[gringo_pr]

Hello


did you run this program? - http://www.bleepingc...ownload/unhide/

[Advertisements]

Hi Gringo,
I was beginning to wonder what had happened to you!
Yes, I'm certain I did run unhide quite a ways back now. Does it look like it wasn't run? Do I need to run it again?
Carl

[Home Bass]

Hi Gringo,
I was beginning to wonder what had happened to you!
Yes, I'm certain I did run unhide quite a ways back now. Does it look like it wasn't run? Do I need to run it again?
Carl

[gringo_pr]

go ahead and run it again - it will not hurt - I know we were getting this error before - Catalyst Control Center and that would clear it up


gringo

[Home Bass]

Hi Gringo,

Log from unhide is below. I rebooted after running it and, although I still got a CCC error message, it was a slightly different one than before. I didn't have a chance to copy it down before the mesasage closed and was replaced by another that said CCC would be shut down. I'll try and be quicker next time I reboot and copy the full message down. My wife is still using this computer (she needs it for work) but I'll ask her again to stop playing online Scrabble. I believe she may still be doing so even though I asked her to stop until we could get these problems sorted out. Thanks again for your help.
Carl

Unhide by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Unhide.exe can be found at this link:
http://www.bleepingc...opic405109.html

Program started at: 04/29/2013 06:28:00 AM
Windows Version: Windows Vista

Please be patient while your files are made visible again.

Processing the C:\ drive
Finished processing the C:\ drive. 220858 files processed.

Processing the E:\ drive
Finished processing the E:\ drive. 79 files processed.

The C:\Users\tmauch\AppData\Local\Temp\smtmp\ folder does not exist!!
Unhide cannot restore your missing shortcuts!!
Please see this topic in order to learn how to restore default
Start Menu shortcuts: http://www.bleepingc...opic405109.html

Searching for Windows Registry changes made by FakeHDD rogues.
- Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
- Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
- Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
- Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop
- Checking HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
No registry changes detected.

Program finished at: 04/29/2013 06:29:21 AM
Execution time: 0 hours(s), 1 minute(s), and 21 seconds(s)

[gringo_pr]

Hello


try reinstalling CCC and see if that helps - http://www.ati.com/p...tcontrolcenter/

[Home Bass]

Hi Gringo,
Downloaded and installed CCC then rebooted. Still got error message. Then tried updating display driver in Device Manager and that seems to have done it. So no more CCC message, at least not this last time I booted. Cool. Still getting the Dropbox error and still getting the Manage Add-Ons box when running IE. Interestingly, IE is once again recording history. Still getting the error message on opening Word and Windows Mail still won't run.
Carl

[gringo_pr]

Hello

is this account an admin account if not try changing it to an admin account


gringo

[Home Bass]

Hi Gringo,
According to Control Panel > User Accounts it is an Administrator account.
Carl

[gringo_pr]

Download Windows Repair (all in one) from here.

Install the program then run



Go to step 3 and allow it to run SFC



On the start repairs tab click start


Select the following items and tick restart system when finished

Reset Registry Permissions
Reset File Permissions
Register System Files
Repair WMI
Repair Windows Firewall
Repair Internet Explorer
Repair Hosts File
Remove Policies Set By Infections
Repair Missing Start menu Icons
Repair Icons
Repair Winsock & DNS Cache
Remove Temp Files
Repair Proxy Settings
Unhide Non System Files
Repair Windows Updates
Set windows Services To Default
Repair MSI (windows Installer)
Repair File Associations
Repair windows Safe mode

After that come back and tell me if that has made a difference.

Gringo

[Home Bass]

Hi Gringo,

I ran the Windows Repair software exactly as you suggested. Upon re-boot, the Dropbox error recurred ("Couldn't access Windows Registry...Please reset your Windows account password"). But the CCC error appears to be gone. The same error message occurs with MS Word ("Word could not create the work file. Check the temp environment variable.") and Windows Mail still fails to start. It gives the following error message - "Windows Mail could not be started. The application was unable to open the Windows Mail message store. Your Windows Mail mailbox dara is currently being used by another program, such as a virus scanner. Close the program or wait for it to complete its operation, then open Windows Mail again. (0x800C0155, 2)". When I close that error message another one opens that says, "Windows Mail could not be started because MSOE.DLL could not be initialized."

Carl

[gringo_pr]

OK here is something else to try


http://www.vistax64....isk-chkdsk.html

[Home Bass]

Hi Gringo,
I have some trepidation about running checkdisk. Are you asking me to run it because we've exhausted the malware/virus/software/OS/configuration possibilities and you're thinking there might be some problems with the hard drive?
Carl

[gringo_pr]

Hello


I do not think it is Malware the errors you are getting don't match with malware, now you are getting allot of errors and we need to find out why

checkdisk does more than just check the harddrive it check file system and other things also - I think it is a good place to start

[Home Bass]

Hi Gringo,
I need to get a good backup of my wife's data before running checkdisk. I once had a hard drive spiral into conmeplete failure very quickly as a result of running checkdisk and there was nothing that could be done to salvage the drive's contents. I'm nervous that could happen again.
Carl

[gringo_pr]

Hello


I need to get a good backup of my wife's data before running checkdisk. that is a good idea anyway as with any type of malware removal anything can happen