virus

peter_the_piper

Fairly sure yes, but as its not my comp i'm not certain. Can I run unhide again?

waddler_8

Yes you can run it again.

peter_the_piper

Running now, I've just seen that the "programs" section in start only has the new programs in it, hopefully this will change.

waddler_8

If unhide doesn't restore them then they are gone unfortunately - they are only links to the programs - the programs will still be there.. You've not run any kind of temp file cleaner in all of this have you - ccleaner, xp's disk cleanup etc

peter_the_piper

Brilliant, all back now. Can't thank you enough. Gold stars all round.

peter_the_piper

Avira still there but not causing problems it seems. Yep, just run ccleaner before unhide but all programs are back ok. Thanks

GunJack

good to hear......... nice one waddler

peter_the_piper

Here here.

waddler_8

Not quite done - but very nearly. OTM will run a little different this time, your desktop will temporarily disappear before reboot and it'll start deleting temp files.

• Double click OTM.exe to run it.
• Copy the following code inside the codebox below. Do not include the word Code:

:Files
"%allusersprofile%\Application Data\Avira"
ipconfig /flushdns /c

:Commands
[ClearAllRestorePoints]
[EmptyTemp]

• Return to OTM, right click in the Paste instructions for Items to be Moved window (under the yellow bar) and choose Paste.
• Push the large MoveIt! button.
• Click OK & post the log if no reboot is required.
• OTM may ask to reboot the machine. Please do so if asked.
• The report should appear in Notepad after the reboot. Copy/paste the contents of that report back here in your next reply.

peter_the_piper

That was "interesting"
All processes killed
========== FILES ==========
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\JOBS folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\EVENTDB folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\CONFIG folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Avira folder moved successfully.
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\heather\My Documents\Downloads\cmd.bat deleted successfully.
C:\Documents and Settings\heather\My Documents\Downloads\cmd.txt deleted successfully.
========== COMMANDS ==========

Restore points cleared and new OTM Restore Point set!

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 74972666 bytes
->Temporary Internet Files folder emptied: 55094 bytes
->FireFox cache emptied: 40352672 bytes
->Flash cache emptied: 57007 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56502 bytes

User: heather
->Temp folder emptied: 619693770 bytes
->Temporary Internet Files folder emptied: 8655479 bytes
->Java cache emptied: 1528334 bytes
->FireFox cache emptied: 59091331 bytes
->Flash cache emptied: 56977 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 34874 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33237 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2195181 bytes
%systemroot%\System32 .tmp files removed: 2014737 bytes
%systemroot%\System32\dllcache .tmp files removed: 240640 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 191088045 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 198114908 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 74141 bytes
RecycleBin emptied: 3477520 bytes

Total Files Cleaned = 1,146.00 mb


OTM by OldTimer - Version 3.1.19.0 log created on 02292012_215302

Files moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
File C:\WINDOWS\temp\usgthrsvc\Perflib_Perfdata_6a0.dat not found!

Registry entries deleted on Reboot...