Why am I angry? Because I discovered my temporary internet files keep getting DELETED. This makes me unhappy, can someone explain to me why?
CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!
Run Hijack This!
Click "Scan".
Then "check" the box to the left of these item(s):
Then click "Fix checked".
Then reboot and post a new log file
in this thread .
About your temporary Internet files.
At the top of your IE page, click on:
Tools >
Internet Options , click on the "
Advanced " tab, scroll close to the bottom.
There is a line:
Empty temporary Internet files folder when browser is closed
If the box to the left of it is "checked", then "uncheck" it.
Let me know how things go.
I did what you said (although some programs might have been working without me knowing…I hope I closed them all) and checked that line and fixed it…but…
My bad.
You'll probably have to disable "Teatimer.exe" then fix that item to get it to go away.
But I have no explanation for your temporary Internet files disappearing.
I did exactly what you said, then I scanned again. It was gone! But then, I shut down and turned it back on today…and…
Beats me.
I wouldn't fret over that "O2 (no file)" that comes back. It's not malware.
I see nothing "wrong" in the log.
So does that mean we're done?
I'll make a post soliciting any info from other "experts" to see if thay have any ideas, and post back if they have anything to check/try.
Could you please boot in "safe" mode, then make a Hijack This! log and post it.
I don't have a CMD or whatever. O_o But I'll post the hijackthis log anyway. (I cannot connect to the internet while in Safe Mode.)
Hi Tamaru of Le-Koro, I was passing through and noticed your problem.
I don't have a CMD or whatever. O_o But I'll post the hijackthis log anyway. (I cannot connect to the internet while in Safe Mode.)
Click the start button, then click "Run". In the box that pops up paste the command Micah posted in bold above (no need to use the command prompt window, the run box behaves the same way).
To recap michah's instructions:
regedit /e c:\bad.reg "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ms4Hd" Copy/Paste the bolded above into the run box - rand1038
I realize you can't connect to the Internet while in "safe mode".
But is is important that the log file be made while booted in "safe" mode.
We believe you may have an infection that will only show up in the log while booted in "safe" mode.
You need to boot in "safe" mode, make the log, save it to your hard drive (it will default to here:
C:\UNZIPPED\HIJACKTHIS\hijackthis.log ), then also run the other command (it will default to here:
C:\bad.reg on your hard drive) while still in "safe" mode..
Then you can boot in "normal" mode, and find these two files:
C:\UNZIPPED\HIJACKTHIS\hijackthis.log
C:\bad.reg
To open with Notepad, and "copy/paste" into your next post.
I thank rand1038 for clarifying things, and I also apologize for not making my instructions as clear as they should have been.
I did exactly as you said, but nothing happened when I put the command in the Run box. This is getting weird..
The good news is you don't seem to have any infection.
The bad news would be that I still can't explain disappearing temp. files.
From :
http://www.panicware.com/product_psprofessional.html
Browser and Windows Cleaning - Keep your surfing habits private and help prevent identity theft by keeping your computer clean! Quickly clean URL history, browser history, cache , cookies, index.dat and more!
Check your Panicware options and see if you have it set to clear the cache. Do the same for any other internet related programs you use.
You'll probably have to disable "Teatimer.exe" then fix that item to get it to go away.
But I have no explanation for your temporary Internet files disappearing. 
Beats me. 
The bad news would be that I still can't explain disappearing temp. files.