New
#11
Can you attach the log file for Malwarbytes?
Press Windows+R, and paste this in:
Press enter, and upload all the files in that folder.Code:%AppData%\Malwarebytes\Malwarebytes' Anti-Malware\Logs
Thnkx
Can you attach the log file for Malwarbytes?
Press Windows+R, and paste this in:
Press enter, and upload all the files in that folder.Code:%AppData%\Malwarebytes\Malwarebytes' Anti-Malware\Logs
Thnkx
Sorry about that, I believe that I gave you incorrect instructions...
In that Windows+R box, go to
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs\
Thanks!
There are two logs because I stopped the scan due to not paying attention the 1st time.
I do not have the necessary know-how to diagnose your problem further, so please wait for help from somebody else.
Sorry about that. Whoever picks this up will need to view your MalwareBytes logs, as there are many items detected.
Not a problem, I appreciate all the help :)
Oh, how did the Unhide program go?
Please reboot your computer and see if your images work and if you see any more image files.
Also, please upload the log file that it should have created onto the desktop?
it's still running :)
Will upload when finished
Copyright 2008-2012 BleepingComputer.com
More Information about Unhide.exe can be found at this link:
Unhide.exe - A introduction as to what this program does
Program started at: 11/01/2012 09:05:53 PM
Windows Version: Windows 7
Please be patient while your files are made visible again.
Processing the C:\ drive
Finished processing the C:\ drive. 592205 files processed.
Processing the F:\ drive
Finished processing the F:\ drive. 68 files processed.
The C:\Users\Tom\AppData\Local\Temp\smtmp\ folder does not exist!!
Unhide cannot restore your missing shortcuts!!
Please see this topic in order to learn how to restore default
Start Menu shortcuts: Unhide.exe - A introduction as to what this program does
Searching for Windows Registry changes made by FakeHDD rogues.
- Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
- Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
- Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
- Checking HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
No registry changes detected.
Restarting Explorer.exe in order to apply changes.
Program finished at: 11/01/2012 09:36:12 PM
Execution time: 0 hours(s), 30 minute(s), and 19 seconds(s)
Ok...
Please restart your system and give me a list of files that appeared on your desktop.
Also, browse to a directory where you have some "corrupted" images and tell me if there are any new files.