Computer Support Forum

\Documents and Settings\All Users\Application Data\Temp\C31F31E6 Error

Question: \Documents and Settings\All Users\Application Data\Temp\C31F31E6 Error

Hi,Lately, I had encountered the above error popup box.I'm not sure what had gone wrong. I had read through other posts and it seems that OTL is a common tool which is used during the investigation process. Hence, I had downloaded OTL and below is the content of the output files:============================================================================================OTL logfile created on: 4/12/2011 12:37:50 AM - Run 1OTL by OldTimer - Version Folder = C:\Documents and Settings\tracyong\DesktopWindows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstationInternet Explorer (Version = 8.0.6001.18702)Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 502.00 Mb Total Physical Memory | 50.00 Mb Available Physical Memory | 10.00% Memory free1.00 Gb Paging File | 0.00 Gb Available in Paging File | 17.00% Paging File freePaging file location(s): C:\pagefile.sys 756 1512D:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program FilesDrive C: | 35.06 Gb Total Space | 7.12 Gb Free Space | 20.31% Space Free | Partition Type: FAT32Drive D: | 35.55 Gb Total Space | 14.35 Gb Free Space | 40.38% Space Free | Partition Type: FAT32 Computer Name: TRACY | User Name: tracyong | Logged in as Administrator.Boot Mode: Normal | Scan Mode: All usersCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011/04/12 00:36:54 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\tracyong\Desktop\OTL.exePRC - [2011/03/15 23:35:52 | 004,109,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgui.exePRC - [2011/03/15 23:35:48 | 002,071,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exePRC - [2010/12/08 01:01:36 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exePRC - [2010/12/08 01:01:36 | 000,515,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exePRC - [2010/12/08 01:01:32 | 000,725,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exePRC - [2010/12/08 01:00:54 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgemc.exePRC - [2010/12/08 01:00:52 | 000,621,920 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exePRC - [2010/12/08 01:00:44 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exePRC - [2010/12/08 01:00:36 | 000,755,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgscanx.exePRC - [2010/07/31 23:01:14 | 000,500,224 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Documents and Settings\tracyong\Local Settings\Temp\RtkBtMnt.exePRC - [2010/02/24 11:25:30 | 000,214,408 | ---- | M] (PPStream Inc) -- C:\Program Files\PPStream\PPSAP.exePRC - [2010/01/12 11:41:00 | 003,168,216 | ---- | M] (PC Tools) -- C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exePRC - [2009/11/09 11:20:14 | 000,818,432 | ---- | M] (PC Tools) -- C:\Program Files\PC Tools Firewall Plus\FWService.exePRC - [2008/04/14 08:12:36 | 000,538,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spider.exePRC - [2008/04/14 08:12:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exePRC - [2008/02/02 00:02:32 | 001,251,720 | ---- | M] () -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exePRC - [2006/01/24 18:00:08 | 000,397,312 | ---- | M] (acer Inc.) -- C:\Acer\Empowering Technology\eRecovery\Monitor.exePRC - [2006/01/17 18:28:54 | 000,344,064 | ---- | M] (Acer Incorporated) -- C:\Acer\Empowering Technology\ePower\ePower_DMC.exePRC - [2006/01/05 21:35:36 | 000,618,557 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exePRC - [2005/12/27 15:50:28 | 000,069,632 | ---- | M] (HiTRUST) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exePRC - [2005/12/15 20:42:32 | 004,132,864 | ---- | M] () -- C:\Acer\GraviSense\GraviSense.exePRC - [2005/12/13 17:49:20 | 000,397,312 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\QtZgAcer.EXEPRC - [2005/11/30 20:45:10 | 000,081,920 | ---- | M] (Logitech) -- c:\Program Files\Common Files\Logitech\LVMVFM\LVPrcSrv.exePRC - [2005/11/30 20:39:58 | 000,225,280 | ---- | M] (Logitech) -- C:\WINDOWS\system32\LVCOMSX.EXEPRC - [2005/11/29 14:45:06 | 000,438,272 | ---- | M] (Acer) -- C:\Program Files\Acer\OrbiCam\CameraAssistant.exePRC - [2005/10/24 16:45:32 | 002,462,208 | ---- | M] (Avocent Inc.) -- C:\Acer\Empowering Technology\admtray.exePRC - [2005/10/24 16:40:52 | 001,314,816 | ---- | M] (Avocent Inc.) -- C:\Acer\Empowering Technology\admServ.exePRC - [2005/01/08 07:17:16 | 000,102,491 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exePRC - [2004/11/01 17:22:22 | 000,262,144 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\ElkCtrl.exePRC - [2003/12/05 01:00:34 | 000,634,880 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\Tablet.exePRC - [2003/12/05 00:48:40 | 000,077,824 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\Wtablet\TabUserW.exePRC - [2001/10/25 02:02:00 | 000,090,112 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exePRC - [2001/10/11 17:35:02 | 000,082,026 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe ========== Modules (SafeList) ========== MOD - [2011/04/12 00:36:54 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\tracyong\Desktop\OTL.exeMOD - [2008/04/14 08:12:52 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dllMOD - [2008/04/14 08:11:56 | 001,028,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mfc42.dllMOD - [2008/04/14 08:11:56 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ksuser.dllMOD - [2005/12/27 16:57:30 | 000,053,248 | ---- | M] (HiTRUST) -- C:\WINDOWS\system32\sysenv.dllMOD - [2005/12/27 15:50:26 | 000,010,752 | ---- | M] () -- C:\WINDOWS\system32\MSNChatHook.dllMOD - [2005/11/30 20:45:10 | 000,081,920 | ---- | M] (Logitech) -- C:\Program Files\Common Files\Logitech\LVMVFM\LVPrcInj.dllMOD - [2005/10/11 13:18:54 | 000,028,672 | ---- | M] () -- C:\Acer\Empowering Technology\ePower\SysHook.dllMOD - [2005/01/08 07:17:08 | 000,069,723 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\system32\SynTPFcs.dllMOD - [2003/12/05 00:46:48 | 000,044,544 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\TabHook.dllMOD - [2003/03/18 21:12:12 | 001,047,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MFC71u.dllMOD - [2003/03/18 20:44:38 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MFC71ENU.DLL ========== Win32 Services (SafeList) ========== SRV - File not found [On_Demand | Stopped] -- -- (LiveUpdate)SRV - File not found [Auto | Stopped] -- -- (Automatic LiveUpdate Scheduler)SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)SRV - [2010/12/08 01:00:54 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgemc.exe -- (avg9emc)SRV - [2010/12/08 01:00:44 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)SRV - [2009/11/09 11:20:14 | 000,818,432 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\PC Tools Firewall Plus\FWService.exe -- (PCToolsFirewallPlus)SRV - [2008/02/02 00:02:32 | 001,251,720 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)SRV - [2005/11/30 20:45:10 | 000,081,920 | ---- | M] (Logitech) [Auto | Running] -- c:\Program Files\Common Files\Logitech\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)SRV - [2005/10/24 16:40:52 | 001,314,816 | ---- | M] (Avocent Inc.) [Auto | Running] -- C:\Acer\Empowering Technology\admServ.exe -- (AWService)SRV - [2003/12/05 01:00:34 | 000,634,880 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\WINDOWS\system32\Tablet.exe -- (TabletService)SRV - [2001/10/25 02:02:00 | 000,090,112 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe -- (EPSONStatusAgent2) ========== Driver Services (SafeList) ========== DRV - [2010/12/08 01:02:30 | 000,243,024 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (AvgTdiX)DRV - [2010/12/08 01:02:20 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (AvgLdx86)DRV - [2010/12/08 01:02:20 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (AvgMfx86)DRV - [2010/01/13 08:59:28 | 000,115,216 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pctplfw.sys -- (pctplfw)DRV - [2010/01/12 09:34:14 | 000,070,664 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys -- (PCTFW-PacketFilter)DRV - [2010/01/07 12:40:26 | 000,233,136 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\pctgntdi.sys -- (pctgntdi)DRV - [2010/01/07 11:35:06 | 000,058,816 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pctNdis.sys -- (pctNDIS)DRV - [2009/11/23 13:54:20 | 000,088,040 | ---- | M] (PC Tools) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PCTAppEvent.sys -- (PCTAppEvent)DRV - [2009/02/10 06:59:20 | 000,251,768 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\SymcData\ids-diskless\20090730.002\SymIDSCo.sys -- (SYMIDSCO)DRV - [2006/11/15 17:00:00 | 000,387,432 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)DRV - [2006/08/22 00:42:56 | 000,010,344 | ---- | M] (Symantec Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\symlcbrd.sys -- (symlcbrd)DRV - [2006/01/05 21:11:24 | 000,328,061 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)DRV - [2006/01/05 21:09:38 | 000,023,271 | ---- | M] (Broadcom Corporation.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL)DRV - [2006/01/05 21:08:20 | 000,850,282 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)DRV - [2006/01/05 21:05:48 | 000,030,459 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)DRV - [2006/01/05 21:05:10 | 000,065,304 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)DRV - [2006/01/05 21:02:08 | 000,148,900 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)DRV - [2005/12/09 16:48:40 | 004,123,136 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)DRV - [2005/12/05 00:55:30 | 001,428,096 | ---- | M] (Intel? Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w39n51.sys -- (w39n51) Intel®DRV - [2005/11/30 20:45:10 | 002,400,128 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVMVdrv.sys -- (lvmvdrv)DRV - [2005/11/30 20:45:10 | 000,016,768 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVPrcMon.sys -- (LVPrcMon)DRV - [2005/11/30 05:28:58 | 001,088,896 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lv321av.sys -- (lv321av) Logitech USB PC Camera (VC0321)DRV - [2005/11/30 05:25:06 | 000,039,424 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta)DRV - [2005/11/28 12:09:26 | 000,013,568 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)DRV - [2005/11/08 15:12:18 | 000,997,376 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)DRV - [2005/11/08 15:11:34 | 000,202,240 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)DRV - [2005/11/08 15:11:30 | 000,723,712 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)DRV - [2005/10/15 18:20:44 | 000,012,106 | ---- | M] (OSA Technologies) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\OsaFsLoc.sys -- (OsaFsLoc)DRV - [2005/09/13 15:34:40 | 000,004,392 | ---- | M] (OSA Technologies) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NdisFilt.sys -- (NdisFilt)DRV - [2005/08/03 05:10:14 | 000,032,512 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)DRV - [2005/06/30 16:58:24 | 000,007,296 | ---- | M] (OSA Technologies, An Avocent Company) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\osaio.sys -- (osaio)DRV - [2005/06/23 09:16:00 | 000,162,176 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21)DRV - [2005/05/02 12:13:42 | 000,009,600 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NETMNT.sys -- (NETMNT)DRV - [2005/04/22 16:57:06 | 000,078,208 | ---- | M] (Acer Value Labs, USA) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epm-shd.sys -- (EpmShd)DRV - [2005/04/22 16:57:06 | 000,004,096 | ---- | M] (Acer Value Labs, USA) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epm-psd.sys -- (EpmPsd)DRV - [2005/04/05 16:38:00 | 000,132,352 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)DRV - [2005/01/14 15:57:16 | 000,004,010 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\osanbm.sys -- (osanbm)DRV - [2005/01/13 14:46:16 | 000,069,632 | ---- | M] () [Kernel | Auto | Running] -- C:\Acer\Empowering Technology\eRecovery\int15.sys -- (int15.sys)DRV - [2001/04/09 20:45:00 | 000,008,138 | ---- | M] (Wacom Technology Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\Drivers\penclass.sys -- (PenClass) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = ========== FireFox ========== FF - false [2007/09/26 23:18:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\tracyong\Application Data\Mozilla\Firefox\Profiles\t7cm1ghk.default\extensions[2007/09/26 23:17:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions[2007/09/26 23:17:58 | 000,000,000 | ---D | M] (Talkback) -- C:\Program Files\Mozilla Firefox\extensions\[email protected][2009/02/19 23:25:16 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF[2009/10/10 00:12:30 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION[2008/10/15 14:43:00 | 000,067,696 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\jar50.dll[2008/10/15 14:43:00 | 000,054,376 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\jsd3250.dll[2008/10/15 14:43:00 | 000,034,952 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\myspell.dll[2008/10/15 14:43:00 | 000,046,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\spellchk.dll[2008/10/15 14:43:00 | 000,172,144 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\xpinstal.dll[2007/06/11 13:34:00 | 002,115,816 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\NPSWF32.dll O1 HOSTS File: ([2004/08/04 05:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hostsO1 - Hosts: localhostO2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx ()O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.O2 - BHO: (EWPBrowseObject Class) - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll ()O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - File not foundO3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - File not foundO3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll (HiTRUST)O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.O3 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.O3 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - File not foundO4 - HKLM..\Run: [00PCTFW] C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools)O4 - HKLM..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe (Acer Value Labs, Taiwan)O4 - HKLM..\Run: [ADMTray.exe] C:\Acer\Empowering Technology\admtray.exe (Avocent Inc.)O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)O4 - HKLM..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE (CANON INC.)O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST)O4 - HKLM..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe (Acer Incorporated)O4 - HKLM..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe (acer Inc.)O4 - HKLM..\Run: [GraviSense] C:\Acer\GraviSense\GraviSense.exe ()O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)O4 - HKLM..\Run: [LaunchApp] C:\WINDOWS\Alaunch.exe (Acer Inc.)O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE (Dritek System Inc.)O4 - HKLM..\Run: [LogitechCameraAssistant] C:\Program Files\Acer\OrbiCam\CameraAssistant.exe (Acer)O4 - HKLM..\Run: [LogitechCameraService(E)] C:\WINDOWS\System32\ElkCtrl.exe (Logitech Inc.)O4 - HKLM..\Run: [LogitechVideo[inspector]] C:\Program Files\Acer\OrbiCam\InstallHelper.exe (Acer)O4 - HKLM..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE (Logitech)O4 - HKLM..\Run: [MFARestart] C:\Documents and Settings\All Users\Application Data\MFAData\pack\avgrunasx.exe ()O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)O4 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006..\Run: [CTSyncU.exe] C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe ()O4 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006..\Run: [msnmsgr] File not foundO4 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006..\Run: [PPS Accelerator] C:\Program Files\PPStream\PPSAP.exe (PPStream Inc)O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe (Adobe Systems Inc.)O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\TabUserW.exe.lnk = C:\WINDOWS\system32\Wtablet\TabUserW.exe (Wacom Technology, Corp.)O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)O4 - Startup: C:\Documents and Settings\tracyong\Start Menu\Programs\Startup\PPS.lnk = C:\Program Files\PPStream\PPStream.exe (PPStream Inc.)O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - File not foundO9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - File not foundO12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (Intertrust Technologies, Inc.)O15 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\..Trusted Domains: ([www] http in Trusted sites)O15 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\..Trusted Domains: ([seaem] https in Trusted sites)O15 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\..Trusted Domains: ([www] http in Trusted sites)O15 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\..Trusted Domains: ([]http in Trusted sites)O15 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\..Trusted Domains: ([]http in Trusted sites)O15 - HKU\S-1-5-21-1996740908-3205360449-1714978046-1006\..Trusted Domains: ([]http in Trusted sites)O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool)O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control)O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} (Shockwave ActiveX Control)O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool)O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.6.0_22)O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} (Reg Error: Key error.)O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class)O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Reg Error: Key error.)O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} (Reg Error: Key error.)O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} (Reg Error: Key error.)O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} (Reg Error: Key error.)O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} (Reg Error: Key error.)O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Reg Error: Key error.)O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} (Reg Error: Key error.)O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} (Reg Error: Key error.)O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} (Java Plug-in 1.6.0_22)O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.6.0_22)O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (Reg Error: Key error.)O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - File not foundO18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - File not foundO18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - File not foundO20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)O22 - SharedTaskScheduler: incestuously - {03413bf7-e34c-445b-bfc0-a2b127255871} - Reg Error: Key error. File not foundO24 - Desktop WallPaper: C:\Documents and Settings\tracyong\Local Settings\Application Data\Microsoft\Wallpaper1.bmpO24 - Desktop BackupWallPaper: C:\Documents and Settings\tracyong\Local Settings\Application Data\Microsoft\Wallpaper1.bmpO32 - HKLM CDRom: AutoRun - 1O32 - AutoRun File - [2008/06/21 16:06:12 | 000,000,200 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]O33 - MountPoints2\{2fc9ef5e-eba1-11de-bd89-0016363dd8d8}\Shell - "" = AutoRunO33 - MountPoints2\{2fc9ef5e-eba1-11de-bd89-0016363dd8d8}\Shell\AutoRun - "" = Auto&PlayO33 - MountPoints2\{2fc9ef5e-eba1-11de-bd89-0016363dd8d8}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -aO33 - MountPoints2\{674da77c-3f63-11dd-bbb3-0016363dd8d8}\Shell\Auto\command - "" = infrom.exeO33 - MountPoints2\{674da77c-3f63-11dd-bbb3-0016363dd8d8}\Shell\AutoRun - "" = Auto&PlayO33 - MountPoints2\{674da77c-3f63-11dd-bbb3-0016363dd8d8}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL infrom.exeO33 - MountPoints2\{8ec4594a-705d-11df-be27-0016363dd8d8}\Shell - "" = AutoRunO33 - MountPoints2\{8ec4594a-705d-11df-be27-0016363dd8d8}\Shell\AutoRun - "" = Auto&PlayO33 - MountPoints2\{8ec4594a-705d-11df-be27-0016363dd8d8}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrnO34 - HKLM BootExecute: (autocheck autochk *) - File not foundO35 - HKLM\..comfile [open] -- "%1" %*O35 - HKLM\..exefile [open] -- "%1" %*O37 - HKLM\ [@ = comfile] -- "%1" %*O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011/04/12 00:36:52 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\tracyong\Desktop\OTL.exe[2011/03/15 23:37:34 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\Common Files[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ][3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ][3 C:\Documents and Settings\All Users\Application Data\*.tmp files -> C:\Documents and Settings\All Users\Application Data\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011/04/12 00:40:02 | 000,000,398 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{9D78D95E-606F-4C9E-AAA6-FC1988234747}.job[2011/04/12 00:36:54 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\tracyong\Desktop\OTL.exe[2011/04/12 00:00:02 | 000,000,292 | -H-- | M] () -- C:\WINDOWS\tasks\{7B02EF0B-A410-4938-8480-9BA26420A627}.job[2011/04/12 00:00:02 | 000,000,290 | -H-- | M] () -- C:\WINDOWS\tasks\{BB65B0FB-5712-401b-B616-E69AC55E2757}.job[2011/04/11 23:13:04 | 000,002,335 | ---- | M] () -- C:\WINDOWS\psnetwork.ini[2011/04/11 23:12:58 | 000,001,739 | ---- | M] () -- C:\WINDOWS\powerplayer.ini[2011/04/11 23:12:58 | 000,001,379 | ---- | M] () -- C:\WINDOWS\Powerlist.ini[2011/04/11 23:05:34 | 000,000,060 | ---- | M] () -- C:\WINDOWS\MediaList.ini[2011/04/11 23:05:32 | 000,000,095 | ---- | M] () -- C:\WINDOWS\PCDNSetting.ini[2011/04/11 23:04:22 | 000,000,408 | ---- | M] () -- C:\WINDOWS\System32\eRLog.ini[2011/04/11 23:03:54 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl[2011/04/11 23:03:34 | 000,000,336 | ---- | M] () -- C:\WINDOWS\System32\Tablet.dat[2011/04/11 23:03:24 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat[2011/04/10 16:19:08 | 000,000,027 | ---- | M] () -- C:\WINDOWS\OOIIEProxy.ini[2011/04/09 23:07:54 | 000,090,624 | ---- | M] () -- C:\Documents and Settings\tracyong\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini[2011/03/24 00:03:06 | 004,857,738 | ---- | M] () -- C:\Documents and Settings\tracyong\My Documents\Ni An Dong - San Chang de Yong Bao.mp3[2011/03/23 23:39:22 | 000,042,670 | ---- | M] () -- C:\Documents and Settings\tracyong\My Documents\Standard Chartered - SMS codes.pdf[2011/03/23 23:38:52 | 002,052,486 | ---- | M] () -- C:\Documents and Settings\tracyong\My Documents\Ni An Dong - San Chang de Yong Bao.wma[2011/03/20 15:04:56 | 005,022,354 | ---- | M] () -- C:\Documents and Settings\tracyong\My Documents\CP012_Claims Recovery_V1.2_Reissue_G4cD2_20110310 (2nd review 20110318)[2011/03/20 15:03:22 | 003,326,594 | ---- | M] () -- C:\Documents and Settings\tracyong\My Documents\CP013_CP015_Review Process_V1 2_G4cD2_20110223 (2nd Review 20110306)[2011/03/20 01:17:38 | 003,014,282 | ---- | M] () -- C:\Documents and Settings\tracyong\My Documents\[2011/03/20 01:05:00 | 000,009,986 | ---- | M] () -- C:\Documents and Settings\tracyong\My Documents\Video0001.avi[2011/03/20 00:58:48 | 003,058,127 | ---- | M] () -- C:\Documents and Settings\tracyong\My Documents\[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ][3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ][3 C:\Documents and Settings\All Users\Application Data\*.tmp files -> C:\Documents and Settings\All Users\Application Data\*.tmp -> ] ========== Files Created - No Company Name ========== [2011/03/23 23:39:20 | 000,042,670 | ---- | C] () -- C:\Documents and Settings\tracyong\My Documents\Standard Chartered - SMS codes.pdf[2011/03/23 23:38:50 | 002,052,486 | ---- | C] () -- C:\Documents and Settings\tracyong\My Documents\Ni An Dong - San Chang de Yong Bao.wma[2011/03/20 15:04:55 | 005,022,354 | ---- | C] () -- C:\Documents and Settings\tracyong\My Documents\CP012_Claims Recovery_V1.2_Reissue_G4cD2_20110310 (2nd review 20110318)[2011/03/20 15:03:20 | 003,326,594 | ---- | C] () -- C:\Documents and Settings\tracyong\My Documents\CP013_CP015_Review Process_V1 2_G4cD2_20110223 (2nd Review 20110306)[2011/03/20 01:17:36 | 003,014,282 | ---- | C] () -- C:\Documents and Settings\tracyong\My Documents\[2011/03/20 01:04:55 | 000,009,986 | ---- | C] () -- C:\Documents and Settings\tracyong\My Documents\Video0001.avi[2011/03/20 00:58:46 | 003,058,127 | ---- | C] () -- C:\Documents and Settings\tracyong\My Documents\[2011/01/08 15:49:37 | 000,000,027 | ---- | C] () -- C:\WINDOWS\OOIIEProxy.ini[2010/12/13 23:07:40 | 000,000,000 | ---- | C] () -- C:\WINDOWS\msgtn.ini[2010/12/07 23:38:20 | 000,000,396 | ---- | C] () -- C:\WINDOWS\NJCOM.INI[2010/12/07 23:19:32 | 000,000,060 | ---- | C] () -- C:\WINDOWS\MediaList.ini[2010/12/07 23:17:10 | 000,001,379 | ---- | C] () -- C:\WINDOWS\Powerlist.ini[2010/12/07 23:17:07 | 000,001,739 | ---- | C] () -- C:\WINDOWS\powerplayer.ini[2010/12/07 23:17:03 | 000,002,335 | ---- | C] () -- C:\WINDOWS\psnetwork.ini[2010/01/02 01:01:07 | 000,000,027 | ---- | C] () -- C:\WINDOWS\ppssg.ini[2010/01/02 01:00:37 | 000,000,095 | ---- | C] () -- C:\WINDOWS\PCDNSetting.ini[2009/08/25 23:28:40 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\azroles.dll[2007/09/26 23:28:37 | 000,001,156 | ---- | C] () -- C:\WINDOWS\mozver.dat[2007/09/26 23:18:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat[2007/06/10 22:41:43 | 000,000,188 | ---- | C] () -- C:\WINDOWS\System32\eDataSecurity.dat[2007/04/28 23:48:47 | 000,000,087 | ---- | C] () -- C:\WINDOWS\CSAia.ini[2007/03/05 13:34:28 | 000,676,224 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.DLL[2007/01/25 00:00:30 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI[2006/12/02 00:21:13 | 000,103,535 | ---- | C] () -- C:\WINDOWS\hpoins04.dat[2006/12/02 00:21:13 | 000,017,176 | ---- | C] () -- C:\WINDOWS\hpomdl04.dat[2006/11/17 17:22:27 | 000,000,785 | ---- | C] () -- C:\WINDOWS\NTIWVEDT.INI[2006/09/29 13:36:28 | 000,002,114 | ---- | C] () -- C:\Documents and Settings\tracyong\Application Data\wklnhst.dat[2006/09/17 23:54:50 | 000,000,073 | ---- | C] () -- C:\WINDOWS\System32\url.dat[2006/09/01 21:00:31 | 000,090,624 | ---- | C] () -- C:\Documents and Settings\tracyong\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini[2006/08/29 13:35:48 | 000,000,182 | ---- | C] () -- C:\WINDOWS\System32\EBPPORT.DAT[2006/08/23 12:52:38 | 000,000,598 | ---- | C] () -- C:\WINDOWS\Id007.ini[2006/08/23 12:51:47 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\adistres.dll[2006/08/23 10:41:28 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\TaskKeyHook.dll[2006/08/23 00:35:15 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\SisiFP.dll[2006/08/23 00:35:15 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\sislog.dll[2006/08/23 00:35:15 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\PDFUtil.dll[2006/08/23 00:27:50 | 000,000,336 | ---- | C] () -- C:\WINDOWS\System32\Tablet.dat[2006/08/21 08:19:06 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll[2006/08/21 08:17:28 | 000,000,719 | R--- | C] () -- C:\WINDOWS\System32\InstExec.ini[2006/08/21 08:17:25 | 000,013,126 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini[2006/08/21 08:11:27 | 000,067,072 | ---- | C] () -- C:\WINDOWS\System32\HTCA_SelfExtract.bin[2006/08/21 08:11:22 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\APISlice.dll[2006/08/21 08:11:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\SC_res.dll[2006/08/21 08:11:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\EN_res.dll[2006/08/21 08:11:22 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\TC_res.dll[2006/08/21 08:11:22 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\MSNChatHook.dll[2006/08/20 16:26:19 | 000,000,408 | ---- | C] () -- C:\WINDOWS\System32\eRLog.ini[2006/04/27 00:33:50 | 000,589,824 | ---- | C] () -- C:\WINDOWS\AntiV.EXE[2006/04/27 00:33:50 | 000,002,790 | ---- | C] () -- C:\WINDOWS\AntiV.INI[2006/01/17 14:07:54 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat[2006/01/17 14:07:44 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini[2006/01/17 14:01:30 | 000,443,034 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat[2006/01/17 14:01:30 | 000,072,134 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat[2006/01/17 13:04:12 | 000,239,144 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT[2006/01/17 12:25:50 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIBUN4.dll[2006/01/17 12:25:12 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll[2006/01/17 12:25:12 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMP3.dll[2006/01/17 12:25:12 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIFCD3.dll[2006/01/17 12:25:12 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK7.dll[2006/01/17 11:56:10 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI[2006/01/17 11:55:06 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat[2006/01/05 21:21:18 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll[2005/12/28 11:28:02 | 000,036,404 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini[2005/12/14 20:59:52 | 000,000,038 | ---- | C] () -- C:\WINDOWS\Acer.ini[2005/11/30 20:45:10 | 002,400,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVMVdrv.sys[2005/11/30 20:45:10 | 000,016,768 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPrcMon.sys[2005/10/31 18:17:38 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll[2005/07/15 16:48:46 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe[2005/05/02 12:13:42 | 000,009,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\NETMNT.sys[2005/03/28 15:45:26 | 000,000,091 | ---- | C] () -- C:\WINDOWS\ALaunch.ini[2004/12/17 16:14:44 | 000,013,952 | ---- | C] () -- C:\WINDOWS\System32\drivers\UBHelper.sys[2004/08/04 05:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat[2004/08/04 05:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat[2004/08/04 05:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat[2004/08/04 05:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin[2004/08/04 05:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat[2004/08/04 05:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat[2004/08/04 05:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin[2004/08/04 05:00:00 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini[2004/08/04 05:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat[2004/01/13 18:46:00 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\tifmicon.dll[2003/12/29 20:45:08 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ServiceControl.dll[2002/05/24 16:34:46 | 000,032,768 | ---- | C] () -- C:\WINDOWS\AMove.exe[2001/12/26 15:12:30 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll[2001/11/14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll[2001/09/03 22:46:38 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\Hmpg12.dll[2001/08/26 17:04:08 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin[2001/08/26 17:02:42 | 000,004,524 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat[2001/07/30 15:33:56 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll[2001/07/23 21:04:36 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll[1999/05/07 16:12:06 | 000,015,744 | ---- | C] () -- C:\WINDOWS\System32\wintab.dll[1999/01/27 13:39:06 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll[1997/06/13 07:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll ========== Files - Unicode (All) ==========[2010/11/01 23:18:42 | 004,170,981 | ---- | M] ()(C:\Documents and Settings\tracyong\My Documents\?? - ????????????.MP3) -- C:\Documents and Settings\tracyong\My Documents\欢子 - 得到你的人却得不到你的心.MP3[2010/11/01 23:18:40 | 004,170,981 | ---- | C] ()(C:\Documents and Settings\tracyong\My Documents\?? - ????????????.MP3) -- C:\Documents and Settings\tracyong\My Documents\欢子 - 得到你的人却得不到你的心.MP3[2009/06/05 23:31:02 | 000,001,038 | ---- | M] ()(C:\Documents and Settings\tracyong\My Documents\??? - ????.txt) -- C:\Documents and Settings\tracyong\My Documents\刘力扬 - 寂寞光年.txt[2009/06/05 23:31:01 | 000,001,038 | ---- | C] ()(C:\Documents and Settings\tracyong\My Documents\??? - ????.txt) -- C:\Documents and Settings\tracyong\My Documents\刘力扬 - 寂寞光年.txt[2008/10/06 23:38:51 | 011,059,326 | ---- | C] ()(C:\Documents and Settings\tracyong\My Documents\01. ?????.mp3) -- C:\Documents and Settings\tracyong\My Documents\01. 今天情人節.mp3[2008/10/06 23:38:51 | 009,839,930 | ---- | C] ()(C:\Documents and Settings\tracyong\My Documents\02. ??????.mp3) -- C:\Documents and Settings\tracyong\My Documents\02. 如果能在一起.mp3[2008/09/12 03:19:48 | 009,839,930 | ---- | M] ()(C:\Documents and Settings\tracyong\My Documents\02. ??????.mp3) -- C:\Documents and Settings\tracyong\My Documents\02. 如果能在一起.mp3[2008/09/12 03:19:28 | 011,059,326 | ---- | M] ()(C:\Documents and Settings\tracyong\My Documents\01. ?????.mp3) -- C:\Documents and Settings\tracyong\My Documents\01. 今天情人節.mp3[2008/05/22 00:00:18 | 000,000,846 | ---- | M] ()(C:\Documents and Settings\tracyong\My Documents\?????.txt) -- C:\Documents and Settings\tracyong\My Documents\虽然我愿意.txt[2008/05/22 00:00:17 | 000,000,846 | ---- | C] ()(C:\Documents and Settings\tracyong\My Documents\?????.txt) -- C:\Documents and Settings\tracyong\My Documents\虽然我愿意.txt[2008/05/21 23:28:56 | 001,808,784 | ---- | M] ()(C:\Documents and Settings\tracyong\My Documents\?????.wma) -- C:\Documents and Settings\tracyong\My Documents\虽然我愿意.wma[2008/05/21 23:28:42 | 001,808,784 | ---- | C] ()(C:\Documents and Settings\tracyong\My Documents\?????.wma) -- C:\Documents and Settings\tracyong\My Documents\虽然我愿意.wma< End of report >================================================================================================================OTL Extras logfile created on: 4/12/2011 12:37:50 AM - Run 1OTL by OldTimer - Version Folder = C:\Documents and Settings\tracyong\DesktopWindows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstationInternet Explorer (Version = 8.0.6001.18702)Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 502.00 Mb Total Physical Memory | 50.00 Mb Available Physical Memory | 10.00% Memory free1.00 Gb Paging File | 0.00 Gb Available in Paging File | 17.00% Paging File freePaging file location(s): C:\pagefile.sys 756 1512D:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program FilesDrive C: | 35.06 Gb Total Space | 7.12 Gb Free Space | 20.31% Space Free | Partition Type: FAT32Drive D: | 35.55 Gb Total Space | 14.35 Gb Free Space | 40.38% Space Free | Partition Type: FAT32 Computer Name: TRACY | User Name: tracyong | Logged in as Administrator.Boot Mode: Normal | Scan Mode: All usersCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]batfile [open] -- "%1" %*cmdfile [open] -- "%1" %*comfile [open] -- "%1" %*cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*exefile [open] -- "%1" %*piffile [open] -- "%1" %*regfile [merge] -- Reg Error: Key error.scrfile [config] -- "%1"scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %lscrfile [open] -- "%1" /Stxtfile [edit] -- Reg Error: Key error.Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]"FirstRunDisabled" = 0"FirewallDisableNotify" = 0"UpdatesDisableNotify" = 0"AntiVirusOverride" = 0"FirewallOverride" = 0"AntiVirusDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]"DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]"Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]"Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]"EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]"EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]"C:\Program Files\Windows Live\Messenger\wlcsdk.exe" = C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:?Torrent -- (BitTorrent, Inc.)"C:\Program Files\Windows Live\Messenger\wlcsdk.exe" = C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"C:\Program Files\PPStream\PPStream.exe" = C:\Program Files\PPStream\PPStream.exe:*:Enabled:PPS??????? -- (PPStream Inc.)"C:\Program Files\PPStream\PPSAP.exe" = C:\Program Files\PPStream\PPSAP.exe:*:Enabled:PPS ????????? -- (PPStream Inc)"C:\Program Files\PPSGame\PPSGame.exe" = C:\Program Files\PPSGame\PPSGame.exe:*:Enabled:???????????? -- (传聚网络科技有限公司)"C:\Program Files\AVG\AVG9\avgemc.exe" = C:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe -- (AVG Technologies CZ, s.r.o.)"C:\Program Files\AVG\AVG9\avgupd.exe" = C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.)"C:\Program Files\AVG\AVG9\avgnsx.exe" = C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.)"C:\Program Files\PPStream\update\ppstreamsetup-update101231.exe" = C:\Program Files\PPStream\update\ppstreamsetup-update101231.exe:*:Enabled:PPStream Installer -- (PPStream Inc.) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}" = VC 9.0 Runtime"{08C5815C-2C6E-44f8-8748-0E61BC9AFB68}" = Symantec KB-DocID:2003093015493306"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP1700" = Canon iP1700"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up"{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker"{15B70821-7893-4607-805A-BB80F3EA8279}" = Acer Empowering Technology framework"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148"{1F63ED0B-EDD2-4037-B6AB-1358C624AF48}" = Scan"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java™ 6 Update 22"{2C14545B-8EE2-4994-B0C0-07A666DB37B9}" = muvee photoMemories stylePack"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6"{3248F0A8-6813-11D6-A77B-00B0D0150090}" = J2SE Runtime Environment 5.0 Update 9"{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP"{385979FE-DC4F-4140-8EAD-A59625000D72}" = NTI Backup NOW! 4"{394BE3D9-7F57-4638-A8D1-1D88671913B7}" = Microsoft AppLocale"{3F4EC965-28EF-45C3-B063-04B25D4E9679}" = WIDCOMM Bluetooth Software"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack"{4DA416AE-6D1C-40D6-BCA3-A65A59DD60FC}" = Acer eDataSecurity Management"{58E5844B-7CE2-413D-83D1-99294BF6C74F}" = Acer ePower Management"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD"{6CA897D0-67F5-4F75-8261-DC8BFCA6DA42}" = Acer eLock Management"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works"{76AC1AEB-1167-4ABC-8861-4E58392A5B7F}" = Acer OrbiCam Software"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}" = Cake Mania"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr"{90280409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional with FrontPage"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting"{9862E0CB-4727-4FFC-963A-E22A9E9EC10C}" = Creative ZEN V Series (R2)"{9CC89556-3578-48DD-8408-04E66EBEF401}" = mXML"{A1062847-0846-427A-92A1-BB8251A91E91}" = HP PSC & OfficeJet 4.2"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI"{A23061AF-5361-433C-B7F0-CE5F79A22C49}" = AVG 2011"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2"{A4EA3AB4-E78C-4286-96DF-26035507CE55}" = AiO_Scan"{AC76BA86-7AD7-1033-7B44-A70000000000}" = Adobe Reader 7.0"{B161ECA6-72D1-4A52-AF38-595294D02783}" = muvee Vacation stylePack"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5"{C06554A1-2C1E-4D20-B613-EE62C79927CC}" = Acer eNet Management"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2"{C7EED2B7-078F-4D94-84FF-72B13FF22264}" = muvee autoProducer 6.0"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1"{D458BBDC-0363-42E0-8FF9-4736E3CB3CA2}" = Acer Screensaver"{D643A9C5-EAAA-4681-8EDE-6B3462F3ACE3}" = Tablet"{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb" = Microsoft Windows Application Compatibility Database"{DEE08946-40F0-4890-853E-60A6C3306041}" = Acer ePerformance Management"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update"{E38BC648-883B-4EE5-966C-94C4B7AB3E0B}" = Acer eSettings Management"{E431C518-2EE2-471E-9234-BE995C36D513}" = Acer eDataSecurity Management 1.00.26"{E81667C6-2856-46D6-ABEA-6A2F42166779}" = mCore"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe"{FEBCBBF8-25D5-48D1-9D2E-D162C6B1BBF7}" = Acer GraviSense"{FF6F491D-BC82-4DCC-A72F-1824957C6466}" = TIxx21"AcerOrbiCamDrv" = Acer OrbiCam Driver"Adobe Acrobat 5.0" = Adobe Acrobat 5.0"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX"Adobe Photoshop Elements 2.0" = Adobe Photoshop Elements 2.0"Adobe Shockwave Player" = Adobe Shockwave Player"Alien Shooter_is1" = Alien Shooter"AudibleManager" = AudibleManage

Relevance 100%
Preferred Solution: \Documents and Settings\All Users\Application Data\Temp\C31F31E6 Error

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: \Documents and Settings\All Users\Application Data\Temp\C31F31E6 Error

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE-------------------------------------------------------------In the meantime please, do NOT install any new programs or update anything unless told to do so while we are fixing your problemIf you still need help, please include the following in your next replyA detailed description of your problemsA new DDS log (don't forget attach.txt)Thanks and again sorry for the delay.

74 more replies
Relevance 78.3%

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:06:36 PM, on 5/28/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\\Updater\Updater.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files... Read more

Answer:C:\Documents and Settings\All Users\Application Data\MFAData\pack\bins\w10idatx1170kl

can anyone tell me if this file can be deleted or how to go about getting rid of it ? or if in fact it is a trogan ? ant help with this would be greatly apreacated as im stuck in a nursing home 2 hrs away from my friends and family and my pc is the only way i can conect with them. . thanks

1 more replies
Relevance 105.78%

This has been bugging me for a while it pops up whenever I start the computer. I don't know to much about how to do things so please have some patients with me. If you can help me than I might just love you forever.

Answer:Error loading C:\Documents and Settings\ Network Service\ Local Settings\ Application Data\ hrcopul.dll

Have you run any scans for infections? I Googled hrcopul.dll, and everything that I found points to a infection.

7 more replies
Relevance 99.22%

I get a: Error loading C:\Documents and Settings\Owner\Application Data\Adobe\update\flacor.dat
The specified module could not be found.
on reboot. I ran the MG tools exe and am attaching the log. Thanks

Answer:Error loading C:\Documents and Settings\Owner\Application Data\Adobe\update\flacor.d

Re: Error loading C:\Documents and Settings\Owner\Application Data\Adobe\update\flac

You have skipped many steps of the Read and Run Me first procedures. You will need to refer to the below running what you did not before, and then once completed, run MGTools.exe again and attach the zip file it creates along with the other requested logs.

Welcome to Major Geeks!

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****
Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ &a... Read more

18 more replies
Relevance 89.79%

I am looking for a way to copy files to a local domain users Application Data folder either through a self extracting file, batch file or even logon script. I need to install Stationery for MS Outlook to about 100+ users desktops and instead of pullign the stationery from "c:\program files\common files\microsoft shared\stationery" they pull it from a file in thier documents and settigns folder...

I can craete a self extractign exe but that would only be useful if it had to go to the same directory on each and every machine

Answer:How to copy files to local users \documents and setting\user\application data folder?

Put the stuff you need to be copied down to the client system in \\someserver\someshare\somedirectory and add something like this to the login script?


if not exist "%APPDATA%\somedirectory\somefile" xcopy /s/e "\\someserver\someshare\somedirectory" "%APPDATA%\somedirectory\"

3 more replies
Relevance 88.97%


First time posting.

I ran combofix.exe a few weeks ago before I knew of the help available via these forums. When I ran the program the following files were detected and deleted:

c:\documents and settings\<username>\Application Data\inst.exe

I do nightly scans using AVG Free 8.5 and Spybot Search and Destroy (both up-to-date). Nothing was detected in either scan last night.

I ran combofix.exe again tonight and the following was detected and deleted:

c:\documents and settings\<username>\Application Data\inst.exe

Now that I realized there is a lot of help available on these forums, I'm here looking for some guidance.

I do have a combofix log file that was produced after the second combofix scan and I'd be more than happy to post it here, but I will wait for further instruction first.

My main concern is why inst.exe is showing up a second time.

Thank-you for any help you can provide.

Answer:inst.exe found in c:\documents and settings\<username>\Application Data\

I also ran a Malwarebytes Anti-Malware Quick Scan after the combofix completed.

No infections were detected.

4 more replies
Relevance 88.15%


hi. I'm new, and i have a big a$$ problem. Around 3 month a god i started getting the anoying and very well known, CiD: popups. I went to C:\Documents and Settings\Compaq_Owner\Application Data, and found a file called slow gram, containing 3 executables. 2 were named "ajgft6usdabjasdvuyafd" or giberish. There was a program running called "barbroam" or "barboom" or somthing like that. i killed the folder. all was well for a while, And then one day, i couldn't go to my computer. I cliked on it, and got the stupid flash light searching for a file. I clicked on it for hours, so i left it there. I came back an hour later. Still the flash light. I ran Security Task Manager, and found a file running called BOLT DATE.exe in aplacation data. I quarentiend it and killed the prossces. I went to the folder and found a bunch of other folders that looked suspicous. NOTE: I AM WRITING THIS AS THE VIRUS IS DOING THINGS.
Slow gram is back along with a bunch of otehr folders and .tmp files in C:\Documents and Settings\Compaq_Owner\Application Data!!!!!

= idk if its a thing that wasnt there before or not

List of newly found folders:

Digital Desing Ltd
Lionhead Studios (if this is a company, plz tell me for i have so many aplications on here its har to keep track)
Slow gram
Sun (may be java)
U3 (Conatins folder called "te... Read more

More replies
Relevance 87.33%

C:\Documents and Settings\Application Data\Microsoft\Addins|C:\Program Files\Microsoft Office\Officed10\SBCMSYNC.DLL is not a valid Office add-in

Can anyone help with this? Keeps appearing when I try to send a link or mail via OUtlook Express and I cannot do it.

Thanks vml

Answer:C:\Documents and Settings\Application Data\Microsoft\Addins|C:\Program Files\Microsof

Try and clear the check box by Outlook sync in tools>options>other>advanced options>addin manager

3 more replies
Relevance 80.36%

My computer has been a little weird lately.

I ran a virus scan and found a New Win32 virus. 5215 yesterday.

today my computer was still weird, so I decided to run a virus scan again,

but i noticed that some of my directories are really really messed up.

C:\documents and settings\all users\application data\application data\application data\application data\application data

and it keeps repeating the application data folder.

wth is wrong help~~

Answer:Messed up directories. All Users\Application Data\Application Data\repeats.....

In vista.... You will see this. You should not be able to access Documents and Settings. It should say access denied.

Everything is available in Users now.

1 more replies
Relevance 77.9%

The title says it all all my data in C:\Users\TEMP and now temp account is gone.
Im sorry if my grammar sucks because im not english but anyways,
Yesterday i logged in on my pc and i logged in A temp user and I copy pasted all my data from my main User file and Put it all in the C:\Users\TEMP\desc File.
and today i logged in again and now im in my first profiel The main user but when i try to copy paste everything back like how it whas and the C:\Users\TEMP file is gone.
i need that data back i hope someone can help me.

More replies
Relevance 77.9%

C:/Documents and Settings/Uses(My Username)/Local Settings/Temp/browserview-1d31630.htm

This file, and all the files with the name 'browserview-xxxxxx(number).htm are needed, mine got corrupted and I accidentally deleted them.

Can someone post these files?

Answer:C:/Documents and Settings/Uses(My Username)/Local Settings/Temp/browserview-1d31630.h

9 more replies
Relevance 77.9%

Well, here's what happened in a nutshell. I'm having a good day, when I start up my computer, and the following file I've stated above all of a sudden turned into a corrupt file that uses 0KB of data. I can't delete it OR move it. Any way to reset the folder so I can have it back???

More replies
Relevance 77.9%

Hi, if anyone could help me with this, it would be great!

All of a sudden when I try to open my C:\Documents and Settings\All Users\Documents folder, it says "access denied"

running xp home sp2.

any suggestions?

oh, I did a google for solutions and various pages often suggested I turn off simple file sharing, but the option is non existant under my file/view menu...

Answer:Access Denied to C:\Documents and Settings\All Users\Documents

It sounds to me as though the administrator has made that directory path private. Are you the admin, and if so, are you logged into a user account with admin rights? If all else fails, reboot and log into the Administrator account and go to the control panel/users and change your preferred account status. While you're there, unlock the problem path to allow all users to view.

Good Luck!

6 more replies
Relevance 77.9%

i cant get rid of the files in C:\Documents and Settings\owner\Local Settings\Temp\Temporary Internet Files\Content.IE5....NOTHING ive tried has worked....any information on how i can get rid of them would be GREAT!!

Answer:C:\Documents and Settings\owner\Local Settings\Temp\Temporary Internet Files\Content.

Hi Welcome to TSG!!

If you log on as administrator you should be able to delete everything in the C:\Documents and Settings\owner\Local Settings\Temp\Temporary Internet Files\Content.IE5 folder.

If you sign in as "owner" you should be able to remove everything except index.dat if you close all of your browser windows.

1 more replies
Relevance 76.67%

Can anyone help me regain Security Permissions to C:\Users\All Users\Application Data Folder which I lost while looking at the access rights. I mistakenly closed the box while playing with the access rights and lost any access to the file.
I pulled the access rights to the file using icacls they are below.

application data

I am thinking I can change the information in the file and restore it. Not sure exactly what to change?

I was also thinking I could pull the info from another computer running with the same operating system and reapply them to this file? Would this work?

I looked at Previous Versions of the upper level folder. Can I restore a previous version of this whole folder? Will it restore the Application Data folder with the prior permissions?

Answer:Lost Access Permissions to C:\Users\All Users\Application Data Folder

Are you asking about the Application Data or Appdata folder?

If Application Data, this is not a real folder but a junction used to allow interface with legacy programs. No access is necessary since it is pointing to the Appdata folder.

9 more replies
Relevance 76.67%

I am running Windows 7 on my notebook, as the owner and admin.....
I try to access this folder, and I fact it appears as a shortcut rather than a folder...i have run antivirus, and malware, found nothing....
tried to change the security....all users has rights to it, the admin does not and cannot be changed....any ideas?

Answer:C:\Documents and Settings\all users\documents DENIED!!!

It looks like one of the junction points that provides some backwards compatibility and which shows when unhiding files in Control Panel>Folder Options>View. There is no Documents and Settings folder in Win7, except as a junction point.

Read more about junction points here:

In Win7 Documents is under All Users>[User Name]>Documents. Perhaps you should hide Hidden and System Files again to see only the WIn7 folders you need.

3 more replies
Relevance 75.44%

question... i seem to have a bunch of crap in this folder that always brings the trojan in and hides it with files that have come from popups... can i delete everything in this folder and not cause problems for my computer

Answer:C:\Documents and Settings\-------\Local Settings\Temp

Hi futrade

Yes, you can delete everything in the Temp folder.

The best time to empty the Temp folder is right after a reboot, some programs place files in the Temp folder and will deny the deletion since the file is currently being used.

If you want, you can send the items to the Recycle Bin for a few days, if something seems to be running differently after emptying the Temp folder, you can restore the items from the Recycle Bin.

If any of the files in the Temp folder is a virus or trojan, obviously, you would not to keep those hanging around, so run a couple virus scans, links below.

To help clean up your system:
Run an online Anti-Virus scan from at least one and preferably 2 of the following sites

Trendmicro HouseCall
Allow them to clean/delete any spyware/malware or viruses/trojans they may find.
Make a note of any files flagged that were unable to be cleaned or deleted.

Download, Install and check each of the following Spyware tools for updates:
(If you already have the following, please make sure it is the latest version and has been updated)
Ad-Aware SE 1.06:
Click on Full System Scan and deselect Search for negligible risk entries. Have Ad-Aware SE remove what it finds.
Spybot-S&D 1.4:
Have it fix what it finds marked in Red.
Spyware Blaster 3.4:
Click on Updates > Check for Updates Switch to Protection
Under Quick Tasks click ... Read more

2 more replies
Relevance 73.8%

How do you move/change the main TEMP directory from C drive to D drive which is a larger drive? C:\Documents and Settings\[profile name]\Local Settings\Temp

I am running out of space on C drive and Nero uses the TEMP directory to make DVDs and it is uses LOTS and LOTS of space which I don't have. I reinstalled Nero and did not see a question about where I would like Nero to work.

Can you even MOVE or CHANGE C:\Documents and Settings\[profile name]\Local Settings\Temp to another drive please?

Answer:How move C:\Documents and Settings\~\Temp

Hi zmartha, the problem here is many of your programs may be set to use the default location for dumping temp files and may no longer work once you change the location. Depending on which version of Nero you're using, you should be able to change the temp folder to somewhere else in the settings.

If you can't find the setting, try backing up your system them boot into Safe Mode, create a temp folder on your preferred drive then edit the path variable. To do that, right click your My Computer icon and select Properties then the Advanced tab. Select the Environment Variable button and under the variable section, edit the location. Boot back into normal mode and monitor how things go.

Post back if you have any further questions.

7 more replies
Relevance 73.8%

Hi all, this is my first thread here. May be a little n00bish but here goes.

Ive dealt with almost every problem Ive had with my comp but this one has me stumped. I just tried to install a program and cant because the C:\Documents and Settings\All Users\Documents folder denies me access. I have administrator rights and all that guff and it annoys me horribly the thought I dont have access everywhere on my computer. Ive been though the folder properties and attributes, and cant change much at all. I dont ever remember not having access to this folder before.

Please help...

Answer:C:\Documents and Settings\All Users\Documents

The software I am trying to install is genuine. Bought it today. Is a game called fear. What its trying to do is create a profile folder in the C:\Documents and Settings\All Users\Documents folder I believe but cant because of this access problem.

6 more replies
Relevance 72.98%


Recently when I restarted my computer, it started up without my settings (background, files, etc.). At first I thought them to be lost, but in Documents and Settings I found my user name folder (John Smith) with all of my files and data in it. However, there is also a new folder (John Smith.JOHN) which seems to be the "user" that my computer is starting up to (i.e. the favorites in this folder match the favorites that are now being displayed on my computer). This new "user" is not listed in the Control Panel Users menu.

How can I delete this new folder and get my computer to start up with my old settings? In other words, I wish to delete "John Smith.JOHN" and only have "John Smith." It should be noted that the "Administrator" folder in Documents and Settings has the exact files as the new John Smith.JOHN folder. I would like to be the sole administrator and have my old files back in that folder. I cannot figure out how to do this since I cannot delete "John Smith.JOHN" while I am logged in as this profile. Again, I cannot switch users as this "user" does not exist except in the Documents and Settings folder.

Thank you sincerely for your help and advice.

Answer:Users in Documents and Settings

6 more replies
Relevance 72.98%

When I send something to my desktop, it does not go where I think it should. I have 2 users in my C:\Documents and Settings. (I did not put either of them there). I sign in with Username. It does not go there in Username, Desktop. It goes to Username.ROOTS, Desktop, and shows on my desktop. If I put something in Username, Desktop, it does not go to my desktop. I do not have a Username.ROOTS shown in User Accounts. No other accounts. If I go to User Accounts, and make Username1, and sign in with it. Then delete Username, will it get rid of Username.ROOTS. Also will it make a Username1.Roots, and use it. I would like to get rid of these extra accounts in Documents and Settings.

More replies
Relevance 72.98%

I am using windows Vista. I have a Documents and Settings folder and a Users Folder. They seem to be exact duplicates. The Users seems to be in use more than the Documents and Settings. I would like to delete one or the other but do not want to corrupt my system. Is it safe to delete one and if so, which?

Is this a result of running a registry optimizer?

More replies
Relevance 72.98%

I recently reinstalled Win Xp. I use Windows Explorer quite frequently. When I open the tree :My Computer
+ Local Disk(C)
+ Documents and Settings
+All Users
+Default User

How did I get Owner ? All the other times I've installed XP(many),the "Owner" has been my name that I give the computer.

Answer:Documents and Settings-users

Is it a recovery disk or an actual Install disk? Just create a new user and delete the Owner one.

2 more replies
Relevance 72.98%

I use this folder to keep icons on the desktop for our users. A few computers in one of the labs have this folder missing. Students probably got to messing around and deleted it.

Is there anyway to rebuild this folder to serve it's purpose or am I going to have to re-image the machine?

Answer:C:\documents and settings\all users is gone!

Hi Seth

You might first check to see if those pesky students changed the folder's properties to hidden - just as a prank [set the View in Windows Explorer to show hidden files temporarily].

That's the nice thing about having a backup image handy = they are great for computer labs at schools.

Best of luck
. . . Gary

2 more replies
Relevance 72.16%

Spyware Terminator brought this up about a week ago, & i removed it, & it has found it again today.

"Threat Files
<Trojan.Tempi> : C:\Documents and Settings\Allan\Local Settings\Temp\41.tmp"

My computer does seems like it's been running a little bit slower overall over the last few weeks, especially loading some particular programs such as Outlook & Firefox (2.0.016). Firefox seems to be running/browse loading a little slower than usual in the last few weeks, but i'm not sure as my ISP had been running a little bit crapily of late.

My HijackThis log file reads:


O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Ahead\NEROPH~2\data\xtras\mssysmgr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: GA311 Smart Wizard Utility.lnk = C:\Program Files\NETGEAR GA311 Adapter\GA311.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuit... Read more

Answer:Re: Trojan file: "C:\Documents and Settings\Allan\Local Settings\Temp\41.tmp"

Hi, Welcome to TSG!!
Download: ResetProtocolDefaults.reg

Locate "ResetProtocolDefaults.reg"
Right-click and select: Merge (Ok the prompt)

Post your log again and this time post the entire log please.

3 more replies
Relevance 72.16%


i got a terrible headache , i spent all the afternoon to browse my Documents and Settings & users folder , no way , i was not able!

today i installed photoshop cs4 32 bit on my w7 32bit

i tried to browse Documents and Settings ->denied access

i tried to customize cs4 keyboard shortcuts and and menu

i tried to browse the folder user
i found my name , clicked on application data ->access denied

i was not able to browse these folders

i tried Add_Take_Ownership.reg , nothing

i'm really sad

is there a way to take control of my pc
i'm the administrator
i want to browse my pc
i bought w7 ultimate(ultimate only to have 2 language ,mine and my girlfriend) and it was not cheap

is there a way to take Ownership of my pc?


ps i'm almost disperate
have a great day

Answer:Documents and Settings & users not accessible

hi drugo, you could try a system restore prior to when you had problems System Restore or if that fails a repair install Repair Install hope that helps you

9 more replies
Relevance 72.16%

Hi, got a question, need ur guys help here...
how come when i put some link in the C:\Documents and Settings\All Users\Favorites , it doesnt reflect on all the users who log in to the computer..

whereas if i put a notepad here
C:\Documents and Settings\All Users\Desktop

i will show on everyone.


Answer:C:\Documents and Settings\All Users\Favorites

Each user has a separate folder even when the only user is also the administrator. In
XP, the obvious reproduction of a duplicate default can clearly be seen by opening the
"doc+settings" folder to see the process there. Try copying the file to a user named in
the desktop. Favorites is mainly for the IE6.0 browser links dragged off a web page.

1 more replies
Relevance 72.16%

Kaspersky tells me there is a 2 viruses in my Document and Settings and I have tried there and in USERS/All users, etc and it to is ACCESS IS DENIED and I want to confirm that Kaspersky DID delete all traces of that virus.
HOW do I get this get to these folder to check? Ask my mother or my priest for permission to access my own computer that i bought and paid for. Of course I am misguided as i believe that I should have access to my own computer.

But don't want to get started on my rant about Microsoft 7 and "permissions" and "access" to my computers. the ole "pay us but don't expect any access"

anyone know how to get around this madness?


Login as an administrator.

9 more replies
Relevance 72.16%

i recently tried to make a new user a count and i wanted to share some document between user that's when i found out that i cannot access nor add files to C:\Documents and Settings\All Users   i get     " C:\Documents and Settings\All Users is not accessible access denied "  when  i try to open . Ive tried and cannot change it to allow access please help

Answer:cant access C:\Documents and Settings\All Users

killerwombat.....  Which operating system are you using and does your user account have full administrative rights ?dl65  

14 more replies
Relevance 72.16%

In Win2k and XP you have a C:\Documents and settings\All Users folder by default. My questions is can I make every user that logs into this XP Pro PC use that folder and settings folder with out creating a new folder for each user. i.e. Mofo logs on to that PC and C:\Documents and Settings\mofo folder gets created and new settings are in effect and more disk space is used. I want every user that uses this PC to have the same exact desktop and settings and when Mofo changes the desktop then the next user that logs on to this PC gets that change.



More replies
Relevance 71.75%

I Need Help!
I was wondering if it is a issue to delete files in "Documents and Settings\Username\Local Settings\Temp". I am really looking if it is safe to delete the "Documents and Settings\Kenny Hartwick\Local Settings\Temp" files.


Answer:Should I Delete "Documents and Settings\Username/Local Settings\Temp"

I don't know who Kenny Hartwick is, but deleting temp files is NOT a problem. Just get his permission, willya.


edit: if you click Start, All Programs, Accessories, System Tools, Disk Cleanup you'll run a nice little routine that lets you select those, among other, files to remove as well as a file compactor for rarely used files.

2 more replies
Relevance 71.34%

Uninstalled Nokia Pc Suite,also deleted the registries for the product installations package ,msiUsed Pc-Suite cleaner,when reinstalled new Nokia PC Suite..path C:\Documens and Settings\All Users\Application Data\Installations\.......\Packages\Nokia_Pc_Suite cannot be found.Verify that you have accessedto the location and try again,or try to find the installation package Nokia_Pc_Suite.msi in a folder from which you can install the product.Use pc Suite cleaner,Window uninstaller...PC connectivity solution,Nokia Connectivity cable driver uninstalled except thei product installations failed,registry enries cleaned..please help...thank you.

Answer:path c:\Documents and settings\All Users\Appl

Did you remove the executable from Startup or msconfig?

2 more replies
Relevance 70.52%

I need to access the "Application Data" folder under "All Users" and have been unable to do so. Initially I was denied permission so I changed ownership of the folder but now instead of an "access denied" message, it simply opens the main "All Users" directory in a new window without entering the "Application Data" folder.

How do I get around this?

Answer:All users Application Data

You've set this setting here yet?

9 more replies
Relevance 70.11%

Hi;I have a few problems in my laptop, which I am working on it. I had to access a file (C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\core.aawdef ) but there was no ?Application Data? in All Users instead there were: Desktop, Shared Documents, Favourites, Start Menu and NTUSER.I will be grateful for any advice in how to access the file I want as the Ad-Aware 2007 is one of the files needs to be repaired.Many thanksSabi

Answer:Can Application Data in All Users be missing?

have you looked on the actual c drive under program files for adware and have you used the search link in start menu for adware.try that first.if that doesnt work goto c drive and click on program files and look in common files.if you can find it after try to uninstall it and install it fresh again. Its a good idea to downlad files onto a pen drive as this helps when when you have to install again but instaed of flaping around the net looking d=for the site you just plug in you memory stcik and downlaod from there.I hope this helps im sure oters will have more info

3 more replies
Relevance 68.88%

Hi tech guys, today I experienced a lockup during Windows startup. I had some strange errors in the past days so it was a little expected. Kind of a big problem but nothing a Windows reinstallation can't fix.

Last time such a thing happened, it simply formatted my whole HDD, losing all my documents and programs. This time, I tried to only reinstall my windows folder using a boot from cd to keep my files. All worked as expected besides that I lost all my sessions. Since all my files are in a protected folder that can only be viewed a session that doesn't exist anymore I'm screwed.

How do I hack these protections and get my stuff back?

Answer:Accessing passworded users documents and settings (windows XP reintallation problem)

If they are passworded or encrypted, then you are done.

If they are only under new ownership:

How to take ownership of a file or folder in Windows XP

1 more replies
Relevance 68.88%

I have a problem with a computer. When I log on, the desktop is blank, only the shortcuts that where created for all users are visible. But every custom shortcut is gone.

When I go into c:\Documents and Settings I see my user name "user" as well as another folder called "user.mycoimputername". And I happen to now log in as "user.mycomputername". But why is that? And how do I log in with the other user setting folder, I clearly see it in the Documents and Settings folder.

A while back I believe I knew of the solution, but I cannot remember how to fix it.

If anyone could help that would be great!

More replies
Relevance 68.88%

I got windows vista home premium 32 bit (Japanese)

I noticed in the User Application Data Local Temp Folder there are a lot of items.
What are they can I delete them?
I did use CCleaner some single entries got deleted while others remain there.

Any help in this regard will be appreciated.

Answer:Items in User Application Data Local Temp Folder should I delete?

Hi Ari94,

Temporary folder is a directory used to hold temporary files. Many operating systems and some software automatically delete the contents of this directory at boot-up or at regular intervals.

You can delete the files from Temp folder. There would be certain files which may not be deleted, this is happens when the files are in use. Please follow detailed instructions to delete the Temp folder: Temporary Files - Temp Folder

Please revert back for clarification.

6 more replies
Relevance 68.06%

While trying to zip files using winzip an error ocurred and the temp zip was left in user/local settings/temp. To my amazement I found nearly 2 Gigs of data in this folder which apears to be orpans/remnants of previous installations that may have been removed by now. Can anyone advise if all this is temp data and at what point can it be erasedmany thanks

Answer:Local settings /temp folder /heaps of data

click here

2 more replies
Relevance 67.65%

Hi, I’m Spencer and I just joined the forum.

My question regards one of the practices of a local computer repair shop where I am currently interning... This practice is just one of a handful of procedures that is known as our “Performance Tune-Up”. It involves checking the size of the Documents and Settings folder, if this folder is above say four or five gigabytes the source of the reported data is to be found and moved to another folder on the root C:\ drive (a shortcut is then placed on the desktop so the user may access their data).

When I asked the owner of the shop why this was part of our performance tune-up, he explained to me that Windows XP scans the Documents and Settings folder on startup. If there is a large amount of data in this folder, it will slow the startup time. He later remarked that he knows this must be the case because he has witnessed computers with heavy amounts of data on the desktop slow the startup times.

This seemed perfectly logical to me, but I was curious and somewhat skeptical about his statements. After spending a couple hours researching this on the internet, I haven’t been able to come up with a definite answer as to whether large amounts of data in the Documents and Settings folder affect startup time. Could someone please help me out on this? I’m mostly wondering for my own computers sake, but also for the shop, in the event that my boss is wrong and we’re performing useless tasks.

Although, I haven’t found an answer, I am do... Read more

Answer:XP Startup Slowed by Data in Documents and Settings?

9 more replies
Relevance 66.83%


Please help me. My space will be killed by symantec\subeng folder. This folder is bigger than 16GB now. Thx

Here is my scan:

Deckard's System Scanner v20071014.68
Run by mike on 2008-04-13 23:42:37
Computer is in Normal Mode.

-- System Restore --------------------------------------------------------------

Failed to create restore point; disk is full.

Backed up registry hives.
Performed disk cleanup.

System Drive D: has 0.48 GiB (less than 15%) free.

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-04-13 23:44:45
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
D:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
D:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
D:\Program Files\Yahoo!\YOP\yop.... Read more

More replies
Relevance 66.42%

Hello, I'm using a combination of the Vista backup to do a complete backup of my OS and applications (for emergency restore) and another backup tool to handle my data.

My OS is on C: and my data on D: (and other drives).

My query is that C: will contain application settings/data - for example if I write actions in Photoshop they will be stored under the user application data subdirectory or if I create a DOT template for Word it will be stored under the hidden data directories for Word.

I want to be sure that I am backing up all of the vital application data/settings so that I can either restore just those or in an emergency can restore my full Vista backup (done weekly) and then restore the application data (which I want to backup daily).

I've searched this set of forums and elsewhere to find something that lists which subdirectory tree(s) I need to ensure that I have backed up (and I guess I'll need to do a registry backup too each day just in case settings are stored there). I can't find such a list.

Does anyone know of a document that details what the vital stuff to backup is?


Answer:Application data/settings backup

If you need to backup Photoshop, you need to find it's directory (probably under Adobe), and for Word it's probably under Microsoft or Office. Another option is to simply backup the entire AppData folder, that way you can't miss anything.

If you're talking about a large-scale backup for your whole system, you will probably want to backup drivers as well (you only need to back these up once, all the drivers are installed in C:\swsetup, but I prefer just saving the installer files).

I reinstalled my OS multiple times, with my personal data on another drive. What I backed up from my C drive was:

Select folders from AppData (only for programs' settings that I wanted to backup)Fonts that I had collected over time (C:\Windows\Fonts)Themes that I had collected over time (C:\Windows\Resources\Themes)Custom Power Plans (exported/imported through powercfg.exe in command prompt)Start Menu folder, for lots of links I created (AppData\Roaming\Microsoft\Windows\Start Menu - Private Profile, C:\ProgramData\Microsoft\Windows\Start Menu - Public Profile)Certain folders in Program Files of older programs that I run as Administrator for compatibility purposes (programs that need Administrator privileges to save stuff in Program Files)I did not backup the registry in anyway, because the registry changes I made were saved as .reg files. Other registry changes are made while installing programs (which after a clean install will be done anyway)
What you think is vital to backup depends on your s... Read more

8 more replies
Relevance 66.01%

Whenever I restart my cpu, this error pops up. It says run dll error error loading c:/users/laptop/appdata/local/temp/ the specified module could not be found. Here are my results from the scans I ran. Thanks.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:10:05 PM, on 12/13/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Nike\Nike+ Connect\Nike+ Connect daemon.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\LAPTOP\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\C... Read more

More replies
Relevance 66.01%

We are getting the above error randomly on some of the laptops we have deployed. The error comes right after you boot or when the windows 7 is left running. There are no special software running. The error in details is below.
"The boot configuration Data (BCD) settings for the following boot application have changed since Bitlocker was enabled
boot appplication: \windows\system32\winload.exe
change settings: 0x26000090
You must supply a bitlocker recovery key to start this system.
Confirm that the changes to the BCD settings are trusted.

If the changes are trusted then suspend and resume bitlocker. This will reset bitlocker to use the new BCD settings.
Otherwise restore the original BCD settings"
Can anyone please explain on how to correct this error. As before this is happening on few of the machines and we are seeing more as we go. Any tips would be nice...Thanks

More replies
Relevance 64.78%

Ok, please bear with me for this. I find it very hard to explain and any help would be VERY appreciated.

I started up my PC 2 days ago, I found settings changed everywhere. My wallpaper and taskbar were default. Desktop icons had mostly disappeared, I was getting messages asking me whether I wanted to take the "Windows XP Tour"... Basically my entire system had changed to how it would be if I had just installed it.

All my programs were still there and at first it seemed that all of "My Documents" had been erased, leaving only empty My Pictures and My Music. The Files from my iTunes had gone missing as well. Later, on exploring I found a new folder called TEMP in Documents and Settings, which had no real files in it. My original folder Nisha where all my stuff actually was, was there too with all my files safe, in Documents and Settings as well. Anything saved to TEMP is erased on the next start up, any changes made in settings of programs are also reverted.

Fearing a virus or something else on those lines I ran Malwarebytes, QuickHeal and found nothing. I tried deleting the folder but I got a message saying it is a Windows Systems folder and is required for Windows to run properly.

I managed to delete it once in Safe Mode but it came back named "Nisha.HOME-MAHIM." And System Restore doesn't work, if I try to use it.

I don't know how to remove this problem, it is driving me nuts! Please help before I lose my hair and sanity. TIA!

Answer:Strange Problem- "C:\Documents and Settings\TEMP"

Your User Profile became corrupted and Windows logged you in with a Default Temp Profile. Go to Start/Run and type control userpasswords and press enter. Create a New User account with admin rights. Log out of the Temp profile you are in and log in as the new user. Go to C:\Documents and Settings and open up your old user profile Nisha folder. Copy the Desktop, Favorites, My Documents, and Start Menu folders and Paste them into your new user profile name overwriting the empty folders.

3 more replies
Relevance 64.78%


I started my desktop computer and the desktop was blank. All my files from the desktop and from my user folder have been moved to C:\Users\DH (DH is the name of my account). All the settings in my account are deleted. For example I can't access to my Outlook and so on.

It seems that the computer somehow destroyed my account (account settings) and moved my data from user folders (Documents, Downloads etc.) to C:\Users\DH.

Is there any way how to get back to my normal account? Right now I am in my account, but the account just simply is not there.

More replies
Relevance 64.78%


I started my desktop computer and the desktop was blank. All my files from the desktop and from my user folder have been moved to C:\Users\DH (DH is the name of my account). All the settings in my account are deleted. For example I can't access to my Outlook and so on.

It seems that the computer somehow destroyed my account (account settings) and moved my data from user folders (Documents, Downloads etc.) to C:\Users\DH.

Is there any way how to get back to my normal account? Right now I am in my account, but the account just simply is not there.

Answer:My account settings removed. My data in user folders moved toC:\Users\

poaaad said:


I started my desktop computer and the desktop was blank. All my files from the desktop and from my user folder have been moved to C:\Users\DH (DH is the name of my account). All the settings in my account are deleted. For example I can't access to my Outlook and so on.

It seems that the computer somehow destroyed my account (account settings) and moved my data from user folders (Documents, Downloads etc.) to C:\Users\DH.

Is there any way how to get back to my normal account? Right now I am in my account, but the account just simply is not there.

Hi poaaad and welcome to TenForums.

Can you use a system restore point to get things back?
If not, can you create a new user account and move your data to it?

5 more replies
Relevance 64.78%

I am laptop user. About 2hr ago, i login to my lappy and discover that my profile is different. My folders on desktop went missing and some of the setting changed. Then i try on my own to solve it but to no avail. Fortunately i come upon my C:\Documents and Settings and discover that strange profile C:\Documents and Settings\TEMP and my original profile C:\Documents and Settings\p0716499 was still there. This imply that my previous setting and files are still in my laptop. However, I cant changed back to the original profile and struck with the temp profile.
Initially i suspect is registry problem so i DL "UPHClean Service" by miscosoft but to no avail. Now currently i suspect it might be the work of a virus. I need help. Thank anyone who help me in advance.

Answer:User profile path change to user profile path change to C:\Documents and Settings\TEMP :\Documents and Settings...

This morning when i woke up, i discovered a icon named "syminstallstub" on my desktop. I checked online and i believe that it could be a virus. I try to find ways to uninstall it but to no avail I not sure what did my younger brother do to my laptop. I feel that im damn unlucky and encounter 2 problems in a row. Please help me solve my problems.

6 more replies
Relevance 63.55%

What is this how i fix ? it keeps poping up every 10-15 minutes but the new2589 number changes.... It's really bothering me ..

Answer:I need help! C:\users\owners\AppData\Local\Temp\New2589.exe Error

Any help?

8 more replies
Relevance 63.55%

Hey guys
Every time I boot up my computer I encountered an error message saying that C:\Users\Robert\AppData\Local\Temp\dwm.exe cannot run or load.
I also couldn't access the internet
I activated a guest account and on this account I could access the internet, I have downloaded HighJackThis

I thought this problem was similar to the one experienced by Carva at
Yet I couldn't work out which files to fix
Here is my HJT log
Thanks in advance

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:57:11, on 27/09/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18943)
Boot mode: Normal

Running processes:
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Hp\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files... Read more

More replies
Relevance 62.73%


I hope you can help me. The computer I'm using to write my grad thesis(!!) won't connect to the internet because of the error in the title. I used all the suggestions in the forum welcome page (run the specs, HiJackThis, etc) I tried checking other users with similar error displays, but either the threads are closed, or they have no replies, or it's not the same error and I'm not sure if I should try the fixes suggested.

Here is all the information I think you'll need (if not a fair bit extra!) Thanks in advance to any help you can provide, and Happy Holidays!

Computer Specs

Tech Support Guy System Info Utility version
OS Version: Microsoft® Windows Vista™ Home Premium , Service Pack 2, 32 bit
Processor: AMD Athlon(tm) X2 Dual-Core QL-62, x64 Family 17 Model 3 Stepping 1
Processor Count: 2
RAM: 2813 Mb
Graphics Card: NVIDIA GeForce 9100M G, 256 Mb
Hard Drives: C: Total - 145964 MB, Free - 29554 MB; D: Total - 145965 MB, Free - 91658 MB;
Motherboard: Acer, Inc., Grasmoor , Not Applicable, LXARE0X12691501EBD2500
Antivirus: AVG Anti-Virus Free, Disabled

DDS Specs
DDS (Ver_10-11-27.01) - NTFSx86
Run by Owner at 11:16:22.01 on Sat 11/27/2010
Internet Explorer: 7.0.6002.18005
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.2813.1808 [GMT -4:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Runni... Read more

More replies
Relevance 62.32%

I get the above error when I reboot my computer. Whenever I reboot, a screen comes up that says:

"Could not load or run 'C:\Users\Palmer\AppData\Local\Temp\csrss.exe' specified in the registry. Make sure the file exists on your computer or remove the reference to it in the registry."

How do I find and remove the reference to it in my registry?

Answer:Error message when I reboot for C:\Users\Palmer\AppData\Local\Temp\csrss.exe

Welcome texankjo.

Could you explain when this error message pops up? Are you actually able to boot and get to your desktop?

If you can, I suggest you follow the instructions from Posting Instructions for Malware Removal Help and post in the Virus/Trojan/Spyware Help Forum forum (as I suspect this is a malware issue).

1 more replies
Relevance 62.32%

Whenever I reboot, a screen comes up that says:

Could not load or run 'C:\Users\Ella\AppData\Local\Temp\csrss.exe' specified in the registry. Make sure the file exists on your computer or remove the reference to it in the registry.

Recently, I did several things this might be related to, but I am not sure it is is related or not:

1. I downloaded Internet Explorer 9; hated it; and called microsoft tech support to get rid of it and went back to Internet Explorer 8. IE 8 is now working fine.

2. Attempted to download the latest version of VLC Media Player 1.1.9. It took several tries before I got a download to install correctly. At first, I was sent by IE 9/Bing (I suspect Bing highjacked the browser, and took me to outside sites). I think during these attempts I was DLing from SourceForge. When these setup files didn't work, I eventually found the correct site to DL from ( That DL worked find, VLC works great, and I simply deleted the other (failed) setup files I had DLed.

3. Did a System Restore back to April 5, 2011 to try to get rid of the error message.

4. Downloaded Periform CCleaner and ran that to try to get rid of any registry errors.

5. Spent approx. 2 hours on the phone with a Microsoft represent in the General Assistance Department. He did the "take control of my computer" thing, and did all sorts of things I didn't really follow. At the end of it, he said it was probably leftover from a virus that my Avira g... Read more

More replies
Relevance 62.32%

I just got a new computer and have started to get the message

RunDLL Error Loading C:Users\Username\AppData\Local\Temp\cBsQjjij.dll

Does this mean I have a virus? Norton doesn't seem to be picking it up, in fact Norton doesn't appear to be able to finish a scan. What do i do here?

Please help. I'm running Vista and it's a brand new Toshiba laptop.

Answer:Help Please Rundll Error Loading C:users\username\appdata\local\temp\cbsqjjij.dll

ok so i've just run MAB. It found 9 infected objects, then said it couldn't remove all of them and that i had to restart. Then I started getting two run DLL messages. I'm running it again. Hopefully this will work.

1 more replies
Relevance 61.91%

What does this mean:  C:\Users\Ted\AppData\Local\Temp\ScrC777.temp\_FRBatch.pac was not found, and how can I resolve it?
I usually see it on start up  after "sleep".

Answer: C:\Users\Ted\AppData\Local\Temp\ScrC777.temp\_FRBatch.pac was not found

Hi TedRayWesty,
When your computer ?wake up? from ?sleep? mode, the RAM will be able to respond to a wake-up event and calling files for program. There might be a calling failure. I searched about your temp folder name and the temp file name and seems like it is not a system
file and it is called by some third party software.
Try following steps to resolve your issue
Please perform a clean boot and see if the issue still persist.
Check the other contents in ScrC777.temp folder see if you could identify the software.(seems like some Security Software or Anti-Spyware)
Uninstall it and delete the temp folder see what happens.
About clean boot in Windows 7

2 more replies
Relevance 61.5%

Help! I started to get an error message after I deleted the last infected file from my computer and then I got this error message that looked like this (see attachment) except it had different text, though. When the error message comes up I'll capture it.

Answer:I get RUNDLL error message saying:Error loading C:\Documents and Settings\.....

I believe you may have some residual damage or still may have a virus -

Please follow this sites pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, please post the requested logs in the Virus/Trojan/Spyware Help forum, not here.->

Virus/Trojan/Spyware Help - Tech Support Forum

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

IF they say you are clean, then I or someone will work with you to clean up your startups.

3 more replies
Relevance 61.5%

Trying to install a Sibelius update on a new (windows 10) computer.  When I try to run it it comes up with the error
Runtime Error (at -1:0):
Cannot Import
I've tried contacting Sibelius. Can anyone offer any advice i think it's a windows issue... ? It's pretty urgent.
Thanks so much.

More replies
Relevance 61.5%

When I open up my "downloads" file in documents and settings an error screen comes up saying windows explorer has encountered a problem and needs to close.  My old computer used to do the same thing and I can't figure out why.  Could some one fill me in on how to fix this problem.  Thank you for the help.

Answer:Documents and settings error

Windows version, computer info needed.

14 more replies
Relevance 61.09%

Help! I would really really appreciate it if someone can help me even just explaining to me this error I keep getting recently...Whenever I get this error the pc will restart then will create a log report saying it has recovered from a serious problem. and its always this problem in Temp folder:

C:\Documents and Settings\EllenCurl\Local Settings\Temp\wer5c2b.dir00\mini033010-03.dmp (sometimes its -04) and

C:\Documents and Settings\EllenCurl\Local Settings\Temp\wer5c2b.dir00\sysdata.xml

it doesn't happen when using a particular program, whether using the internet or a program like sims 2 it will restart and log this problem. sometimes it does this restarting a couple of times a day and I don't know if its harming the PC and I don't know what to do or what this error is all about. Our operating system is Windows xp service pack 2

Hope someone can help


Answer:Pls Help!!! Error on C:\ document\ local settings\TEMP\

Hi,and welcome to BleepingComputerIt's impossible to know whats wrong when we don't see whats inside the logs.Could you please copy the content in the file and post it?You can read more about those dumps here:, you should consider to update you operating system with service pack 3

20 more replies
Relevance 60.68%

when I turn on my computer I get this message and if I click on 'okay' it goes away and things do run but slowly at times. What is wrong?

Answer:error loading c\:documents and settings\all u

I can't see the rest of the message. Normally that location is a way to put files or shortcuts or programs available to all users. All users is not really a user but a holding spot for (you guessed it) all users.Might install MS's security essentials or other software to protect and check your system if you don't already. Consider looking at removing old un-needed apps or using disk clean up to free up space. Defrag may help a bit.If all else fails then consider re-loading the OS from OEM disks. "The era of big government is over," said Clinton 1996

3 more replies
Relevance 59.86%

Dear friends, I need to get your help. When I tried to install "Lenovo Settings dependency package v2.4.0.20", I got an error due to temp folder. < impossible to run the file on temp folder >. My laptop is a X1 Carbon, 3rd Gen with Windows 8.1 I'd really appreciate your comments.   Regards!

Answer:Lenovo settings dependency package Error Temp Fold...

Sorry for this trouble.  Can you clarify how you are trying to install it?
Did you download it from website here?
Or are you trying to install it from System Update?
Or something else?

3 more replies
Relevance 59.45%

Hello All,

I am getting the following two error messages every time I boot up:

Error loading C:\Documents and Settings\...\Local Settings\Application Data\evevekanu.dll

Error loading C:\Documents and Settings\...\Local Settings\Application Data\Bzewujagedeyoxi.dll

IT already looked into this and could not figure this out. I am attaching a screenshot of both errors.

Thank you all for your help.

Answer:Error Loading C:\Documents and Settings...\evevekanu.dll and Bzewujagedeyoxi.dll

Hi .Did you take a look in the stated see if those items exist?If not, then I would suspect that they were malware items that have been removed...but which still have startup pointers to the nonexistent files.You can use AutoRuns for Windows - to take a look at your startup pointers. The Logon tab is the only one you want to look at...if you find items similar to the ones mentioned in your message...temporarily disable them, rather than delete...until you are sure the startup item relates to nothing essential.Louis

3 more replies
Relevance 59.04%

The general method to change ownership is not working
Please suggest some other method

More replies
Relevance 59.04%

The general method to change ownership is not working
Please suggest some other method

Answer:How to Unlock "Users\All Users\Documents folder

My Win10 computers [both Desktops and Notebooks] do not have an All Users Folder in the C:\Users Folder, all are default Upgrade installs.

2 more replies
Relevance 59.04%

I came across this.....

c:\programdata\application data\application data\application data\application data\application data\ ....

application data\ keeps repeat.

Is this ok or can I get rid of it some how and free up some space?
Thank you in advance!!

Answer:Solved: c:\programdata\application data\application data\ .... keep repeat

16 more replies
Relevance 58.63%

Have a client with a win2k pc.
reports that 2 to 3 weeks ago, in the middle of the day, the workstation will display error:

terminal id xxxx c$\documents and settings\all users\program files . . . the network path was not found

If the user reboots, she cannot connect to her Win2k server/network.
The following morning however, she will be fine, until mid-day.

Answer:Win2k error c$\documents and settings network path not found

Have you scanned for viruses? Have you looked in the event log?

2 more replies
Relevance 58.63%

as soon as i put in the wolfenstein disk this is all i get "error writing application data"what can i do?

Answer:error writing application data

16 more replies
Relevance 58.63%

When I am try to play a data CD the Windows 2000
professional,gives me the following message:
So,I can not play the cd.I tested the cd in the same pc before when I had the win98 and no problem.Please help if you have time to spent!

More replies
Relevance 58.22%

Hi Everyone,

Hope someone out there can help me.
My electricity cut out while i was shutting down my pc and now it won't start properly. its get to windows xp loading screen and then it gives the option to start safe mode etc. I have tried all of the options including last known configuration and nothing has worked.
I don't mind restoring it to factory settings to get it working again but i really need to keep my documents. I have loads of pictures from my wedding day and my mobile phone that i will never get again and i'm heartbroken.

I've got some basic computer skills. i also have a laptop and was wondering if there was anyway i could connect it to the pc and move or copy my documents folder to the laptop so that i can restore operating system

my pc came with windows pre installed.

hope somebody can help :)


Answer:Operating system error - how to remove documents before restoring to factory settings

Easiest way is to take the drive out and temporarily attach to a working pc ot harvest data . . works best if you attach it to the Secondary channel on the working pc . . the one with CD/DVD drives

7 more replies
Relevance 57.81%

I have no idea what might have caused this but that's the error that appears every time I boot my computer, it appears as the desktop does.

Screen shot:

Answer:RunDLL - Error Loading C:\Users\"Me"\AppData\Local\Temp\quMFUnkj.dll

12 more replies
Relevance 57.4%

I love this site; you volunteers are most helpful and knowledgeable.PC: HPOS: Windows XP Media Center Edition, Version 2002, Service Pack 3PROBLEM: Whenever I navigate to "C:\Documents and Settings\My Profile" (where "My Profile" is my user folder) in Windows Explorer, I receive the following error message:Internet Connection ErrorYour request cannot be completed because the service couldnot be found or did not respond. The service might beexperiencing technical difficulties, or you may need to adjustyour network settings.|Try Again| |Cancel|note: There is an extra space before the first "service" and I don't recall seeing a similar typo in other Windows error messages.I must press "Cancel" three times successively, as three identical error messages pop up. This happens every time this folder is navigated to. It does not happen with any of the other profile folders in "Documents and Settings."This problem cropped up after I ran the disk cleanup tool and uninstalled unwanted programs and windows components. Chief on my list of suspects are the uninstall of "Outlook" and "HP Customer Participation" (I'm not certain of the exact program name, but the description said it was for HP owners to be included in market research and be informed of special offers). I also uninstalled "Windows Live Messenger," "Sonic RecordNow DVD" and there may have been a few others but the onl... Read more

Answer:Internet Connection Error message in Windows Explorer: "Documents and Settings\My Profile"

Hi .Have you tried running chkdsk from My Computer/Explorer?XP Chkdsk, Using the Graphical Version (My Computer) - Scroll down to directions for using the Graphical interface.You might also take a look at Event Viewer and see if there are any clues, How To Use Event Viewer - Louis

11 more replies
Relevance 57.4%

When I boot up vista I get the above error message saying that it may not be compatible with the version of windows I am running. Check to see if the module is compatible with a 32 or 64 bit version of regsvr32.exe  How do I get rid of this

Answer:Users/Owner/App Data/local/ovrhics/ep0pp01.dll error message
Same computer ?

3 more replies
Relevance 57.4%

CommonLibrary.cpp(644) : -103012 : Error '-2' getting all user's application data directory.
Error: -103012 : Error '-2' getting all user's application data directory

This error is coming while executing most of the exe's on one of my systems.

More replies
Relevance 57.4%

We lost power to our computer one day last week and it hasn't worked properly since. Ad-aware would not open so I tried uninstalling and reinstalling. Somewhere during the installation process it freezes up and I get an error message saying it needs to close. When I try to open already installed programs I get an set up error that says error writing application data. I tried uninstalling and reinstalling those programs also with the same result. Here is my hijack this log if that helps at all:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:14:18 AM, on 1/1/1601
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Teaching Textbooks\Math 5\Ma... Read more

Answer:Error writing application data when opening a program.....

I ran combo fix and it seems to be working now.

1 more replies
Relevance 56.99%

Why are there 56 temp users in my Users folder? They don't appear in the regular Windows' User Accounts, so I can't delete them there. Should I just delete all these folders?

More replies
Relevance 56.17%

Hi all,

I've built another new PC, but for the first time I've installed a SSD to hold Win7 while all my data (in theory) will be held on my data drive (2 TB Hard Disk).

I've redirected most of my user folders just fine, "My Documents", My Music, Downloads etc. however when I installed my first game on this system, it's placing its saved games into "Documents"; note: NOT "My Documents".

Of course all my google searches throw back results for redirecting "My Documents" which is already done...

So is the "Documents" folder stuck in my user folder permanantly? Over the course of a year I don't doubt it will get very bloated with saved games, screenshots etc. so I really don't want it on my SSD drive and want to nip this problem in the bud if possible.

Basically is this possible to "fix" without relocating the entire "Users" folder?
p.s. Out of interest, I tried creating a "Documents" folder on my F: drive (my data disk) and it said that it already existed as "MY Documents"...Annoying

Answer:Documents vs. My Documents - Relocating folders off c: to data drive

Navigate to the start menu, Right click on Documents and assign a new location, By doing so, If your external HDD fails you will lose all your data.

9 more replies
Relevance 55.76%

I don't remember when, but I availed myself of the free Windows 10 upgrade sometime back. I was using 8.1 and I had, at some point, moved C:\Users and all its associated folders to E:. Everything has worked fine and Win10 didn't have a problem. I did notice that there was still a C:\Users, but the only folder it contains is Administrator.

This was probably not a good move to make. Moving data folders, like Pictures, Documents, etc., is fine, but moving the actual User Profiles was not such a good idea. My E: drive is no longer large enough to hold all my photos and other data. I bought a replacement drive large enough, but having my Users Profiles on E: is now a problem and I want to move them back to C:, only without the data folders.

I can delete all the existing data files from those default folders (I have backed them all up), so now I need to find a way to restore the Users folder and contents to C:. I've tried researching the problem, but found nothing that specifically applies to my situation. The TenForums article, "Relocating Users folder on an existing Windows installation" Seems to be as close as I can get. Unfortunately, this part has made me take pause and ask you all for help:

Kari said:

Be sure that the drive into which you are relocating the Users folder is empty or at least does not contain any Windows system folders, especially Users folder or parts of it from any current or previous Windows install... Read more

Answer:Restore Users Profiles back to C:\Users without data folders

Jim McClain said:

Do you know what I should do? Maybe Kari's still around and can reply? Any guidance would be appreciated.

If you used the Sysprep method to relocate the Users folder to E: drive, you can use the same method to relocate it back to C: drive. The warning you quoted is when doing this in a clean install, it does not apply when moving Users folder back to C: drive which will always be accepted and OK for Windows.

Follow these simple steps (looks more complicated than it in reality is!):

Create a new, temporary local user account, name it as you wish like "Dummy" or such (tutorial)Change Dummy's account type to administrator (tutorial)Sign out from all other user accounts, sign in to DummyDisable all other user accounts except Dummy, the one you are currently signed in (tutorial). No worries, accounts and their data will remain intact, deactivating (disabling) them temporarily is done because sometimes Sysprep causes existing user accounts to lose Start and Search / Cortana functionality. When we are ready we will again activate (enable) all old user accountsWhen done, open an elevated Notepad (right click and select Run as Administrator) copy the following code and paste it to a new text document]:

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="oobeSystem">
<component name=&q... Read more

10 more replies
Relevance 55.76%

My Student Office, saved documents, etc.,will not open. I get an error message 000008, "application failed to initialize". I thought something was wrong with my Office software, so tried to delete and reinstall. Software  CD will not install. Alert message said my computer was seriously infected, so I bought program and ran it. It said it deleted the infected programs, but I still get the same error message. Help!!!

Answer:"application failed to initialize" error. Office,documents,etc. won't open. Help

Go to the malware section of this forum and follow the instructions at the top of the page.

1 more replies
Relevance 54.94%


can anyone look at my log.txt file
after run:
DIR /AL /S C:\ >C:\log.txt

it has 200 MB, and it could have more but I stopped the process


Answer:windows 7 Application Data/Application Data/Application Data........

No sadly as no one is going to install iLivid to view the file.

What is your issue?
Windows version and Service Pack?

2 more replies
Relevance 53.71%

When I started up it says Win.ini corrupt. Then it starts
up as a new user losing track of Favorites and Start Menu
and Desktop Icons, Display and Folder attributes. Under
Documents and Settings it has added Dave.U5R2D5 in
addition to Dave which still has all the information. I tried
switching the 2 Filenames to get back to what it used to be but
gave an error message and didn't do it and started another new file.
Is there some way to use the old Dave file?

Answer:Lost settings, New user made in Documents and Settings

Hiya asd123321.

It sounds like you`ve re-installed the system from CD over the top of an existing system, giving you a fresh `Dave`. Have you recently run a repair or indeed, done a clean install ?

As a work-around, can you take the documents & favourites from the old `Dave` and put them in the new `Dave` so at least you`re back up and running again.


1 more replies
Relevance 53.3%

I logged into Windows and found that all of my user settings had been changed back to default. All the files that were in My Documents had been moved to Documents and Settings in C. I moved them back to My Documents and changed my settings back to the way I had them before. While surfing the internet a few minutes later, the system became unresponsive. I restarted the computer and logged in, but now I find that My Documents has completely disappeared. I can't even find my files in Documents and Settings. I had about 35 GB of music, so I hope I didn't just lose it all. Please help!

More replies
Relevance 53.3%

My girlfriend logs on with her user name (Mary) at the XP Pro welcome screen. Hers is the only user name shown. In Control Panel/Windows Accounts she is listed as the only user.

In Windows Explorer (C:/Documents and Settings) there are four folders:

1. All Users
2. Config.msi (empty)
3. Default User
4. Ex-husband?s name (it used to be his computer, so somehow he is still around)

All the user data of my girlfriend is actually saved in folder four. Also:

a) At the top of the Windows Explorer tree the ?My Documents folder? points to Ex-husband?s ?My Documents? folder.

b) Later in the tree there is another folder called ?Mary?s Documents? which also points to Ex-husband?s ?My Documents? folder and contains the same files.

So my questions are:

1. Can I safely change folder four to my girlfriend's name? Should/can this be done in Windows Explorer, or somewhere else?

2. Can/should I delete the folder called ?Mary?s Documents? which simply reproduces the files in Ex-husband?s ?My Documents?.

3. Can I safely delete the folders ?All Users? and ?Default User?, which do not contain my girlfriend?s user data?

4. Can I safely delete the empty ?Config.msi? folder?

5. I would like to keep the ?My Documents? folder which shows at the top of the folder tree as it is convenient for my girlfriend to find.

I hope this makes sense. Any suggestions much appreciated.


Answer:'Documents and Settings' and 'My Documents' query

1) I wouldn't, but it can probably be's hard to redirect those stupid Windows links. You could create your own shortcut to "Mary's Documents", copy the contents of the ex-husband's folder to the Mary's documents, then you should be able to delete it.

2) For safety's sake I wouldn't, but you could give it a shot... (or do what I said above)

3)No, they are default folders that WIndows uses for some mysterious purposes.

4)Definitely not!

5)Go to to find a registry hack which will let you delete the My Documents folders. Then add the new shortcut above.

Remember, if you delete something you shouldn't have, you can restore it from the recycling bin!:grinthumb

2 more replies
Relevance 53.3%

Hey im having a problem with my documents its stored on my computer under sean as my name but it has gone when i log on. It says my document/TEMP and my documents/Sean has been moved or changed because its still there but under documents and settings on the C drive. I just need help to get the Sean documents back on to my documents instead of TEMP being there cause it has ruined my whole profile. I cant save passwords etc for MSN or for games because when i shut down the computer itll just reset to TEMP an it wont have anything there on the documents. PLZ HELP thanks any help appreciated =)

Answer:My Documents.. moved and now is TEMP help!

Possibly a corrupt profile. MS Article on recovering data click here

3 more replies
Relevance 53.3%

Hi, for some reason I am seeing loads of files marked .tmp when I look for a word document, can anyone explain what they are and why they are appearing, I have about 40 of them in "my documents" Thanks

Answer:temp documents problem

I don't know how they got there, but if they are.tmp you can just delete them.

2 more replies
Relevance 52.89%

Today I removed/installed new Nvidia drivers for my GTX 480.

Now I have a new folder in my Users folder called TEMP (C:\Users\Temp). I have deleted this twice and Win7 just created a new one. I have installed new drivers before using the exact same procedure that I did today and have not had this happen before.

This Temp folder has all the same default folders and files as my User folder did (C:\Users\RJS) when I first installed Windows.

Does anyone know how to get rid of this and not have Win7 rebuild it? It is no big deal, but I just do not like my OS cluttered with useless stuff.

Answer:How do I get rid of C:\Users\TEMP

This is a temporary user account. It is generally created when there is a problem or forgotten password with a user profile and provides a temporary logon. I had one once and I think I had to go to Control Panel/Add Remove users and delete it from there.

8 more replies
Relevance 52.48%

I have a drive that had Vista Home Premium on it & NTFS as the file system. The drive went bad with over 100 K bad sectors. Preformed a hard drive recovery; After several days I managed to remap all the bad sectors so that I could read the drive when booting from a XP boot CD or a UBCD cd.

Now When I view the drives directory structure I can browse most of what is listed except for the Documents & Settings folder. When I try that one I get the message "Access Denied". I tried getting into the properties to see if I can change the properties but the Security tab did not show up.

I am a lot more familiar with XP than Vista. Is there an added security feature Vista has on the Documents & Setting folder that only Vista can open it. I tried using a Vista Recovery disk but it was not able to see the partition. Also I am not sure if there are any tools on the disk to recover files from a drive that no longer boots windows.

Any help would be greatly appreciated


Answer:Security Settings for Documents and Settings Folder

"Access Denied" is a proper and routine message encountered...when moving a hard drive from one system to another. Only impacts the Docs & Settings files/folders, all other files can be easily accessed.So can the Docs & Settings folders, by taking ownership of the files/folders.Taking Ownership in VistaLouis

2 more replies
Relevance 52.48%

Hello, I was downloading something and when I thought it was finished downloading and this screen pops up.

"C:\Documents & Settings\Sherry\Local Settings\Temporary Internet Files\Content.IE5\GRG7AN8J\arizup2(1).pdf"
"This action is only valid for products that are currently installed.
<OK> box

I see that this is a .pdf file and i'm not sure how to open these. Can someone give me some really really easy details on how to fix or open [download] this problem.


Answer:C:\Documents & Settings\Dave\Local!

Install adobe acrobat reader

1 more replies
Relevance 52.48%

In windows XP how do i access documents and settings/owner/local settings? When I run malwarebytes it goes into this folder and is there for ever. I would like to acces this and delete what is in there but I do not know how to get there.
Any help would be appriciated.

Answer:documents and settings/owner/local settings

Follow these steps!!
1. Go to my computer
2. Click on "Tools"
3. Go to "Folder options"
4. Go to "View"
5. Then click on the "Show hidden files and folders" Tab

Then you can go to the Documents and Settings/Owner/Local settings.

I am sure you will succeed but make sure you follow the first 5 steps after everything so that you can hide the files again. Some system files need to be kept hidden to avoid being removed or deleted accidentally

9 more replies
Relevance 52.48%

Hi I have recently noticed that in my c:users folder I have a folder called TEMP, I am certain that it wasn't there before and it is modified every time I boot up the computer. When I look inti this folder there isn't anything in there. Is it normal to have this folder?

Answer:temp folder in c:\users

Temporary folders can be placed anywhere. Check the environmental variables (Start-> Control Panel -> System -> Advanced System Settings -> Environment variables). Usually there are two temporary folders, TEMP and TMP defined for every user, as well as for the system. I usually put them away where I am unlikely to look, just to reduce clatter. It could be that in your system one of these folders is set to be in C:\Users.

Otherwise, check if you have installed any new programs recently, some programs create their own temporary folders.

Finally, if the folders is accessed at start-up, then you could look into the system's logs to find out which process is looking into the folder.

9 more replies
Relevance 52.48%

Ok, running windows xp home on a peer to peer network. Have done avast antivirus and ad aware scans.

Friday my computer locked up (dang farmville!). I got impatient and did a hard reboot (holding the power button down). Quickbooks also was open.

When it rebooted it did the blue screen Stack rebuild thing.

Now MS Outlook can't open the data files and the quickbooks data file also appears to have been corrupted.

An interesting thing - we have the carbonite internet backup service. Unfortunately, it seems to overwrite and not make any kind of incremental backups, so once it's backed up, that's the file you can restore. I was hoping to try to find a file that had been backed up in the morning, instead of right around the time I had the problem.

Anyway, when I browse to look at the user documents and settings folder on the BACKUP, it shows the application data and local settings folders, as normal. On the computer, those folders are now MISSING. I uploaded a screen shot on our website: (sadly too big to attach)

Any idea of a simple way to fix this?

I looked online and Microsoft Outlook stores the data in personal.pst - that file also appears to be missing.


Answer:Blah! Application Data Folder Gone & Outlook Data won't open

Got it figured out.

Was able to restore a recent backup from the Carbonite service of my quickbooks file and only had to redo one day of entries.

Then did some more looking at Outlook threads on the net and first found out how to unhide hidden folders - the Application Data and Local Settings folders were hidden. Then found a thread about a scanpst.exe utility that repairs outlook data files.

Now it seems I'm back up and running!

Thanks for trying to help! Even tho no one had magic answers yet, I can see people cared and looked at my problems.

We are NOT alone! LOL

1 more replies
Relevance 52.07%

I can't find a similar problem in search so ...

My computer did this really weird thing. I restarted my computer this morning, and to my horror, all my documents had disappeared. There were only three folders in my documents - My Music, My Pictures and My Videos, and these only contain the standard sample stuff. Basically, my user is like new again! All my installed programs were there however.

The weird thing is, on my dad and sister's users, they still have all their documents.

So I take deep breaths, and try to calm myself. After a desperate system restore which I knew wouldn't work, I check out the properties of the My Documents folder, and realise it is located at C:\Documents and Settings\TEMP.BABALOLA\My Documents. I also notice this folder has been created today.

So I go to Documents and Settings, and to my immense relief, all my documents are still there in the folder Owner. And also in Documents and Settings is the folder TEMP.BABALOLA.

So, I've found my stuff (and am backing up as I type this), but does anyone know WHY this has happened?? Where has this folder come from? Shall I just copy and paste the folder back into My Documents? What if it happens again?

Sorry for the long post, and any help would be much appreciated. Thanks for reading

Answer:My Documents disappeared - new TEMP folder in its place??

11 more replies
Relevance 52.07%

I am running Windows XP and have just recently not been able to access the internet. When I log on to a user I get the message that " C:\documents\......\locals\temp\csrss.exe not found " and after clicking ok the same message saying the file could not be run appears. I am guessing this is related to the failure by Internet explorer to load a web page. I have McAfee antivirus that did not seem to pick up a virus and I am running another scan now. I have a csrss application file in the system 32 folder and I have a folder in the windows folder named Prefetch that contains three others that are PF files. Again I can not access the internet on the machine. ( this is being done via Ipad ) I have ran the diagnostic from Internet explorer for connectivity and it can not resolve or connect. My internet connection is great otherwise. Any advice on a fix or answer woukd be greatly appreciated.

Answer:C:\documents\......\locals\temp\csrss.exe not found

Hello,And welcome to, before we can assist you with your question of: Am I infected? You will need to perform the following tasks and post the logs of each if you can.Malwarebytes Anti-MalwarePlease download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Full Scan"... Read more

3 more replies