Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Malware - personal files and apps disappeared


  • Please log in to reply

#31
azarl

azarl

    GeekU Admin

  • Community Leader
  • 25,310 posts
You're pretty much clean now, that one item ESET found was already quarantined. How's it running?
  • 0

Advertisements


#32
Shaney

Shaney

    Member

  • Topic Starter
  • Member
  • PipPip
  • 26 posts
Hi Azarl,

The machine is running fine thanks very much, but it wasn't ever running that quick. :-)
I cannot see any of the documents or pictures in the user 'louroy' area or any of the user applications.
Is there any chance you can help me with that?

Thanks in advance,

Shane.
  • 0

#33
azarl

azarl

    GeekU Admin

  • Community Leader
  • 25,310 posts
Start a new thread here, explain what the issue is, and one of our tech guys will take a look. Let me know your thread, and I'll liase with the tech
  • 0

#34
Shaney

Shaney

    Member

  • Topic Starter
  • Member
  • PipPip
  • 26 posts
Hi Azarl,

Thanks for helping, here is the link to the topic.
http://www.geekstogo...gs-disappeared/


Thanks,


Shane.
  • 0

#35
azarl

azarl

    GeekU Admin

  • Community Leader
  • 25,310 posts
While we're waiting for a tech to pick it up, can you download http://noahdfear.net...ds/profiles.exe, run it and post the log it produces please
  • 0

#36
Shaney

Shaney

    Member

  • Topic Starter
  • Member
  • PipPip
  • 26 posts
Hi, here is the log files it produces.

Best,

Shane.


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
ProfileImagePath REG_EXPAND_SZ %systemroot%\system32\config\systemprofile

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\LocalService

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\NetworkService

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2278557527-3947137328-2123574327-1000
ProfileImagePath REG_EXPAND_SZ C:\Users\Louroy

ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\LocalService
ProfileImagePath REG_EXPAND_SZ %SystemRoot%\ServiceProfiles\NetworkService
SystemRoot REG_SZ C:\Windows

Edited by Shaney, 10 December 2010 - 07:16 AM.

  • 0






Similar Topics

1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP