05-09-2012 06:09 PM
Yes. ESET is now removed.
05-09-2012 06:19 PM
Start OTL, under
Copy and paste the custom script attached which you open in for instance Notepad,(include the : at the start of :OTL and all the way to the end / bottom) and run the script. (Red Run Fix Button)
The output log, should be placed in the C:\ _OTL folder after.
Quads
05-09-2012 06:37 PM
Here is the log
05-09-2012 06:47 PM
You had a FakeHDD (FakeAV) over the top at some stage,
Do you have all your Desktop and Program (Start Menu) shortcut items and folders shifted back in place??
Quads
05-09-2012 07:03 PM
The Startup is fine. The desktop icons where all placed to the left side of the screen the other day and I moved them back. They are in place and haven't moved since then.
05-09-2012 07:41 PM
I noticed by this
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\2
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Windows PowerShell 1.0
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Wi
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Sy
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\St
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Sp
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\So
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\So
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Se
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Se
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Qu
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\On
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\On
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ne
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ne
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\My HP Games
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\mu
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\mu
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Mi
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Mi
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Mi
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Me
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ma
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Li
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\ir
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\ir
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\HP Rhapsody
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\HP
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\HP
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\HP
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\HP
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\HP
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Go
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Go
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Go
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ga
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ga
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\FR
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\ES
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\ES
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\en
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Cr
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Cr
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Cr
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ca
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ar
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\AI
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ad
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ac
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ac
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ac
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ac
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ac
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ac
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ac
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs\Ac
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1\Programs.
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\1
C\DOCUME~1\owner\LOCALS~1\Temp\smtmp\4
Once the Quarantine folder is deleted they are gone. So to check the,
The smtmp\2 should have copied across the items to C:\Documents and Settings\user_name\Application Data\Microsoft\Internet Explorer\Quick Launch Folder (if exists)
The smtmp\1 should have copied across the items to C:\Documents and Settings\All Users\Start Menu Folder
The smtmp\4 should have copied across the items to C:\Documents and Settings\All Users\Desktop Folder
Quads
05-10-2012 12:16 PM
Are you satisfied that the start menu Programs folder is all in order??
Quads
05-10-2012 06:14 PM
The appropriate shortcuts/files appear to be in those locations.
05-10-2012 06:18 PM
OK
Then Start OTL and then this time click the Black "CleanUp" button. It should delete itself and the C:\_OTL folder.
Once the _OTL folder is also deleted you are free to go on your merry way. You are now fixed / Solved.
Quads
05-10-2012 06:28 PM
Awesome. Thanks very much!!!!
