yessir, it would just b a quick and easy way to Actually SEE if the files were deleted, that way we could know if we should extinguish the virus and get data back, or see if we must unhide the files. I would not recommend sticking that usb in the OS again, i would recommend making a windows LivePE, booting from that, then stick the usb in :)
Gave USBFix a shot but I got this notice:
Tried to find a different download button for a 64-bit but there's just one generic download button. Any recommendations?
Sorry FRST and fixlist.txt weren't in the same drive. I really thought I had done that part right. Here's what the C drive looks like on my screen. I just dragged and dropped FRST and the fixlist.txt into C.
What I got after running it again...
From MiniReg:
And the J drive
ducat1base,
Thanks for the info. No worries about mistakes, we all take part in them. :)
Try USBFix from here:
http://www.infospyware.com/utiles/usbfix/
It is a Spanish language website, but the program is in English.
To download. press the button that says: Descagar
Then follow the same instructions.
If still no-go, then try runing the program in Safe Mode.
See how that goes.
Okay, that worked. Here's the report:
UsbFix [Listing 1 ] OWNER-HP.txt
Were the images in a folder, or just in J:?
The Webroot Security Anywhere that you use, by any chance does it have the images it its Quarantine?
Last edited by cottonball; 20 Aug 2013 at 10:47.
I believe only images were in J. If they were in a separate folder, it was the DCIM folder which was created automatically. Quarantine only displays this:
Please go to Start > Control Panel > Folder Options
Click the View tab.
Under Advanced settings, click: Show hidden files, folders, and drives, and then click OK.
Uncheck: Hide protected operating system file
Close out by pressing: OK
This time press: Deletion
You are prompted to connect storage devices (SD card)
At the end of the scan a report shows.
Please post the USBFix Deletion report in your reply.
Right-click on the Command Prompt and select: Run As Administrator
At the blinking cursor of the Command Prompt, type in (or copy/paste with mouse) the following commands inside the code box, and press Enter:
Check the SD Card. Any luck?Code:attrib -h -s /s /d J:\*.*
Nope, still no luck with it. Here's what I got from USBFix
UsbFix [Clean 1] OWNER-HP.txt
And when I ran CMD, access was still denied
But I do notice some folders and files have either been created or rearranged. This is what it looks like now
Did you open an elevated command prompt ?
When you do the command prompt opens to
C:\Windows\System32>_
Yup, I clicked Run as Administrator. Tried it again just to be sure and am getting the same screen, not C:\Windows\System32>_
Quote
