directed from User to new Sayan user.

but some files could not be copied as it was in use.

so i created a third profile called Temp with admin prieveleges and copied from User to Sayan while loggen in as Temp.

The start menu recent programmes are there but after coping the network settings were showing problems.... internet icon was coming crossed but connected to an unidentified network..internet was working fine but the connection settings were jeopardized... also am apprehensive that i may not be unable to modify some installed programmes from this new Sayan user ...

Also am not able to create files directly in C:/ saying that i dont have the permissions

i will attach the network problem related screenshots

Edited by sayan.dg, 04 December 2012 - 09:29 AM.

[sayan.dg]

Hello godawags

sorry for the late reply

Here is what i have done

first i changed my login username from Sayan to User

This helped me recover 20 Gb disk space which had been spent on duplication of the profiles

I created a new user called Sayan with admin prieveleges... and copied as directed from User to new Sayan user.

but some files could not be copied as it was in use.

so i created a third profile called Temp with admin prieveleges and copied from User to Sayan while loggen in as Temp.

The start menu recent programmes are there but after coping the network settings were showing problems.... internet icon was coming crossed but connected to an unidentified network..internet was working fine but the connection settings were jeopardized... also am apprehensive that i may not be unable to modify some installed programmes from this new Sayan user ...

Also am not able to create files directly in C:/ saying that i dont have the permissions

i will attach the network problem related screenshots

Edited by sayan.dg, 04 December 2012 - 09:29 AM.

[sayan.dg]

[godawgs]

but some files could not be copied as it was in use.

which files could not be copied?

Which account were you logged into when you copied the files?

[sayan.dg]

the screenshot which i sent you.

I was logged to Temp (with admin prievileges)when copying

i did so as when copying directly from User some files could not be copied as they were in use

[godawgs]

Does everything work correctly in the Temp profile?

[sayan.dg]

yes Temp profile on its own is fine

start menu programmes are there
Internet connection settings are also fine

I have not run programmes from that account...
But i cannot save to C:/ from Temp also

[godawgs]

Let's work on getting the user profile correct first, then we will address the file copying issue. I'll be back shortly with new instructions.

[godawgs]

Please delete the Sayan profile you just created. Then restart the computer and re-create the Sayan profile. Then restart the computer and log into the new Sayan profile you just created. Restart the computer and log into the Sayan account again. Make sure everything works...like the network connection settings and the recent programs. You can also try to modify the installed programs that you were talking about.

IF EVERYTHING WORKS (except creating files in the C:\ folder) do this:

Please read the instructions carefully as they have changed slightly...and print them out.

• Restart the computer and log into the TEMP account.
• Once in the TEMP account, double-click the corrupted Windows user's folder,(This should be the C:\Users\USER folder),to show its contents in the right side of the window.
  
  

  NOTE: If you get a warning that you don't have permissions to access that page, click Continue and you will be given access.

• Click the first file or folder listed at the top of the list in the corrupted user's folder. Press and hold the Shift keyboard key. Scroll to the bottom of the corrupted user's folder. Click the last file or folder in the list to simultaneously select it and all the rest of the files. Release the Shift key.
• Press and hold the Ctrl keyboard key. Click on the Ntuser.dat, Ntuser.ini, Ntuser.dat.log files to deselect them.
  

  NOTE: There may be more than one Ntuser.dat.log file. Deselect them all.

• Release the Ctrl button. Right-click on a selected and highlighted file and click Copy. This will copy all of the files to the clipboard.
• At the top of the Computer window, click the back arrow. Right-click the new user's name, Sayan.
  
  

  NOTE: If you get a warning that you don't have permissions to access that page, click Continue and you will be given access.

• Click on Paste.
  
  

  NOTE: When you get the warning asking if you want to overwrite the file or folder, check the box to allow all files/folders to be overwritten.

  
  This will copy all of the User user files and folders (Documents, Downloads, Music, Pictures etc;) except the Ntuser files to the Sayan user profile.
  
• Close Windows Explorer and restart the computer.
• Log onto Windows using the Sayan account.
• Make sure you have the folders and that everything works.

Let me know when you have confirmed that everything works OK in the Sayan user account.

[sayan.dg]

I did the same

when Sayan account was freshly created it was working fine...

but on copying the network problem was same though net was working

It failed to copy some files







and the following files

~DF195C.tmp
~DF1A5C
~DF1A82
~DF1AC2
~DF1AE8
~DF376D
~DF384B

i had to skip all these files


Also here is the screenshot of all the files i copied




Thanks

[godawgs]

In the screen shot of the User account you posted above, I don't see the .tmp files or the 10.10 folder that you couldn't copy to the new Sayan account. Can you tell me what folder under the User account those files and that folder is in?

[sayan.dg]

Here You go godawags


10.10



temp files




THANKS

[godawgs]

OK. The reason you are unable to copy the files is because they are in use. I can understand that for the ~D*.tmp files. They are part of a trojan that you got in Feb. of this year. The OTL fix should have deleted them but it didn't.
I don't know why the RealPlayer 10.10 shows to be in use.

I want you to download a temp file cleaner and run it then take a look at the C:\Users\User\AppData\Local\Temp folder again and see if the files are gone.


Step-1.

Clear Cache/TempFiles

Download TFC by OldTimer to your desktop

• Please double-click TFC.exe to run it. (Note: If you are running on Vista or W7, right-click on the file and choose Run As Administrator).
• It will close all programs when run, so make sure you have saved all your work before you begin.
• Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to several minutes. Let it run uninterrupted to completion.
• Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

Step-2.

OTL Custom Scan

The settings have changed so read the instructions carefully.

1. Please copy the text in the Quote box below, (Do Not copy the word Quote), and paste it in the box in OTL. To do that:

• Highlight everything inside the quote box, (except the word Quote), right click the mouse and click Copy.

HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CABINETSTATE
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM

2. Re-open OTL on the desktop. To do that:

• Double click on the OTL icon to run it. (Vista / 7 Users:Right click on the icon and click Run as Administrator)
  Make sure all other windows are closed.
• You will see a console like the one below:
  
  
  
• Check the greyed out None button at the top of the console
• Place the mouse pointer inside the box, right click and click Paste. This will put the above script inside OTL
• Click the button. Do not change any settings unless otherwise told to do so.
• Let the scan run uninterrupted.
• When the scan completes, it will open OTL.Txt. This file is also saved in the same location as OTL (it should be on your desktop).
• Please copy the contents of this file and paste it into your reply. To do that:
• On the OTL.txt file Menu Bar click Edit then click Select All. This will highlight the contents of the file. Then click Copy.
• Right click inside the forum post window then click Paste. This will paste the contents of the OTL.txt file in the in the post window.

Step-3.

Things For Your Next Post:
Please post the logs in the order requested. Do Not attach the logs unless I request it.
1. Let me know if the C:\Users\User\AppData\Temp folder has been cleaned out.
2. The new OTL.txt log

[sayan.dg]

OTL logfile created on: 05-12-2012 23:23:22 - Run 10
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\User\Desktop
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00004009 | Country: India | Language: ENN | Date Format: dd-MM-yyyy

2.93 Gb Total Physical Memory | 1.74 Gb Available Physical Memory | 59.43% Memory free
6.08 Gb Paging File | 4.92 Gb Available in Paging File | 81.04% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 223.81 Gb Total Space | 28.59 Gb Free Space | 12.77% Space Free | Partition Type: NTFS
Drive D: | 9.07 Gb Total Space | 1.61 Gb Free Space | 17.78% Space Free | Partition Type: NTFS

Computer Name: SAYANLAPTOP-PC | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Custom Scans ==========

< HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED >
"ServerAdminUI" = 0
"Hidden" = 1
"ShowCompColor" = 1
"HideFileExt" = 0
"DontPrettyPath" = 0
"ShowInfoTip" = 1
"HideIcons" = 0
"MapNetDrvBtn" = 0
"WebView" = 1
"Filter" = 0
"SuperHidden" = 1
"SeparateProcess" = 0
"AutoCheckSelect" = 0
"IconsOnly" = 0
"ShowTypeOverlay" = 1
"ListviewAlphaSelect" = 1
"ListviewShadow" = 1
"ListviewWatermark" = 1
"TaskbarAnimations" = 1
"StartMenuInit" = 3
"TaskbarSizeMove" = 0
"TaskbarGlomming" = 1
"Start_MinMFU" = 9
"StartMenuAdminTools" = 0
"StartMenuFavorites" = 0
"StartMenuLogoff" = 0
"StartMenuRun" = 1
"StartMenuChange" = 1
"CascadeControlPanel" = NO
"CascadeMyDocuments" = NO
"CascadeNetworkConnections" = NO
"CascadeMyPictures" = NO
"CascadePrinters" = NO
"StartMenuScrollPrograms" = NO
"IntelliMenus" = 1
"AlwaysShowMenus" = 1
"FolderContentsInfoTip" = 1
"FriendlyTree" = 1
"ShowSuperHidden" = 1
"ClassicViewState" = 0
"PersistBrowsers" = 0
"ShowPreviewHandlers" = 1
"SharingWizardOn" = 1
"TypeAhead" = 0
"Start_ShowMyComputer" = 1
"Start_ShowNetConn" = 1
"Start_ShowControlPanel" = 1
"Start_ShowSetProgramAccessAndDefaults" = 1
"Start_ShowMyDocs" = 1
"Start_EnableDragDrop" = 1
"Start_ShowMyGames" = 1
"Start_ShowHelp" = 1
"Start_NotifyNewApps" = 1
"Start_ShowMyMusic" = 1
"Start_ShowNetPlaces" = 1
"Start_AutoCascade" = 1
"Start_ShowUser" = 1
"Start_ShowMyPics" = 1
"Start_ShowPrinters" = 0
"Start_ShowRun" = 0
"Start_SearchComm" = 1
"Start_SearchInternet" = 1
"Start_SearchFiles" = 1
"Start_SearchPrograms" = 1
"Start_SortByName" = 1
"Start_LargeMFUIcons" = 1
"Start_AdminToolsRoot" = 0
"Start_TrackProgs" = 1
"Start_ShowRecentDocs" = 2
"Start_TrackDocs" = 1

< HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CABINETSTATE >
"Settings" = 0C 00 02 00 0A 01 00 00 60 00 00 00 [binary data]
"FullPath" = 0

< HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER >
"NoInstrumentation" = 1

[HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\Run]

< HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM >

< HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER >
"BindDirectlyToPropertySetStorage" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\run]

< HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM >
"ConsentPromptBehaviorAdmin" = 2
"ConsentPromptBehaviorUser" = 1
"EnableInstallerDetection" = 1
"EnableLUA" = 1
"EnableSecureUIAPaths" = 1
"EnableVirtualization" = 1
"PromptOnSecureDesktop" = 1
"ValidateAdminCodeSignatures" = 0
"dontdisplaylastusername" = 0
"legalnoticecaption" =
"legalnoticetext" =
"scforceoption" = 0
"shutdownwithoutlogon" = 1
"undockwithoutlogon" = 1
"FilterAdministratorToken" = 0
"EnableUIADesktopToggle" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM\UIPI]

< End of report >

[sayan.dg]

The Temp folder is not empty