Got my hands on a client's computer running windows 7 pro. This client is famous for having malware issues. I ran the usual ccleaner, superantispyware, malwarebytes, combofix, and dr web cure it in safe mode.
Cleaned lots of stuff out. Mostly pup. Some trojans.
Also have REIMAGE that needs to go away but doesn't seem to want to and still working on that.
Main issue: all folders that were in documents are now in the user's folder, where appdata, contacts, etc are. When I try to open any of the folders, they are empty empty except for picasa.ini. This has also happened to folders on the desktop where some data was stored.
The documents folder is empty except for shortcuts to the folders that are now in the user folder. If I try to copy a folder from the users folder to documents, I am asked if I wanted to replace the file already there. I have said yes and let it replace. Still nothing shows in the documents after I let it copy and replace. Tried UNHIDE.exe with no success.
UNHIDE can't find the folder it is looking for in temp.
I have double checked the settings in folder options and all seems well there. This feels like malware.
PLEASE HELP ME IF YOU CAN! THANKS!