Solved Browser redirects to ads

[Broni]

most of the files are missing out of the "My documents" folder.

Hidden maybe? Can you check?

Update Adobe Reader

You can download it from https://www.techspot.com/downloads/2083-adobe-reader-dc.html
After installing the latest Adobe Reader, uninstall all previous versions (if present).
Note. If you already have Adobe Photoshop® Album Starter Edition installed or do not wish to have it installed UNcheck the box which says Also Download Adobe Photoshop® Album Starter Edition.

Alternatively, you can uninstall Adobe Reader (33.5 MB), download and install Foxit PDF Reader(3.5MB) from HERE.
It's a much smaller file to download and uses a lot less resources than Adobe Reader.
Note: When installing FoxitReader, make sure to UN-check any pre-checked toolbar, or any other garbage.

 

[joeb123]

Can you verify how I should check for hidden files?

I tried going to folder options and show hidden files, but that didn't do anything.

It seems the files are still there because the folder size seems to be the same as it was before the issues started. And outlook still works and can access the outlook file that resides in the my docs folder.

Thx

 

[joeb123]

I found these instructions to enable viewing hidden files

Windows XP and Windows 2003

To enable the viewing of Hidden files follow these steps:
1.Close all programs so that you are at your desktop.
2.Double-click on the My Computer icon.
3.Select the Tools menu and click Folder Options.
4.After the new window appears select the View tab.
5.Put a checkmark in the checkbox labeled Display the contents of system folders.
6.Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
7.Remove the checkmark from the checkbox labeled Hide file extensions for known file types.
8.Remove the checkmark from the checkbox labeled Hide protected operating system files.
9.Press the Apply button and then the OK button and shutdown My Computer.
10.Now your computer is configured to show all hidden files.

Is this what you're suggesting? Or is there something else you're suggesting.

If its this I think I did it (but I'll have to try it again just to be sure). So if you had anything else - let me know.

thx again

 

[Broni]

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2
64-bit users go HERE

• Double-click SystemLook.exe to run it.
• Vista\Win 7 users:: Right click on SystemLook.exe, click Run As Administrator
• Copy the content of the following box and paste it into the main textfield:
  

  :dir
  %USERPROFILE%\My Documents /s

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

 

[joeb123]

SystemLook 30.07.11 by jpshortstuff
Log created at 09:33 on 03/02/2012 by User
Administrator - Elevation successful

========== dir ==========

C:\Documents and Settings\User\My Documents - Parameters: "/s"

---Files---
3T Company.doc --ah--- 125440 bytes [21:30 22/12/2009] [21:30 22/12/2009]
Al Riaz 2.doc --ah--- 131584 bytes [21:01 08/06/2011] [16:26 13/06/2011]
Al Riaz.doc --ah--- 128512 bytes [16:16 20/03/2009] [20:25 20/03/2009]
Amcon.doc --ah--- 126976 bytes [16:01 09/03/2010] [17:31 12/11/2010]
American Polarizers Inc..doc --ah--- 125440 bytes [20:23 01/12/2010] [20:30 01/12/2010]
artwork.doc --ah--- 125440 bytes [14:52 30/09/2009] [14:54 30/09/2009]
B&S Order.xlsx --ah--- 182317 bytes [17:02 16/12/2011] [17:02 16/12/2011]
B&S.doc --ah--- 124928 bytes [18:50 02/12/2009] [18:50 02/12/2009]
bags (3).pdf --ah--- 58367 bytes [14:02 09/08/2011] [14:02 09/08/2011]
Bonasse.doc --ah--- 125440 bytes [16:07 27/04/2010] [16:07 27/04/2010]
Brietfeld #2.doc --ah--- 128512 bytes [18:10 28/09/2010] [21:05 26/04/2011]
Capable.docx --ah--- 188556 bytes [15:59 04/01/2012] [16:00 04/01/2012]
Carbolite.doc --ah--- 125440 bytes [15:20 21/05/2010] [20:00 04/04/2011]
Centrostyle order.doc --ah--- 124928 bytes [21:29 12/02/2010] [17:32 04/02/2011]
CENTROSTYLE.xls --ah--- 32256 bytes [20:23 15/05/2007] [17:55 04/02/2011]
Chartpak.docx --ah--- 188447 bytes [17:40 14/11/2011] [17:40 14/11/2011]
Christmas Card.xls --ah--- 33792 bytes [16:19 13/01/2011] [15:51 17/01/2011]
Clip Former.xls --ah--- 382976 bytes [18:59 02/05/2007] [14:19 01/04/2003]
Coral.doc --ah--- 124928 bytes [17:03 10/03/2010] [17:03 10/03/2010]
CUSTOMER.TXT --ah--- 540445 bytes [18:58 02/05/2007] [20:55 09/10/2002]
DEFECTIVE FRAMES.xls --ah--- 54272 bytes [21:00 14/05/2009] [19:18 20/09/2011]
desktop.ini --ahs-- 75 bytes [18:35 29/03/2007] [14:28 08/06/2011]
Dioptics.doc --ah--- 125952 bytes [16:19 18/11/2009] [17:30 06/01/2011]
Dioptics.docx --ah--- 189802 bytes [18:43 23/08/2011] [20:02 23/08/2011]
Discontinued Swimming Goggles.xls --ah--- 26112 bytes [20:58 27/05/2011] [20:58 27/05/2011]
Donegan.doc --ah--- 125440 bytes [18:44 01/04/2010] [18:44 01/04/2010]
EDI.doc --ah--- 125440 bytes [20:27 22/02/2011] [20:28 22/02/2011]
Elegante Arts.doc --ah--- 124928 bytes [15:40 23/04/2010] [15:40 23/04/2010]
Elegante.doc --ah--- 124928 bytes [15:40 23/04/2010] [15:40 23/04/2010]
Form of R-Clip-on Purchase.xls --ah--- 95232 bytes [19:00 02/05/2007] [17:51 26/01/2007]
FRAME.XLS --ah--- 16384 bytes [18:59 02/05/2007] [14:43 13/05/2005]
Frey & Winkler.docx --ah--- 183946 bytes [19:05 26/01/2012] [19:05 26/01/2012]
G.A. Company.doc --ah--- 132608 bytes [19:51 15/06/2011] [19:51 15/06/2011]
GEORGIAN COLLEGE.xls --ah--- 48640 bytes [15:23 12/03/2010] [20:17 09/08/2011]
Germanow.docx --ah--- 181334 bytes [19:51 07/12/2011] [19:51 07/12/2011]
Grand Rise.docx --ah--- 183875 bytes [15:19 06/12/2011] [15:46 06/12/2011]
Grobet USA.docx --ah--- 189296 bytes [20:10 30/11/2011] [20:10 30/11/2011]
Hasegawa.doc --ah--- 131584 bytes [20:34 05/06/2009] [14:24 12/09/2011]
Heinz Jordan.doc --ah--- 124928 bytes [15:24 23/11/2009] [15:24 23/11/2009]
Hitecloth.doc --ah--- 19968 bytes [15:49 12/04/2011] [18:33 14/04/2011]
Hung Fu.doc --ah--- 125952 bytes [16:50 04/03/2011] [16:50 04/03/2011]
ICS 2009.xls --ah--- 15360 bytes [16:04 16/12/2008] [14:58 23/12/2008]
ICS LOCAL 2009.xls --ah--- 32256 bytes [17:35 18/12/2008] [15:55 22/12/2008]
ICS SHIPPING.xls --ah--- 30720 bytes [17:26 31/01/2008] [19:28 04/02/2008]
ICS.xls --ah--- 25600 bytes [18:59 02/05/2007] [19:22 19/01/2005]
Inland.doc --ah--- 125440 bytes [15:53 28/10/2009] [21:20 04/02/2011]
Integrated Plastic.docx --ah--- 188550 bytes [19:28 14/11/2011] [19:28 14/11/2011]
Japan Eyewear.docx --ah--- 195685 bytes [19:27 21/12/2011] [15:10 04/01/2012]
Jeyson.doc --ah--- 125952 bytes [21:21 11/01/2010] [21:21 11/01/2010]
KM_UniversalDriver_pcl_v11010_win2kx_vista_xp_7_EN.zip --ah--- 30094706 bytes [15:00 02/06/2011] [15:00 02/06/2011]
KOOLLOOK 2010.doc --ah--- 126976 bytes [20:39 16/12/2009] [17:52 05/07/2010]
KOOLLOOK DEFECTIVE FRAME.xls --ah--- 87552 bytes [20:33 20/05/2009] [21:06 04/04/2011]
koollook.doc --ah--- 136704 bytes [15:47 23/09/2008] [15:09 08/04/2011]
Leading Extreme.doc --ah--- 125440 bytes [19:19 04/01/2011] [19:19 04/01/2011]
LETTER HEAD.doc --ah--- 39936 bytes [15:41 25/03/2008] [15:41 25/03/2008]
Life Essential.doc --ah--- 126464 bytes [18:57 01/12/2010] [19:44 01/12/2010]
LYNDEN CUSTOM.doc --ah--- 124928 bytes [16:06 03/03/2009] [19:01 16/04/2010]
Magnagrip.doc --ah--- 130048 bytes [17:47 14/09/2010] [22:00 07/11/2011]
MCCRAY COLOUR FAX 2011.docx --ah--- 190600 bytes [18:58 18/01/2012] [18:58 18/01/2012]
MCCRAY FAX.doc --ah--- 42496 bytes [15:05 18/03/2008] [18:40 18/03/2008]
McCray Fax_BW.dot --ah--- 52736 bytes [15:22 19/03/2008] [14:42 17/03/2008]
McCray Letter Head 2011.dotx --ah--- 190028 bytes [16:29 23/08/2011] [16:29 23/08/2011]
McCray Letterhead_BW.dot --ah--- 49152 bytes [15:22 19/03/2008] [14:53 17/03/2008]
McCray Letterhead_Colour.dot --ah--- 176128 bytes [15:22 19/03/2008] [20:50 14/03/2008]
McCray-Waybill-Notice.doc --ah--- 60928 bytes [15:49 07/12/2009] [15:51 07/12/2009]
Merge letter.doc --ah--- 39936 bytes [15:03 27/11/2009] [15:21 27/11/2009]
Mosi Monthly Sales Report.xls --ah--- 131072 bytes [18:59 02/05/2007] [18:23 06/07/2007]
Nachi.doc --ah--- 195072 bytes [16:22 04/10/2010] [20:26 21/11/2011]
Neoptx.docx --ah--- 181609 bytes [19:32 07/12/2011] [20:10 20/01/2012]
NPSETA.xls --ah--- 28160 bytes [20:59 29/07/2009] [17:46 19/08/2009]
NPSETAWM.xls --ah--- 28160 bytes [19:46 13/08/2009] [20:41 13/08/2009]
OPSALES.doc --ah--- 130560 bytes [15:12 17/09/2009] [16:03 27/01/2012]
OTTO.docx --ah--- 189559 bytes [16:39 05/12/2011] [16:39 05/12/2011]
pamela.docx --ah--- 186936 bytes [21:48 11/11/2011] [20:11 02/12/2011]
Parkworld.doc --ah--- 129024 bytes [17:01 29/01/2010] [18:53 29/01/2010]
Payment.xls --ah--- 19456 bytes [19:40 22/02/2011] [19:02 10/05/2011]
postal.xls --ah--- 28672 bytes [21:46 18/01/2008] [15:36 21/01/2008]
PRO-OPTICS.docx --ah--- 182284 bytes [20:38 26/01/2012] [20:50 26/01/2012]
Prosben.doc --ah--- 127488 bytes [21:56 13/11/2009] [16:54 30/11/2009]
Prosben2.doc --ah--- 126464 bytes [21:15 01/12/2009] [19:55 07/04/2010]
Purchase.xls --ah--- 184320 bytes [18:59 02/05/2007] [13:21 24/08/2006]
Reliable.docx --ah--- 181552 bytes [19:25 07/12/2011] [19:42 07/12/2011]
Safilo frames.xls --ah--- 30208 bytes [18:59 02/05/2007] [19:33 06/11/2008]
Salice.doc --ah--- 130048 bytes [14:07 23/04/2010] [20:40 13/07/2011]
SCSETC.xls --ah--- 27136 bytes [16:32 29/07/2009] [17:45 19/08/2009]
SCSETCWM.xls --ah--- 27648 bytes [20:07 13/08/2009] [20:07 13/08/2009]
Shenzhen goggles 2010.doc --ah--- 130560 bytes [19:09 11/12/2009] [18:04 02/03/2011]
Shenzhen goggles.doc --ah--- 131072 bytes [21:24 06/03/2009] [20:34 20/07/2010]
SHIPPING.doc --ah--- 19456 bytes [21:52 05/12/2007] [21:52 05/12/2007]
Shu Gie Industrial.docx --ah--- 182849 bytes [20:27 18/01/2012] [20:44 18/01/2012]
SILCON.doc --ah--- 124928 bytes [20:10 06/07/2009] [15:37 24/12/2010]
Silver State.doc --ah--- 125952 bytes [20:21 20/03/2009] [18:17 08/04/2010]
Springhingeset.xls --ah--- 42496 bytes [16:28 09/06/2009] [21:48 29/12/2011]
STOCK REPORT - PLIERS,CALIPERS, FILES (DEC 2011).xlsx --ah--- 12784 bytes [20:21 14/12/2011] [20:21 14/12/2011]
Sun Ray.docx --ah--- 182518 bytes [21:12 13/01/2012] [21:31 13/01/2012]
Swissport.doc --ah--- 125440 bytes [16:29 23/02/2011] [16:29 23/02/2011]
TABATA SHIPMENT.xls --ah--- 36352 bytes [19:30 07/10/2011] [19:30 07/10/2011]
Tabata USA.docx --ah--- 182637 bytes [19:16 06/12/2011] [19:16 06/12/2011]
Tai Shing.doc --ah--- 125952 bytes [18:30 26/06/2009] [15:17 13/07/2009]
TANAKA.doc --ah--- 126976 bytes [18:28 25/02/2009] [22:07 25/02/2009]
THREE LEAVES.docx --ah--- 189123 bytes [21:44 11/11/2011] [16:50 14/11/2011]
TSETA.xls --ah--- 27648 bytes [20:33 29/07/2009] [18:59 20/08/2009]
TSETAWM.xls --ah--- 27648 bytes [19:58 13/08/2009] [19:12 20/08/2009]
Tung Fung.docx --ah--- 182025 bytes [21:23 12/01/2012] [21:23 12/01/2012]
UNIDIVE.docx --ah--- 182247 bytes [21:18 17/01/2012] [21:23 17/01/2012]
Vision Packaging.docx --ah--- 182308 bytes [19:49 16/12/2011] [20:18 16/12/2011]
VOGUE 2009.xls --ah--- 73216 bytes [20:32 28/07/2009] [14:22 23/03/2010]
WALMART EDI.doc --ah--- 23552 bytes [18:03 11/02/2011] [19:29 11/02/2011]
Walmart EDI.xls --ah--- 34304 bytes [20:24 23/03/2011] [15:10 25/01/2012]
Walmart Sales.xls --ah--- 27136 bytes [17:45 09/03/2011] [22:24 09/03/2011]
Wenzhou Carofian.doc --ah--- 125440 bytes [16:30 13/11/2009] [19:15 13/11/2009]
WESTERN.doc --ah--- 125440 bytes [20:24 14/04/2009] [19:24 27/01/2011]
WMLIST.xls --ah--- 41984 bytes [13:34 03/09/2009] [17:53 14/10/2009]
XIAMEN NANCHI.doc --ah--- 19968 bytes [15:21 29/09/2010] [15:21 29/09/2010]
xiamen.doc --ah--- 125952 bytes [17:48 23/01/2009] [18:14 25/10/2010]
~$Cray Fax_BW.dot --ah--- 54 bytes [19:22 08/07/2011] [19:22 08/07/2011]
~$FAX1.doc --ah--- 54 bytes [19:22 08/07/2011] [19:22 08/07/2011]

C:\Documents and Settings\User\My Documents\KM_UniversalDriver_pcl_v11010_win2kx_vista_xp_7_EN d--h--- [15:08 02/06/2011]

C:\Documents and Settings\User\My Documents\KM_UniversalDriver_pcl_v11010_win2kx_vista_xp_7_EN\Driver d--h--- [15:08 02/06/2011]

C:\Documents and Settings\User\My Documents\KM_UniversalDriver_pcl_v11010_win2kx_vista_xp_7_EN\Driver\EN d--h--- [15:08 02/06/2011]
UPDSetup.exe --ah--- 599480 bytes [18:31 03/02/2010] [15:08 02/06/2011]
UPDSetup64.exe --ah--- 858552 bytes [18:31 03/02/2010] [15:08 02/06/2011]

C:\Documents and Settings\User\My Documents\KM_UniversalDriver_pcl_v11010_win2kx_vista_xp_7_EN\Driver\EN\Driver d--h--- [15:08 02/06/2011]

C:\Documents and Settings\User\My Documents\KM_UniversalDriver_pcl_v11010_win2kx_vista_xp_7_EN\Driver\EN\Driver\Win_x64 d--h--- [15:08 02/06/2011]
KOB_1J_C.dll --ah--- 445952 bytes [22:51 11/03/2010] [15:08 02/06/2011]
KOB_1J_U.dll --ah--- 3369472 bytes [22:52 11/03/2010] [15:08 02/06/2011]
KOB_1J_X.dll --ah--- 726016 bytes [22:53 11/03/2010] [15:08 02/06/2011]
KOB_2J_C.dll --ah--- 445952 bytes [22:53 11/03/2010] [15:08 02/06/2011]
KOB_2J_U.dll --ah--- 3359744 bytes [22:54 11/03/2010] [15:08 02/06/2011]
KOB_2J_X.dll --ah--- 726016 bytes [22:54 11/03/2010] [15:08 02/06/2011]
KOB_3J_C.dll --ah--- 461824 bytes [22:55 11/03/2010] [15:08 02/06/2011]
KOB_3J_U.dll --ah--- 3459072 bytes [22:55 11/03/2010] [15:08 02/06/2011]
KOB_3J_X.dll --ah--- 747008 bytes [22:56 11/03/2010] [15:08 02/06/2011]
KOB_4J_C.dll --ah--- 460800 bytes [22:56 11/03/2010] [15:08 02/06/2011]
KOB_4J_U.dll --ah--- 3504128 bytes [22:57 11/03/2010] [15:08 02/06/2011]
KOB_4J_X.dll --ah--- 747008 bytes [22:58 11/03/2010] [15:08 02/06/2011]
KOB__J_1.dll --ah--- 37888 bytes [00:38 04/09/2009] [15:08 02/06/2011]
KOB__J_2.cab --ah--- 9028576 bytes [20:36 28/01/2010] [15:08 02/06/2011]
KOB__J_3.bmp --ah--- 121772 bytes [22:25 29/08/2008] [15:08 02/06/2011]
KOB__J_3.cfg --ah--- 62892 bytes [19:10 24/02/2010] [15:08 02/06/2011]
KOB__J_3.chm --ah--- 16271 bytes [14:35 27/01/2010] [15:08 02/06/2011]
KOB__J_3.dll --ah--- 1467392 bytes [21:20 02/02/2010] [15:08 02/06/2011]
KOB__J_3.exe --ah--- 185344 bytes [19:07 25/11/2008] [15:08 02/06/2011]
KOB__J_3.loc --ah--- 17870 bytes [14:42 27/01/2010] [15:08 02/06/2011]
KOB__J_3.ver --ah--- 274 bytes [23:50 11/03/2010] [15:08 02/06/2011]
KOB__J_B.dll --ah--- 221696 bytes [14:24 06/01/2010] [15:08 02/06/2011]
KOB__J_C.dll --ah--- 68608 bytes [14:12 12/11/2009] [15:08 02/06/2011]
KOB__J_F.dll --ah--- 335360 bytes [22:51 11/03/2010] [15:08 02/06/2011]
KOB__J_G.dll --ah--- 23552 bytes [14:12 12/11/2009] [15:08 02/06/2011]
KOB__J_J.dll --ah--- 33280 bytes [22:51 11/03/2010] [15:08 02/06/2011]
KOB__J_M.DLL --ah--- 3761664 bytes [21:13 09/11/2009] [15:08 02/06/2011]
KOB__J_N.dll --ah--- 73216 bytes [14:24 06/01/2010] [15:08 02/06/2011]
KOB__J_O.DLL --ah--- 648704 bytes [21:13 09/11/2009] [15:08 02/06/2011]
KOB__J_R.dll --ah--- 3418624 bytes [22:51 11/03/2010] [15:08 02/06/2011]
KOB__J_S.dll --ah--- 187392 bytes [22:51 11/03/2010] [15:08 02/06/2011]
KOB__J_U.dll --ah--- 33792 bytes [14:12 12/11/2009] [15:08 02/06/2011]
KOB__J_W.dll --ah--- 10752 bytes [14:11 12/11/2009] [15:08 02/06/2011]
KOB__J_X.dll --ah--- 50176 bytes [14:12 12/11/2009] [15:08 02/06/2011]
kob__j__.cat --ah--- 22471 bytes [07:49 31/03/2010] [15:08 02/06/2011]
KOB__J__.inf --ah--- 2302 bytes [20:33 12/03/2010] [15:08 02/06/2011]
KOB__J__.unf --ah--- 1354 bytes [23:50 11/03/2010] [15:08 02/06/2011]

C:\Documents and Settings\User\My Documents\KM_UniversalDriver_pcl_v11010_win2kx_vista_xp_7_EN\Driver\EN\Driver\Win_x86 d--h--- [15:08 02/06/2011]
KOB_1J_C.dll --ah--- 416256 bytes [22:43 11/03/2010] [15:08 02/06/2011]
KOB_1J_U.dll --ah--- 3114496 bytes [22:44 11/03/2010] [15:08 02/06/2011]
KOB_1J_X.dll --ah--- 685568 bytes [22:44 11/03/2010] [15:08 02/06/2011]
KOB_2J_C.dll --ah--- 416768 bytes [22:45 11/03/2010] [15:08 02/06/2011]
KOB_2J_U.dll --ah--- 3107840 bytes [22:45 11/03/2010] [15:08 02/06/2011]
KOB_2J_X.dll --ah--- 685568 bytes [22:46 11/03/2010] [15:08 02/06/2011]
KOB_3J_C.dll --ah--- 430592 bytes [22:46 11/03/2010] [15:08 02/06/2011]
KOB_3J_U.dll --ah--- 3188224 bytes [22:47 11/03/2010] [15:08 02/06/2011]
KOB_3J_X.dll --ah--- 707072 bytes [22:47 11/03/2010] [15:08 02/06/2011]
KOB_4J_C.dll --ah--- 429568 bytes [22:48 11/03/2010] [15:08 02/06/2011]
KOB_4J_U.dll --ah--- 3222528 bytes [22:48 11/03/2010] [15:08 02/06/2011]
KOB_4J_X.dll --ah--- 707072 bytes [22:49 11/03/2010] [15:08 02/06/2011]
KOB__J_1.dll --ah--- 41472 bytes [00:38 04/09/2009] [15:08 02/06/2011]
KOB__J_2.cab --ah--- 8598828 bytes [20:31 28/01/2010] [15:08 02/06/2011]
KOB__J_3.bmp --ah--- 121772 bytes [22:25 29/08/2008] [15:08 02/06/2011]
KOB__J_3.cfg --ah--- 62892 bytes [19:10 24/02/2010] [15:08 02/06/2011]
KOB__J_3.chm --ah--- 16271 bytes [14:35 27/01/2010] [15:08 02/06/2011]
KOB__J_3.dll --ah--- 1085440 bytes [21:21 02/02/2010] [15:08 02/06/2011]
KOB__J_3.exe --ah--- 155648 bytes [19:05 25/11/2008] [15:08 02/06/2011]
KOB__J_3.loc --ah--- 17870 bytes [14:42 27/01/2010] [15:08 02/06/2011]
KOB__J_3.ver --ah--- 274 bytes [23:50 11/03/2010] [15:08 02/06/2011]
KOB__J_B.dll --ah--- 131072 bytes [14:24 06/01/2010] [15:08 02/06/2011]
KOB__J_C.dll --ah--- 62976 bytes [14:11 12/11/2009] [15:08 02/06/2011]
KOB__J_F.dll --ah--- 335360 bytes [22:42 11/03/2010] [15:08 02/06/2011]
KOB__J_G.dll --ah--- 21504 bytes [14:10 12/11/2009] [15:08 02/06/2011]
KOB__J_J.dll --ah--- 30720 bytes [22:42 11/03/2010] [15:08 02/06/2011]
KOB__J_M.DLL --ah--- 1732608 bytes [21:13 09/11/2009] [15:08 02/06/2011]
KOB__J_N.dll --ah--- 53248 bytes [14:24 06/01/2010] [15:08 02/06/2011]
KOB__J_O.DLL --ah--- 888832 bytes [21:13 09/11/2009] [15:08 02/06/2011]
KOB__J_R.dll --ah--- 3423744 bytes [22:43 11/03/2010] [15:08 02/06/2011]
KOB__J_S.dll --ah--- 188416 bytes [22:42 11/03/2010] [15:08 02/06/2011]
KOB__J_U.dll --ah--- 34304 bytes [14:10 12/11/2009] [15:08 02/06/2011]
KOB__J_W.dll --ah--- 10752 bytes [14:11 12/11/2009] [15:08 02/06/2011]
KOB__J_X.dll --ah--- 48640 bytes [14:10 12/11/2009] [15:08 02/06/2011]
kob__j__.cat --ah--- 23399 bytes [07:49 31/03/2010] [15:08 02/06/2011]
KOB__J__.inf --ah--- 2311 bytes [23:50 11/03/2010] [15:08 02/06/2011]
KOB__J__.unf --ah--- 1403 bytes [23:51 11/03/2010] [15:08 02/06/2011]

C:\Documents and Settings\User\My Documents\KM_UniversalDriver_pcl_v11010_win2kx_vista_xp_7_EN\Driver\EN\Sub d--h--- [15:08 02/06/2011]
UPDSetup.bmp --ah--- 121772 bytes [22:25 29/08/2008] [15:08 02/06/2011]
UPDSetup.ini --ah--- 594 bytes [14:17 12/01/2010] [15:08 02/06/2011]
UPDSetup.loc --ah--- 5646 bytes [19:29 08/01/2010] [15:08 02/06/2011]
UPDSetup.ver --ah--- 114 bytes [13:49 12/03/2010] [15:08 02/06/2011]

C:\Documents and Settings\User\My Documents\KM_UniversalDriver_pcl_v11010_win2kx_vista_xp_7_EN\Driver\EN\Sub\Eula d--h--- [15:08 02/06/2011]
Eula.ini --ah--- 880 bytes [15:53 26/03/2009] [15:08 02/06/2011]
EULA_cs.txt --ah--- 12996 bytes [13:59 23/02/2009] [15:08 02/06/2011]
EULA_de.txt --ah--- 15980 bytes [23:42 22/01/2009] [15:08 02/06/2011]
EULA_en.txt --ah--- 12678 bytes [20:33 22/01/2009] [15:08 02/06/2011]
EULA_es.txt --ah--- 14352 bytes [21:04 22/01/2009] [15:08 02/06/2011]
EULA_fr.txt --ah--- 14692 bytes [21:00 22/01/2009] [15:08 02/06/2011]
EULA_it.txt --ah--- 14744 bytes [21:01 22/01/2009] [15:08 02/06/2011]
EULA_ja.txt --ah--- 5740 bytes [18:33 20/11/2009] [15:08 02/06/2011]
EULA_ko.txt --ah--- 6590 bytes [20:45 22/01/2009] [15:08 02/06/2011]
EULA_nl.txt --ah--- 14848 bytes [19:40 23/02/2009] [15:08 02/06/2011]
EULA_pl.txt --ah--- 15554 bytes [20:38 22/01/2009] [15:08 02/06/2011]
EULA_pt.txt --ah--- 13732 bytes [14:47 16/10/2009] [15:08 02/06/2011]
EULA_ro.txt --ah--- 14084 bytes [21:04 22/01/2009] [15:08 02/06/2011]
EULA_ru.txt --ah--- 15586 bytes [13:59 23/02/2009] [15:08 02/06/2011]
EULA_zh-cn.txt --ah--- 3780 bytes [20:39 22/01/2009] [15:08 02/06/2011]
EULA_zh-tw.txt --ah--- 4412 bytes [20:40 22/01/2009] [15:08 02/06/2011]

C:\Documents and Settings\User\My Documents\My Data Sources d---s-- [15:50 12/06/2011]
+Connect to New Data Source.odc ---h--- 190 bytes [15:50 12/06/2011] [19:08 25/09/2000]
+NewSQLServerConnection.odc ---h--- 196 bytes [15:50 12/06/2011] [19:08 25/09/2000]
DESKTOP.INI ---h--- 70 bytes [15:50 12/06/2011] [18:30 27/07/2000]
FOLDER.ICO ---h--- 4710 bytes [15:50 12/06/2011] [13:08 28/07/2000]

C:\Documents and Settings\User\My Documents\My Music dr-h--- [18:35 29/03/2007]
Desktop.ini --ahs-- 180 bytes [18:35 29/03/2007] [14:28 08/06/2011]
Sample Music.lnk --ah--- 638 bytes [18:35 29/03/2007] [18:35 29/03/2007]

C:\Documents and Settings\User\My Documents\My Pictures dr-h--- [18:35 29/03/2007]
Desktop.ini --ahs-- 182 bytes [18:35 29/03/2007] [14:28 08/06/2011]
Sample Pictures.lnk --ah--- 668 bytes [18:35 29/03/2007] [18:35 29/03/2007]

C:\Documents and Settings\User\My Documents\My Videos dr----- [20:15 31/01/2012]
Desktop.ini --ahs-- 181 bytes [20:15 31/01/2012] [20:15 31/01/2012]

C:\Documents and Settings\User\My Documents\Outlook Files d--h--- [14:05 02/06/2011]
info@mccrayoptical.com - Microsoft Outlook.pst --a---- 353772544 bytes [14:05 02/06/2011] [14:30 03/02/2012]
orders@mccrayoptical.com - Microsoft Outlook.pst --a---- 35062784 bytes [14:10 02/06/2011] [14:30 03/02/2012]
pmak@mccrayoptical.com - Microsoft Outlook.pst --a---- 840598528 bytes [16:05 03/06/2011] [14:30 03/02/2012]

C:\Documents and Settings\User\My Documents\Symantec d--h--- [19:40 29/03/2007]
Norton AntiVirus_2006_Key.txt --ah--- 368 bytes [19:40 29/03/2007] [19:40 29/03/2007]

-= EOF =-

 

[Broni]

Do you see all of "missing" files in the above log?

Let's see, if we can recover your missing features.
Download and run UnHide
Let me know, if it worked.

 

[joeb123]

Yup that worked - all files are visible now. If I had manually unchecked "hidden" from each one, would that have worked as well?

So is the system clean now?

How did you learn all this stuff?

thx
joe

 

[Broni]

If I had manually unchecked "hidden" from each one, would that have worked as well?

Possibly but it's a lot of work.

Your computer is clean

1. We need to reset system restore to prevent your computer from being accidentally reinfected by using some old restore point(s). We'll create fresh, clean restore point, using following OTL script:

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following:

:OTL
:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[emptyjava]
[CLEARALLRESTOREPOINTS]
[Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done
• Post resulting log.

2. Now, we'll remove all tools, we used during our cleaning process

Clean up with OTL:

• Double-click OTL.exe to start the program.
• Close all other programs apart from OTL as this step will require a reboot
• On the OTL main screen, press the CLEANUP button
• Say Yes to the prompt and then allow the program to reboot your computer.

If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.

3. Make sure, Windows Updates are current.

4. If any Trojan was listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

7. Run Temporary File Cleaner (TFC) weekly.

8. Download and install Secunia Personal Software Inspector (PSI): https://www.techspot.com/downloads/4898-secunia-personal-software-inspector-psi.html. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

10. (Windows XP only) Run defrag at your convenience.

11. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

12. Read How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html

13. Please, let me know, how your computer is doing.

 

[Broni]

The issue seems to be resolved.