[Solved] recently did format on windows 7

Yes that's what i wanted.
You're the second today to make that mistake... so you're not alone.

No you don't.

How is the system running?... any problems?

 

Hi Just-Me,

These are nothing to worry, they are hidden system files
Some of the tools we use will alter the 'Hidden Files' setting on your system so that the tool has full access to everything.
It's easy to change this back and hide those files again:

Click on Start ... Control Panel
Click on the Appearance and Personalization link .
Click on Folder Options.
Click on the View tab.
Then under Hidden Files and Folders.....Make sure there's a tick against.. Do not show hidden files and folders
Then click Apply and then Ok.

I normally explain how to remove them all when we are cleaning up at the end.

Yes they are basically the same.
I prefer TFC as you only have the one button to press...... it will clean out everything including all the browsers in one go.
It's entirely up to you which you want to use.
If you want to remove TFC, just right click on the icon and select delete. (it doesn't install to the system)

This is an interesting one.
None of the tools or fixes we used would have done this.
Look at the path to your Picture folder ... at the top:
and compare this to the path in the message:

Someone has moved your Picture folder or added a shortcut to it and the default path has subsequently been changed.

Look at the screenshot of mine:



can you see how yours and mine differ?

Moving the folder to the correct location should rectify the problem.
The Picture folder shouldn't be in the My Documents folder

 

Hi Just-Me,

Glad to hear that everything seems ok now.

Step 1
Restart MBAM.
Click on the Quarantine tab



If there are items in quarantine.....
Make sure everything is selected and then click Delete All.
Close MBAM.


Step 2
Double click on AdwCleaner.exe to run the tool again.

• Click on the Uninstall button.
• Click Yes when asked are you sure you want to uninstall.
• Both AdwCleaner.exe, its folder and all logs will be removed.

JRT and Frst can now be removed also.
Right click on the Desktop icon for each program and select delete.
You can also remove any files/reports relating to these programs from the Desktop as well.
There is also a folder at C:\Frst that can be deleted as well.

Step 3
Now you should Set a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which sometimes can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:

• Go to Start > Programs > Accessories > System Tools and click "System Restore".
• Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the Restore Point a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
• Then go to Start > Run and type: Cleanmgr
• Click "OK".
• Select the drive for cleaning then click OK (usually 'C' drive)
• Click the "More Options" Tab.
• Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.

Note:
By default, Windows Vista does not have the "Run" command on the start menu. It's easy to get this back.

1. Open the start menu.
2. Right click on a non-icon area and select "Properties".
3. Press the "Customize" button.
4. Scroll down and find the "Run command" checkbox.
5. Check it and press OK.
6. Press OK.

You now have your run command on the start menu.

To find out how you may have been infected....read this topic:
How did i get infected?


Glad I was able to help.

Safe surfing.