This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Virus / Trojan and start menu wiped out

22 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi Oldman960, MBAM log: Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 6684 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 5/26/2011 6:54:58 AM mbam-log-2011-05-26 (06-54-58).txt Scan type: Quick scan Objects scanned: 161099 Time elapsed: 3 minute(s), 21 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) The ESET Log: ESETSmartInstaller@High as CAB hook log: OnlineScanner64.ocx - registred OK OnlineScanner.ocx - registred OK Also, The scan said it found one threat: C:\_OTL\MovedFiles\05232011_070925\C_ProgramData\42852088.exe a variant of Win32/Kryptik.NZN trojan Thanks again, Saicool171
Hi saicool171,

That detection is a file we have already quarantined. It will be removed when we remove the tools. I'd like to make sure we have restored all items moved by the malware. There are quite a few of them so we'll do it in a couple of posts

Next

Please download SystemLook from one of the links below and save it to your Desktop.
Link 1
Link 2


  • Right click SystemLook.exe and click "Run as Administrator" to run it.
  • Copy the content of the following codebox into the main textfield
  • Do not copy the word CODE , please note the script starts with the :
    :file
    C:\ProgramData\Microsoft\Windows\Start Menu \Default Programs.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \desktop.ini
    C:\ProgramData\Microsoft\Windows\Start Menu \Software Updates.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Windows Update.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Adobe Reader 9.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Apple Software Update.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Audacity 1.3 Beta (Unicode).lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell Help Documentation.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\desktop.ini
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Jagannatha Hora.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\LogMeIn.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Media Center.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Microsoft Default Manager.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Microsoft Office PowerPoint Viewer 2007.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Microsoft Web Platform Installer.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Microsoft Works Task Launcher.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Mozilla Firefox.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\PowerDVD DX.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Sidebar.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Anytime Upgrade.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows DVD Maker.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Fax and Scan.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Live Mail.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Live Messenger.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Live Movie Maker.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Live Photo Gallery.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Media Player.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\XPS Viewer.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Calculator.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Desktop.ini
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\displayswitch.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Math Input Panel.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Mobility Center.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Paint.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Remote Desktop Connection.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Snipping Tool.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Sound Recorder.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Sticky Notes.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Sync Center.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Welcome Center.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Wordpad.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Accessibility\Desktop.ini
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Accessibility\Speech Recognition.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Character Map.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Desktop.ini
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\dfrgui.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Disk Cleanup.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Resource Monitor.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\System Information.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\System Restore.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Task Scheduler.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Windows Easy Transfer.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Tablet PC\Desktop.ini
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Tablet PC\ShapeCollector.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Tablet PC\TabTip.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Tablet PC\Windows Journal.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Windows PowerShell\desktop.ini
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Component Services.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Computer Management.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Data Sources (ODBC).lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\desktop.ini
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Event Viewer.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\iSCSI Initiator.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Memory Diagnostics Tool.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Performance Monitor.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\services.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\System Configuration.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Task Scheduler.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Windows PowerShell Modules.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Advanced Web Ranking 7.2\Advanced Link Manager.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Advanced Web Ranking 7.2\Advanced Web Ranking.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Advanced Web Ranking 7.2\Uninstall.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon Games\Super Bounce Out\Uninstall Super Bounce Out.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon Games\Super Bounce Out\ Super Bounce Out.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon\Amazon Games & Software\Amazon Games & Software Downloader.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon\Amazon Games & Software\Download Folder.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon\Amazon Games & Software\Go to Your Games & Software Library.url
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon\Amazon Games & Software\Help.url
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon\Amazon Games & Software\Uninstall Amazon Games & Software Downloader.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\astrology by mypanchang\nakshatra.exe.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\CoffeeCup Software\CoffeeCup Flash FireStarter.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\CoffeeCup Software\CoffeeCup Free Zip Wizard.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell DataSafe\Dell DataSafe Local Backup.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell Support Center\About Dell Support Center.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell Support Center\Dell Support Center Alerts.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell Support Center\Dell Support Center User Settings.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell Support Center\Dell Support Center.lnk
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Hi Oldman960, Sorry it took a day to get back. I was a bit under the weather. Thanks again for your time and attention to this. The log is below: SystemLook 04.09.10 by jpshortstuff Log created at 19:08 on 28/05/2011 by Manjula Administrator - Elevation successful ========== file ========== C:\ProgramData\Microsoft\Windows\Start Menu \Default Programs.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \desktop.ini - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Software Updates.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Windows Update.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Adobe Reader 9.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Apple Software Update.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Audacity 1.3 Beta (Unicode).lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell Help Documentation.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\desktop.ini - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Jagannatha Hora.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\LogMeIn.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Media Center.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Microsoft Default Manager.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Microsoft Office PowerPoint Viewer 2007.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Microsoft Web Platform Installer.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Microsoft Works Task Launcher.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Mozilla Firefox.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\PowerDVD DX.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Sidebar.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Anytime Upgrade.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows DVD Maker.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Fax and Scan.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Live Mail.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Live Messenger.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Live Movie Maker.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Live Photo Gallery.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Windows Media Player.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\XPS Viewer.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Calculator.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Desktop.ini - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\displayswitch.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Math Input Panel.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Mobility Center.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Paint.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Remote Desktop Connection.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Snipping Tool.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Sound Recorder.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Sticky Notes.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Sync Center.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Welcome Center.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Wordpad.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Accessibility\Desktop.ini - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Accessibility\Speech Recognition.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Character Map.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Desktop.ini - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\dfrgui.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Disk Cleanup.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Resource Monitor.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\System Information.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\System Restore.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Task Scheduler.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\System Tools\Windows Easy Transfer.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Tablet PC\Desktop.ini - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Tablet PC\ShapeCollector.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Tablet PC\TabTip.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Tablet PC\Windows Journal.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Windows PowerShell\desktop.ini - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Component Services.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Computer Management.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Data Sources (ODBC).lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\desktop.ini - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Event Viewer.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\iSCSI Initiator.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Memory Diagnostics Tool.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Performance Monitor.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\services.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\System Configuration.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Task Scheduler.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Administrative Tools\Windows PowerShell Modules.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Advanced Web Ranking 7.2\Advanced Link Manager.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Advanced Web Ranking 7.2\Advanced Web Ranking.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Advanced Web Ranking 7.2\Uninstall.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon Games\Super Bounce Out\Uninstall Super Bounce Out.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon Games\Super Bounce Out\ Super Bounce Out.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon\Amazon Games & Software\Amazon Games & Software Downloader.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon\Amazon Games & Software\Download Folder.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon\Amazon Games & Software\Go to Your Games & Software Library.url - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon\Amazon Games & Software\Help.url - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Amazon\Amazon Games & Software\Uninstall Amazon Games & Software Downloader.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\astrology by mypanchang\nakshatra.exe.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\CoffeeCup Software\CoffeeCup Flash FireStarter.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\CoffeeCup Software\CoffeeCup Free Zip Wizard.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell DataSafe\Dell DataSafe Local Backup.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell Support Center\About Dell Support Center.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell Support Center\Dell Support Center Alerts.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell Support Center\Dell Support Center User Settings.lnk - Unable to find/read file. C:\ProgramData\Microsoft\Windows\Start Menu \Programs\Dell Support Center\Dell Support Center.lnk - Unable to find/read file. -= EOF =-
Hi saicool171,

No problem. :)

The files are all reported as missing. Let's do a test run and see if we can copy one file to the correct location. If it works we'll do the rest.

Open a new Notepad session
  • Click the Start button,
  • in the search for programs and files box (small white box at the bottom) type notepad
  • click ok
  • In the notepad, Click "Format" and be certain that Word Wrap is not checked.
  • Copy and paste all the text in the code box below into the Notepad. Do Not copy the word CODE
copy "C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Default Programs.lnk" C:\ProgramData\Microsoft\Windows\Start Menu > test.txt
start test.txt

In the notepad
  • Click File, Save as…, and set the Save in to your Desktop
  • In the filename box, type (including quotation marks) as the filename: "test.bat"
  • Click save

You will have a new file on your desktop called test.bat with an icon that looks like this 📎bat.PNG

Right click test.bat and click "Run as Administrator" to run it. You may see a small black window flash on the screen, that's normal.

A notepad should open with a single line in it that says 1 file(s) copied. Let me know if this is what happened.

Thanks
Hi Oldman960, I tried it. The message I got (opened up in notepad) "The syntax of the command is incorrect." I was wondering if the encoding on 'save as' mattered? The message above came from the default setting of encoding as 'ANSI'. I tried changing the encoding to 'UTF-8' and ran the test.bat file and got a blank notepad message. Please advise. Thanks again. I really appreciate your time and patience with this, Saicool171.
Hi Saicool171

The default setting of ANSI is correct. Try copying and pasting this instead into the notepad when you create the .bat file. I changed it a bit.
copy "C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Default Programs.lnk" "C:\ProgramData\Microsoft\Windows\Start Menu" > test.txt
start test.txt
That worked! I got the message: " 1 file(s) copied." Thanks again. I know I'm repeating myself. :) But your time is deeply appreciated.
Hi saicool171,

No problem, it's my pleasure. It looks like we can copy to that location. Let's see if we can use OTL to make it easier.

Next, Right click on OTL.exe and chose Run as Administrator to run it
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
  • Do Not copy the word CODE
  • please note the fix starts with the :
:Services

:Files
xcopy %Temp%\smtmp\1 "C:\ProgramData\Microsoft\Windows\Start Menu"  /H /I /S /Y /C
xcopy %Temp%\smtmp\4 "C:\Users\Public\Desktop" /H /I /S /Y /C

Then click the Run Fix button at the top
  • Let the program run unhindered
  • Please save the resulting log to be posted in your next reply.
Please post the OTL fix log.
Hi Oldman960,

The log is below. Thanks.

OTL fix log:


========== SERVICES/DRIVERS ==========
========== FILES ==========
< xcopy %Temp%\smtmp\1 "C:\ProgramData\Microsoft\Windows\Start Menu" /H /I /S /Y /C >
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Default Programs.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Software Updates.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Windows Update.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Adobe Reader 9.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Apple Software Update.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Audacity 1.3 Beta (Unicode).lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Help Documentation.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Jagannatha Hora.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\LogMeIn.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Media Center.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Default Manager.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Web Platform Installer.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works Task Launcher.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Mozilla Firefox.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\PowerDVD DX.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Sidebar.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Anytime Upgrade.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows DVD Maker.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Fax and Scan.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Mail.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Messenger.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Movie Maker.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Photo Gallery.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Media Player.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\XPS Viewer.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Calculator.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\displayswitch.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Math Input Panel.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Mobility Center.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Paint.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Remote Desktop Connection.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Snipping Tool.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sound Recorder.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sticky Notes.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sync Center.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Welcome Center.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Wordpad.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Accessibility\Desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Accessibility\Speech Recognition.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Character Map.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\dfrgui.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Disk Cleanup.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Resource Monitor.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\System Information.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\System Restore.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Task Scheduler.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\Desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\ShapeCollector.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\TabTip.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\Windows Journal.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Component Services.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Computer Management.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Data Sources (ODBC).lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Event Viewer.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\iSCSI Initiator.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Memory Diagnostics Tool.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Performance Monitor.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\services.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\System Configuration.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Task Scheduler.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Windows PowerShell Modules.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Advanced Web Ranking 7.2\Advanced Link Manager.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Advanced Web Ranking 7.2\Advanced Web Ranking.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Advanced Web Ranking 7.2\Uninstall.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Amazon Games & Software Downloader.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Download Folder.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Go to Your Games & Software Library.url
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Help.url
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Uninstall Amazon Games & Software Downloader.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon Games\Super Bounce Out\Uninstall Super Bounce Out.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon Games\Super Bounce Out\ÿSuper Bounce Out.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\astrology by mypanchang\nakshatra.exe.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\CoffeeCup Software\CoffeeCup Flash FireStarter.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\CoffeeCup Software\CoffeeCup Free Zip Wizard.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell\Dell Dock.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell\Dell Software & Utilities\Dell Getting Started Guide.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell\Service Agreements\InHome.pdf.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell DataSafe\Dell DataSafe Local Backup.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\About Dell Support Center.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\Dell Support Center Alerts.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\Dell Support Center User Settings.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\Dell Support Center.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Dell Webcam Central.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\License Agreement.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Live! Cam Avatar Creator Help.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Live! Cam Avatar Creator.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Read Me.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Uninstall Live! Cam Avatar Creator.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Wireless\Dell Wireless WLAN Card Readme.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Wireless\Dell Wireless WLAN Card Utility.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Wireless\desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Desktop Reporting\Polaris.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\FileZilla FTP Client\FileZilla.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\FileZilla FTP Client\Uninstall.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\GameHouse\Visit GameHouse.url
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Chess.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\FreeCell.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\GameExplorer.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Hearts.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Internet Backgammon.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Internet Checkers.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Internet Spades.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Mahjong.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Minesweeper.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\More Games from Microsoft.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Purble Place.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Solitaire.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Spider Solitaire.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Google SketchUp 7\Google SketchUp.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyler\Hoyle Casino Games 2011\Buy other Hoyle products.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyler\Hoyle Casino Games 2011\Hoyle Casino Games 2011 Manual.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyler\Hoyle Casino Games 2011\Hoyle Casino Games 2011.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyler\Hoyle Casino Games 2011\Uninstall Hoyle Casino Games 2011.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Intelr Matrix Storage Manager\Intelr Matrix Storage Console.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Backup and Restore Center.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Create Recovery Disc.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Remote Assistance.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Malwarebytes' Anti-Malware\Uninstall Malwarebytes' Anti-Malware.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Excel 2007.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office OneNote 2007.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office PowerPoint 2007.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Word 2007.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Digital Certificate for VBA Projects.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Clip Organizer.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office 2007 Language Settings.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office Diagnostics.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office Picture Manager.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office Live Add-in\Office Live Add-in Help.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office Live Add-in\Office Live Workspace.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Silverlight 3 SDK\Welcome.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Import and Export Data (64-bit).lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Configuration Tools\SQL Server Configuration Manager.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Configuration Tools\SQL Server Error and Usage Reporting.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Configuration Tools\SQL Server Installation Center (64-bit).lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Visual Studio 2010 Express\Microsoft Visual Web Developer 2010 Express.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Visual Studio 2010 Express\Try Visual Studio 2010 Professional.url
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Getting Started.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Calendar.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Database.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Portfolio.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Spreadsheet.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Task Launcher.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Word Processor.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ooVoo\ooVoo.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\About QuickTime.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\PictureViewer.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\QuickTime Player.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\Uninstall QuickTime.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Roxio\Roxio Burn.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ShipWorks\Interapptive ShipWorks.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ShipWorks\ShipWorks Help.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Skype\Skype.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Snagit 9\Snagit 9 Editor.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Snagit 9\Snagit 9.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\File Shredder.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Spybot - Search & Destroy.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Tutorial.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Uninstall Spybot-S&D.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Update Spybot-S&D.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live\desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live\Windows Live Writer.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\WinZip\Help Manual.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\WinZip\WinZip 14.5.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Configure Decoder.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Configure Encoder.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\INet-Doom9's Xvid Forum.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\INet-Koepi's Homepage (Updates).lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\INet-Xvid Homepage.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Koepi's OGMCalc.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Nic's FourCC changer.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Nic's MiniCalc.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Release Notes.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Some quantization matrices.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\StatsReader 2.1.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\StatsReader Notes.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Uninstall Xvid.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Vidc.Cleaner.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Yahoo! Messenger\Yahoo! Messenger.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\Readme.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\Uninstall ZoneAlarm Security.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\ZoneAlarm Diagnostics Tool.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\ZoneAlarm Security.lnk
203 File(s) copied
C:\Users\Manjula\Desktop\cmd.bat deleted successfully.
C:\Users\Manjula\Desktop\cmd.txt deleted successfully.
< xcopy %Temp%\smtmp\4 "C:\Users\Public\Desktop" /H /I /S /Y /C >
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Advanced Link Manager.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Advanced Web Ranking.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\CoffeeCup Free Zip Wizard.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Google SketchUp 7.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Hoyle Casino Games 2011.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Jagannatha Hora.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Malwarebytes' Anti-Malware.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Mozilla Firefox.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\nakshatra.exe.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\ooVoo.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Skype.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Yahoo! Messenger.lnk
13 File(s) copied
C:\Users\Manjula\Desktop\cmd.bat deleted successfully.
C:\Users\Manjula\Desktop\cmd.txt deleted successfully.

OTL by OldTimer - Version 3.2.22.3 log created on 05312011_065944
Not that I know of. I was waiting on a clear signal from you. Again, I can't thank you enough for your help! So here is one more - Thank you so much!
Hi saicool171,

You are more than welcome. We'll clean up the tools now.

Create new Restore Point
  • Click your Start button
  • In the Search box type create restore
  • click on Create a restore point
  • Click the System Protection tab
  • click Create
  • Give your restore point a name and click Create
  • Wait while Windows creates a system restore point for you

Remove old Restore Points
  • Click the Start button
  • In the search box, type Disk Cleanup
  • in the list of results, click Disk Cleanup
  • If prompted, select the drive that you want to clean up, and then click OK.
  • In the Disk Cleanup for (usually C:) dialog box, click Clean up system files. If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
  • If prompted, select the drive that you want to clean up, and then click OK.
  • Click the More Options tab
  • under System Restore and Shadow Copies, click Clean up.
  • In the Disk Cleanup dialog box, click Delete.
  • Click Delete Files, and then click OK.


Your java is out of date. Click your start button, open Control panel.
  • Switch to the Classic View
  • Locate the Java icon (it looks like a coffee cup)
  • double click it to open it
  • click the Update tab
  • Click update now

After the java is updated, reboot your computer if not prompted to.


Next

Right click on OTL.exe and chose Run as Administrator to run it
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
  • Do Not copy the word CODE
  • please note the fix starts with the :
:Services

:Commands
[emptytemp]

Then click the Run Fix button at the top
  • Let the program run unhindered
  • No need to post the log


From your desktop, please delete, if present
  • any notepads/logs that we created
  • Zipit.exe
  • the zip file we created with Zipit
  • UnHide.exe
  • SystemLook.exe

Next

Open OTL then click the Clean Up button. You may get prompted by your firewall that OTL wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will do some clean up tasks and delete some of the tools you have downloaded plus itself.

I suggest you keep MBAM. Keep it updated and use it regularly.

ESET online scan can be removed via add/remove programs.


Some Recommendations and prevention tips
Basic security consists of 1 antivirus program, 1 resident antispyware program, 1 on demand antispyware program and a firewall. With Spybot's TeaTimer enabled you have those already.

-Secure your Internet Explorer

From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
  • Change the Download signed ActiveX controls to Prompt
  • Change the Download unsigned ActiveX controls to Disable
  • Change the Initialize and script ActiveX controls not marked as safe to Disable
  • Change the Installation of desktop items to Prompt
  • Change the Launching programs and files in an IFRAME to Prompt
  • Change the Navigate sub-frames across different domains to Prompt
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.


- Keeping your Windows up-to-date is crucial to your computer's security. Please go to the Windows Update Site (using Internet Explorer) and download and install all critical updates on a regular basis


- Make sure you have reset Automatic Updates to your chosen optionClick your start button > Control Panel > System


- Keep your antivirus program updated, as well as any other security programs you have.


-More tips and programs can be found HERE


- You may also want to read this article By Tony Klein
http://www.freedomlist.com/forum/viewtopic.php?t=22879

Please post back if you have any problems.

Take care :adios:

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI