
Malware - personal files and apps disappeared
Started by
Shaney
, Nov 24 2010 05:10 AM
#31
Posted 08 December 2010 - 10:25 AM

#32
Posted 08 December 2010 - 11:46 AM

Hi Azarl,
The machine is running fine thanks very much, but it wasn't ever running that quick. :-)
I cannot see any of the documents or pictures in the user 'louroy' area or any of the user applications.
Is there any chance you can help me with that?
Thanks in advance,
Shane.
The machine is running fine thanks very much, but it wasn't ever running that quick. :-)
I cannot see any of the documents or pictures in the user 'louroy' area or any of the user applications.
Is there any chance you can help me with that?
Thanks in advance,
Shane.
#34
Posted 09 December 2010 - 05:22 AM

Hi Azarl,
Thanks for helping, here is the link to the topic.
http://www.geekstogo...gs-disappeared/
Thanks,
Shane.
Thanks for helping, here is the link to the topic.
http://www.geekstogo...gs-disappeared/
Thanks,
Shane.
#35
Posted 10 December 2010 - 04:58 AM

While we're waiting for a tech to pick it up, can you download http://noahdfear.net...ds/profiles.exe, run it and post the log it produces please
#36
Posted 10 December 2010 - 07:16 AM

Hi, here is the log files it produces.
Best,
Shane.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
ProfileImagePath REG_EXPAND_SZ %systemroot%\system32\config\systemprofile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\NetworkService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2278557527-3947137328-2123574327-1000
ProfileImagePath REG_EXPAND_SZ C:\Users\Louroy
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\LocalService
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\NetworkService
SystemRoot REG_SZ C:\Windows
Best,
Shane.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
ProfileImagePath REG_EXPAND_SZ %systemroot%\system32\config\systemprofile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\NetworkService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2278557527-3947137328-2123574327-1000
ProfileImagePath REG_EXPAND_SZ C:\Users\Louroy
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\LocalService
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\NetworkService
SystemRoot REG_SZ C:\Windows
Edited by Shaney, 10 December 2010 - 07:16 AM.
Similar Topics
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
As Featured On:






