BleepingComputer.com: Unhide.exe didn't work!

I'm sorry, it didn't work.
Something else must be messed up.

Just think you may be interested

Results of my AVG anti-virus free edition virus vault

after every thing is disappeared AVG found this:

"Malware";"Win32/Kryptik.NRL";"C:\PROGRAMDATA\RDJHMDQWKMHAWQ.EXE";"N/A";"5/13/2011, 10:46:41 PM"

and

"Malware";"Unknown";"C:\USERS\ALEX\APPDATA\LOCAL\TEMP\SMTMP\1\PROGRAMS\ACCESSORIES\SYNC CENTER.LNK";"N/A";"5/13/2011, 10:47:01 PM"


goggled "SYNC CENTER.LNK" and found this forum)))

I have no authority to comment on malware issues.

If you want to make sure, your computer is clean....

I would like you to start a new thread and post a DDS log HERE and include a link to this thread. Please make sure that you read the information about getting started before you start your thread.

It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient. Help is on the way!

Broni, on 14 May 2011 - 06:25 PM, said:

-----
THanks a lot...this did the trick for me. I took ownership of Program Data and copied the stuff from the C:\Users\myName\AppData\Local\Temp\smtmp\1
and copied it into the Start Menu subfolder.

This restored all the Program Icons in the Start Menu.

Earlier, I had got my User folder to show up by using the attrib cmd in the Dos window. ...I expect Unhide would have done this more easily.

Whew! this has been an ordeal...thanks a lot for helping get my system fixed.

Good news

I have exactly this problem on a Windows XP Pro system. I can't seem to follow the instructions given to the other member with an XP system. Can someone help me?

Did you try UnHide?
Which instructions did you try to follow?

Broni, thank you for answering. I had the MS Removal Tool infection. I followed the uninstall guide published elsewhere on this site.

I did run UNHIDE.EXE and it tells me my files shold be visible, and most are. However, little is available to me from the start menu. Most importantly, I cannot access System Restore because nothing is in my System Tools Folder when I find it from the Start Menu|All Programs|Accessories|System Tools. That simply shows (Empty) just like that enclosed by parentheses

Other progams folders are showing (Empty) also, such as Photoshop, which is very important to me. However I can run Photoshop if I right click an image and Open With ... Photoshop CS3.


>> I tried to follow your reply #12 in this thread, but I am usnure where to find those folders and I'm very apprehensive about doing more harm than good by not understanding what I'm doing.

I hope you can help me. I will appreciate any time you can spend with me. Thank you.

This post has been edited by Sam W1: 15 May 2011 - 12:10 PM

Follow my instructions from here: http://www.bleepingcomputer.com/forums/topic396978.html/page__view__findpost__p__2244974

Broni,

Thank you. Here is the info from the System Look scan you requested

SystemLook 04.09.10 by jpshortstuff
Log created at 13:12 on 15/05/2011 by James
Administrator - Elevation successful

========== dir ==========

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp - Parameters: "/s"

---Files---
None found.

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1 d------ [16:15 13/05/2011]
desktop.ini --ahs-- 272 bytes [23:09 23/12/2009] [16:36 28/12/2010]
Set Program Access and Defaults.lnk --a---- 1563 bytes [04:40 24/12/2009] [16:36 28/12/2010]
Windows Catalog.lnk --a---- 398 bytes [04:40 24/12/2009] [04:40 24/12/2009]
Windows Update.lnk --a---- 1507 bytes [04:40 24/12/2009] [04:40 24/12/2009]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs d------ [16:15 13/05/2011]
Acrobat_com.lnk --a---- 738 bytes [00:42 22/01/2010] [00:42 22/01/2010]
Adobe Reader 9.lnk --a---- 2347 bytes [06:54 14/10/2010] [23:49 16/11/2010]
Apple Software Update.lnk --a---- 1830 bytes [17:41 23/01/2010] [17:41 23/01/2010]
desktop.ini --ahs-- 150 bytes [23:09 23/12/2009] [04:38 24/12/2009]
Microsoft Pro Photo Tools.lnk --a---- 910 bytes [00:43 13/05/2010] [00:43 13/05/2010]
Microsoft Security Essentials.lnk --a---- 1680 bytes [11:41 07/08/2010] [16:07 17/12/2010]
Microsoft Web Platform Installer.lnk --a---- 1820 bytes [21:37 27/08/2010] [21:37 27/08/2010]
Mozilla Firefox.lnk --a---- 730 bytes [19:42 26/03/2011] [19:42 26/03/2011]
MSN.lnk --a---- 1986 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Nitro PDF Reader.lnk --a---- 1868 bytes [00:28 27/01/2011] [00:28 27/01/2011]
Windows Messenger.lnk --a---- 609 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Windows Movie Maker.lnk --a---- 786 bytes [04:38 24/12/2009] [04:38 24/12/2009]
Windows Search.lnk --a---- 1803 bytes [17:10 07/03/2010] [17:10 07/03/2010]
WordBiz.lnk --a---- 1530 bytes [02:58 03/09/2010] [02:58 03/09/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\ABBYY FineReader 6.0 Sprint d------ [16:15 13/05/2011]
ABBYY FineReader 6.0 Sprint.lnk --a---- 2044 bytes [19:52 26/01/2010] [19:52 26/01/2010]
User's Guide.lnk --a---- 842 bytes [19:52 26/01/2010] [19:52 26/01/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Accessories d------ [16:15 13/05/2011]
Calculator.lnk --a---- 1498 bytes [04:36 24/12/2009] [15:07 30/04/2011]
desktop.ini --ahs-- 255 bytes [04:36 24/12/2009] [00:39 23/05/2010]
Paint.lnk --a---- 1515 bytes [04:36 24/12/2009] [19:19 07/02/2011]
Remote Desktop Connection.lnk --a---- 1585 bytes [08:26 24/12/2009] [16:35 28/12/2010]
Scanner and Camera Wizard.lnk --a---- 710 bytes [17:20 23/01/2010] [00:39 23/05/2010]
WordPad.lnk --a---- 879 bytes [04:36 24/12/2009] [04:36 24/12/2009]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Accessibility d------ [16:15 13/05/2011]
Accessibility Wizard.lnk --a---- 1520 bytes [04:36 24/12/2009] [04:36 24/12/2009]
desktop.ini --ahs-- 90 bytes [04:36 24/12/2009] [04:36 24/12/2009]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Communications d------ [16:15 13/05/2011]
desktop.ini --ahs-- 516 bytes [04:34 24/12/2009] [16:37 28/12/2010]
HyperTerminal.lnk --a---- 786 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Network Connections.lnk --a---- 1757 bytes [04:34 24/12/2009] [04:34 24/12/2009]
Network Setup Wizard.lnk --a---- 1640 bytes [04:38 24/12/2009] [04:38 24/12/2009]
New Connection Wizard.lnk --a---- 1646 bytes [04:34 24/12/2009] [04:34 24/12/2009]
Wireless Network Setup Wizard.lnk --a---- 1656 bytes [04:40 24/12/2009] [16:37 28/12/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Accessories\Entertainment d------ [16:15 13/05/2011]
desktop.ini --ahs-- 146 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Sound Recorder.lnk --a---- 1528 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Volume Control.lnk --a---- 1528 bytes [04:36 24/12/2009] [04:36 24/12/2009]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Accessories\System Tools d------ [16:15 13/05/2011]
Activate Windows.lnk --a---- 1599 bytes [04:40 24/12/2009] [04:40 24/12/2009]
Backup.lnk --a---- 1532 bytes [04:40 24/12/2009] [04:40 24/12/2009]
Character Map.lnk --a---- 1521 bytes [04:36 24/12/2009] [04:36 24/12/2009]
desktop.ini --ahs-- 757 bytes [04:36 24/12/2009] [04:40 24/12/2009]
Disk Cleanup.lnk --a---- 1532 bytes [04:38 24/12/2009] [18:28 12/08/2010]
Disk Defragmenter.lnk --a---- 1572 bytes [04:38 24/12/2009] [14:16 10/05/2011]
Files and Settings Transfer Wizard.lnk --a---- 1591 bytes [04:40 24/12/2009] [23:02 05/01/2010]
Scheduled Tasks.lnk --a---- 1753 bytes [04:38 24/12/2009] [04:38 24/12/2009]
System Information.lnk --a---- 1070 bytes [04:38 24/12/2009] [04:38 24/12/2009]
System Restore.lnk --a---- 1616 bytes [04:38 24/12/2009] [05:12 21/01/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Administrative Tools d------ [16:15 13/05/2011]
Component Services.lnk --a---- 1582 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Computer Management.lnk --a---- 1602 bytes [04:40 24/12/2009] [09:54 07/03/2011]
Data Sources (ODBC).lnk --a---- 1596 bytes [04:40 24/12/2009] [04:40 24/12/2009]
desktop.ini --ahs-- 545 bytes [04:36 24/12/2009] [04:40 24/12/2009]
Event Viewer.lnk --a---- 1592 bytes [04:40 24/12/2009] [04:40 24/12/2009]
Local Security Policy.lnk --a---- 1590 bytes [04:40 24/12/2009] [04:40 24/12/2009]
Performance.lnk --a---- 1591 bytes [04:40 24/12/2009] [09:49 07/03/2011]
Services.lnk --a---- 1602 bytes [04:40 24/12/2009] [19:06 01/12/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Adobe Creative Suite 3 Production Premium d------ [16:15 13/05/2011]
Adobe After Effects CS3.lnk --a---- 1022 bytes [02:13 05/02/2010] [02:13 05/02/2010]
Adobe Bridge CS3.lnk --a---- 824 bytes [01:12 05/02/2010] [01:12 05/02/2010]
Adobe Device Central CS3.lnk --a---- 917 bytes [01:17 05/02/2010] [01:17 05/02/2010]
Adobe Encore CS3.lnk --a---- 856 bytes [01:56 05/02/2010] [01:56 05/02/2010]
Adobe ExtendScript Toolkit 2.lnk --a---- 1106 bytes [01:18 05/02/2010] [01:18 05/02/2010]
Adobe Extension Manager CS3.lnk --a---- 930 bytes [01:28 05/02/2010] [01:28 05/02/2010]
Adobe Flash CS3 Professional.lnk --a---- 810 bytes [02:09 05/02/2010] [02:09 05/02/2010]
Adobe Flash CS3 Video Encoder.lnk --a---- 982 bytes [01:52 05/02/2010] [01:52 05/02/2010]
Adobe Illustrator CS3.lnk --a---- 1239 bytes [02:16 05/02/2010] [02:16 05/02/2010]
Adobe Photoshop CS3.lnk --a---- 862 bytes [02:19 05/02/2010] [02:19 05/02/2010]
Adobe Premiere Pro CS3.lnk --a---- 928 bytes [02:00 05/02/2010] [02:00 05/02/2010]
Adobe Soundbooth CS3.lnk --a---- 924 bytes [01:54 05/02/2010] [01:54 05/02/2010]
Adobe Stock Photos CS3.lnk --a---- 948 bytes [01:22 05/02/2010] [01:22 05/02/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\AutoGK d------ [16:15 13/05/2011]
AutoGK.lnk --a---- 666 bytes [16:22 13/07/2010] [17:01 09/11/2010]
Uninstall.lnk --a---- 666 bytes [16:24 13/07/2010] [17:02 09/11/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\AutoGK\Tutorials d------ [16:15 13/05/2011]
Catalan Tutorial.lnk --a---- 771 bytes [17:01 09/11/2010] [17:01 09/11/2010]
English Tutorial.lnk --a---- 771 bytes [17:01 09/11/2010] [17:01 09/11/2010]
French Tutorial.lnk --a---- 771 bytes [17:01 09/11/2010] [17:01 09/11/2010]
Greek Tutorial.lnk --a---- 771 bytes [17:01 09/11/2010] [17:01 09/11/2010]
Italian Tutorial.lnk --a---- 771 bytes [17:01 09/11/2010] [17:01 09/11/2010]
Portuguese Tutorial.lnk --a---- 771 bytes [17:01 09/11/2010] [17:01 09/11/2010]
Russian Tutorial.lnk --a---- 771 bytes [17:01 09/11/2010] [17:01 09/11/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\AviSynth 2.5 d------ [16:15 13/05/2011]
AviSynth Documentation.lnk --a---- 874 bytes [16:23 13/07/2010] [17:02 09/11/2010]
AviSynth Online.url --a---- 49 bytes [16:23 13/07/2010] [17:02 09/11/2010]
Download Plugins.url --a---- 66 bytes [16:23 13/07/2010] [17:02 09/11/2010]
Example Scripts.lnk --a---- 718 bytes [16:23 13/07/2010] [17:02 09/11/2010]
License.lnk --a---- 709 bytes [16:23 13/07/2010] [17:02 09/11/2010]
Plugin Directory.lnk --a---- 709 bytes [16:23 13/07/2010] [17:02 09/11/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\CamStudio d------ [16:15 13/05/2011]
CamStudio.lnk --a---- 701 bytes [03:12 18/08/2010] [03:12 18/08/2010]
Movie Player 2.1.lnk --a---- 647 bytes [03:12 18/08/2010] [03:12 18/08/2010]
Movie Player.lnk --a---- 635 bytes [03:12 18/08/2010] [03:12 18/08/2010]
SWF Producer.lnk --a---- 647 bytes [03:12 18/08/2010] [03:12 18/08/2010]
Uninstall.lnk --a---- 706 bytes [03:12 18/08/2010] [03:12 18/08/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Celtx d------ [16:15 13/05/2011]
Celtx (Safe Mode).lnk --a---- 1526 bytes [23:12 27/01/2010] [23:12 27/01/2010]
Celtx.lnk --a---- 1504 bytes [23:12 27/01/2010] [23:12 27/01/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\CyberLink Hi-Def Suite d------ [16:15 13/05/2011]
CyberLink Hi-Def Suite.lnk --a---- 1760 bytes [09:14 24/12/2009] [09:14 24/12/2009]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\CyberLink Hi-Def Suite\InstantBurn d------ [16:15 13/05/2011]
InstantBurn Config Tool.lnk --a---- 1825 bytes [09:15 24/12/2009] [09:15 24/12/2009]
InstantBurn Erase Tool.lnk --a---- 1816 bytes [09:15 24/12/2009] [09:15 24/12/2009]
InstantBurn Online Help.lnk --a---- 1777 bytes [09:15 24/12/2009] [09:15 24/12/2009]
InstantBurn.lnk --a---- 1800 bytes [09:15 24/12/2009] [09:15 24/12/2009]
README.lnk --a---- 1809 bytes [09:15 24/12/2009] [09:15 24/12/2009]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Freemake d------ [16:15 13/05/2011]
Freemake Video Converter.lnk --a---- 985 bytes [16:38 31/12/2010] [16:38 31/12/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Games d------ [16:15 13/05/2011]
desktop.ini --ahs-- 798 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Freecell.lnk --a---- 1522 bytes [04:36 24/12/2009] [23:03 05/01/2010]
Hearts.lnk --a---- 1520 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Internet Backgammon.lnk --a---- 913 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Internet Checkers.lnk --a---- 913 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Internet Hearts.lnk --a---- 913 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Internet Reversi.lnk --a---- 913 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Internet Spades.lnk --a---- 913 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Minesweeper.lnk --a---- 1515 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Pinball.lnk --a---- 885 bytes [04:36 24/12/2009] [04:36 24/12/2009]
Solitaire.lnk --a---- 1491 bytes [04:36 24/12/2009] [05:55 22/09/2010]
Spider Solitaire.lnk --a---- 1502 bytes [04:36 24/12/2009] [05:54 22/09/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Google Earth d------ [16:15 13/05/2011]
Google Earth.lnk --a---- 1925 bytes [09:04 17/03/2011] [09:04 17/03/2011]
Start Google Earth in DirectX mode.lnk --a---- 1853 bytes [09:04 17/03/2011] [09:04 17/03/2011]
Start Google Earth in OpenGL mode.lnk --a---- 1857 bytes [09:04 17/03/2011] [09:04 17/03/2011]
Uninstall Google Earth .lnk --a---- 1707 bytes [09:04 17/03/2011] [09:04 17/03/2011]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Google SketchUp 7 d------ [16:15 13/05/2011]
Google SketchUp.lnk --a---- 1774 bytes [19:36 04/07/2010] [20:22 04/07/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\IEsearchhijacker Removal Tool d------ [16:15 13/05/2011]
IEsearchhijacker Removal Tool.lnk --a---- 1896 bytes [04:26 07/06/2010] [04:26 07/06/2010]
Security Stronghold Online.url --a---- 60 bytes [03:31 07/06/2010] [04:26 07/06/2010]
Uninstall IEsearchhijacker Removal Tool.lnk --a---- 747 bytes [04:26 07/06/2010] [04:26 07/06/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\ImgBurn d------ [16:15 13/05/2011]
ImgBurn Read Me.lnk --a---- 1533 bytes [13:26 29/12/2009] [13:26 29/12/2009]
ImgBurn.lnk --a---- 1540 bytes [13:26 29/12/2009] [13:26 29/12/2009]
Uninstall.lnk --a---- 1379 bytes [13:26 29/12/2009] [13:26 29/12/2009]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Lexmark 2500 Series d------ [16:15 13/05/2011]
Lexmark Cartridge Diagnostic Wizard.LNK --a---- 1274 bytes [19:52 26/01/2010] [19:52 26/01/2010]
Lexmark Imaging Studio.LNK --a---- 752 bytes [19:57 26/01/2010] [19:57 26/01/2010]
Lexmark Solution Center.LNK --a---- 1959 bytes [19:59 26/01/2010] [19:59 26/01/2010]
Readme.LNK --a---- 1589 bytes [19:59 26/01/2010] [19:59 26/01/2010]
Uninstall Lexmark 2500 Series.LNK --a---- 927 bytes [19:59 26/01/2010] [19:59 26/01/2010]
User's Guide.LNK --a---- 771 bytes [19:52 26/01/2010] [19:52 26/01/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Lexmark Fax Solutions d------ [16:15 13/05/2011]
Lexmark Fax Solutions.LNK --a---- 1661 bytes [19:58 26/01/2010] [19:58 26/01/2010]
Uninstall Lexmark Fax Solutions.LNK --a---- 963 bytes [19:59 26/01/2010] [19:59 26/01/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Malwarebytes' Anti-Malware d------ [16:15 13/05/2011]
Malwarebytes' Anti-Malware Help.lnk --a---- 796 bytes [20:28 07/06/2010] [15:40 28/01/2011]
Malwarebytes' Anti-Malware.lnk --a---- 796 bytes [20:28 07/06/2010] [15:40 28/01/2011]
Uninstall Malwarebytes' Anti-Malware.lnk --a---- 820 bytes [20:28 07/06/2010] [15:40 28/01/2011]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Mathematics d------ [16:15 13/05/2011]
Microsoft Mathematics.lnk --a---- 780 bytes [07:18 18/01/2011] [07:18 18/01/2011]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Mouse d------ [16:15 13/05/2011]
Connect Mouse for Bluetooth.lnk --a---- 2056 bytes [22:24 17/03/2011] [22:24 17/03/2011]
Microsoft Mouse.lnk --a---- 2451 bytes [22:24 17/03/2011] [22:31 17/03/2011]
Mouse Healthy Computing Guide.lnk --a---- 2090 bytes [22:24 17/03/2011] [22:24 17/03/2011]
Mouse Help.lnk --a---- 2607 bytes [22:24 17/03/2011] [02:52 21/03/2011]
Quality Settings.lnk --a---- 2116 bytes [22:24 17/03/2011] [22:24 17/03/2011]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Office Home and Business (English) d------ [16:15 13/05/2011]
Microsoft Excel 2010.lnk --a---- 1991 bytes [15:29 16/07/2010] [15:30 16/07/2010]
Microsoft OneNote 2010.lnk --a---- 1995 bytes [15:30 16/07/2010] [15:30 16/07/2010]
Microsoft Outlook 2010.lnk --a---- 1995 bytes [15:30 16/07/2010] [15:30 16/07/2010]
Microsoft PowerPoint 2010.lnk --a---- 2001 bytes [15:30 16/07/2010] [15:30 16/07/2010]
Microsoft Word 2010.lnk --a---- 1989 bytes [15:30 16/07/2010] [15:30 16/07/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Office Home and Business (English)\Microsoft Office 2010 Tools d------ [16:15 13/05/2011]
Digital Certificate for VBA Projects.lnk --a---- 2029 bytes [15:29 16/07/2010] [15:30 16/07/2010]
Microsoft Clip Organizer.lnk --a---- 2005 bytes [15:29 16/07/2010] [15:30 16/07/2010]
Microsoft Office 2010 Language Preferences.lnk --a---- 2041 bytes [15:29 16/07/2010] [15:30 16/07/2010]
Microsoft Office 2010 Upload Center.lnk --a---- 2027 bytes [15:30 16/07/2010] [15:30 16/07/2010]
Microsoft Office Picture Manager.lnk --a---- 2021 bytes [15:29 16/07/2010] [15:30 16/07/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Silverlight d------ [16:15 13/05/2011]
Microsoft Silverlight.lnk --a---- 1986 bytes [15:33 12/05/2010] [15:30 21/04/2011]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Silverlight 3 SDK d------ [16:15 13/05/2011]
Welcome.lnk --a---- 1001 bytes [15:18 28/08/2010] [15:18 28/08/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Silverlight 4 SDK d------ [16:15 13/05/2011]
Welcome.lnk --a---- 868 bytes [15:37 28/08/2010] [15:37 28/08/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Silverlight 4 Toolkit April 2010 d------ [16:15 13/05/2011]
Binaries.lnk --a---- 1210 bytes [15:43 28/08/2010] [15:43 28/08/2010]
Documentation.lnk --a---- 1226 bytes [15:43 28/08/2010] [15:43 28/08/2010]
Sample Source Code.lnk --a---- 1217 bytes [15:43 28/08/2010] [15:43 28/08/2010]
Silverlight Toolkit on CodePlex.lnk --a---- 206 bytes [15:43 28/08/2010] [15:43 28/08/2010]
Silverlight.net Discussions.lnk --a---- 206 bytes [15:43 28/08/2010] [15:43 28/08/2010]
Source Code.lnk --a---- 1215 bytes [15:43 28/08/2010] [15:43 28/08/2010]
Toolkit Samples.lnk --a---- 1282 bytes [15:43 28/08/2010] [15:43 28/08/2010]
Welcome.lnk --a---- 1314 bytes [15:43 28/08/2010] [15:43 28/08/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft SQL Server 2008 d------ [16:15 13/05/2011]
Import and Export Data (32-bit).lnk --a---- 894 bytes [15:27 28/08/2010] [15:27 28/08/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Configuration Tools d------ [16:15 13/05/2011]
SQL Server Configuration Manager.lnk --a---- 679 bytes [15:25 28/08/2010] [15:25 28/08/2010]
SQL Server Error and Usage Reporting.lnk --a---- 840 bytes [15:27 28/08/2010] [15:27 28/08/2010]
SQL Server Installation Center.lnk --a---- 1053 bytes [15:23 28/08/2010] [15:23 28/08/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Microsoft Visual Studio 2010 Express d------ [16:15 13/05/2011]
Microsoft Visual Web Developer 2010 Express.lnk --a---- 1016 bytes [15:12 28/08/2010] [15:38 28/08/2010]
Try Visual Studio 2010 Professional.url --a---- 194 bytes [15:12 28/08/2010] [15:12 28/08/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Mozilla Thunderbird d------ [16:15 13/05/2011]
Mozilla Thunderbird (Safe Mode).lnk --a---- 1702 bytes [00:02 24/01/2010] [00:02 24/01/2010]
Mozilla Thunderbird.lnk --a---- 1680 bytes [00:02 24/01/2010] [00:02 24/01/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Night Owl RBS d------ [16:15 13/05/2011]
Night Owl RBS Documentation.lnk --a---- 1594 bytes [00:44 21/03/2011] [00:44 21/03/2011]
Night Owl RBS.lnk --a---- 1604 bytes [00:44 21/03/2011] [00:44 21/03/2011]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Notepad++ d------ [16:15 13/05/2011]
Notepad++.lnk --a---- 760 bytes [23:44 17/03/2011] [23:44 17/03/2011]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\NVIDIA Corporation d------ [16:15 13/05/2011]
NVIDIA PhysX Properties.lnk --a---- 1607 bytes [05:15 24/12/2009] [05:15 24/12/2009]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\QuickTime d------ [16:15 13/05/2011]
About QuickTime.lnk --a---- 1802 bytes [03:23 30/12/2010] [03:23 30/12/2010]
PictureViewer.lnk --a---- 1812 bytes [03:23 30/12/2010] [03:23 30/12/2010]
QuickTime Player.lnk --a---- 1802 bytes [03:23 30/12/2010] [03:23 30/12/2010]
Uninstall QuickTime.lnk --a---- 1639 bytes [03:23 30/12/2010] [03:23 30/12/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Real d------ [16:15 13/05/2011]
RealPlayer Converter.lnk --a---- 946 bytes [20:48 13/07/2010] [20:48 13/07/2010]
RealPlayer SP.lnk --a---- 765 bytes [20:47 13/07/2010] [20:47 13/07/2010]
RealPlayer Trimmer.lnk --a---- 888 bytes [20:48 13/07/2010] [20:48 13/07/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Seagate d------ [16:15 13/05/2011]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Seagate\SeaTools for Windows d------ [16:15 13/05/2011]
SeaTools for Windows.lnk --a---- 1812 bytes [07:36 09/02/2011] [07:36 09/02/2011]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Startup d------ [16:15 13/05/2011]
desktop.ini --ahs-- 84 bytes [23:09 23/12/2009] [04:40 24/12/2009]
Night Owl RBS.lnk --a---- 1594 bytes [14:23 29/10/2010] [14:23 29/10/2010]
Windows Search.lnk --a---- 1787 bytes [14:15 07/06/2010] [17:10 07/03/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Vimeo d------ [16:15 13/05/2011]
Vimeo Uploader.lnk --a---- 702 bytes [19:24 09/11/2010] [19:24 09/11/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\WCF RIA Services V1.0 for Visual Studio 2010 d------ [16:15 13/05/2011]
Help Documentation.lnk --a---- 1165 bytes [15:40 28/08/2010] [15:40 28/08/2010]
Start Here.lnk --a---- 899 bytes [15:40 28/08/2010] [15:40 28/08/2010]
WCF RIA Services V1.0 for Visual Studio 2010 Walkthrough.lnk --a---- 927 bytes [15:40 28/08/2010] [15:40 28/08/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\Windows Live d------ [16:15 13/05/2011]
Windows Live Photo Gallery.lnk --a---- 1947 bytes [21:00 08/08/2010] [21:00 08/08/2010]
Windows Live Writer.lnk --a---- 1914 bytes [21:01 08/08/2010] [21:01 08/08/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\WinRAR d------ [16:15 13/05/2011]
Console RAR manual.lnk --a---- 685 bytes [02:20 22/01/2010] [02:20 22/01/2010]
WinRAR help.lnk --a---- 704 bytes [02:20 22/01/2010] [02:20 22/01/2010]
WinRAR.lnk --a---- 704 bytes [02:20 22/01/2010] [02:20 22/01/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\1\Programs\XviD d------ [16:15 13/05/2011]
Configure Decoder.lnk --a---- 646 bytes [16:24 13/07/2010] [17:02 09/11/2010]
Configure Encoder.lnk --a---- 654 bytes [16:24 13/07/2010] [17:02 09/11/2010]
Uninstall.lnk --a---- 648 bytes [16:24 13/07/2010] [17:02 09/11/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\2 d------ [16:15 13/05/2011]
Celtx.lnk --a---- 1510 bytes [23:12 27/01/2010] [23:12 27/01/2010]
desktop.ini --ahs-- 60 bytes [04:50 21/01/2010] [04:50 21/01/2010]
Google Chrome.lnk --a---- 2310 bytes [04:43 06/12/2010] [01:53 07/05/2011]
ImgBurn.lnk --a---- 1546 bytes [02:07 27/09/2010] [02:07 27/09/2010]
Launch Internet Explorer Browser.lnk --a---- 815 bytes [04:50 21/01/2010] [23:31 18/04/2011]
Mozilla Firefox.lnk --a---- 742 bytes [12:46 08/06/2010] [19:42 26/03/2011]
Mozilla Thunderbird.lnk --a---- 1686 bytes [00:02 24/01/2010] [00:02 24/01/2010]
Show Desktop.scf --a---- 79 bytes [04:50 21/01/2010] [04:50 21/01/2010]
Windows Media Player.lnk --a---- 800 bytes [17:35 21/01/2010] [17:35 21/01/2010]

C:\DOCUME~1\JAMES~1.WER\LOCALS~1\Temp\smtmp\4 d------ [16:15 13/05/2011]
Malwarebytes' Anti-Malware.lnk --a---- 784 bytes [16:41 13/05/2011] [16:41 13/05/2011]
Night Owl RBS.lnk --a---- 1592 bytes [00:44 21/03/2011] [00:44 21/03/2011]

-= EOF =-

Copy all content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\1
and paste it to this folder:
C:\Documents and Settings\All Users\Start Menu


Copy all content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\2
and paste it to this folder:
C:\Documents and Settings\user_name\Application Data\Microsoft\Internet Explorer\Quick Launch


Copy all content of this folder:
C:\Documents and Settings\user_name\Local Settings\Temp\smtmp\4
and paste it to this folder:
C:\Documents and Settings\All Users\Desktop

This post has been edited by Broni: 15 May 2011 - 01:22 PM

Broni,
I have two or three user names on this computer. I don't know what user name to use. This is where I got lost before. How do I upload add a screenshot of what I see and don't understand

You have to use username, you're posting from right now (where all those entries are missing).

I cannot pass step one. I do not have or cannot find C:\Users

I apologize. My bad. Wrong instructions.

I just edited my previous post.