And finally the log from the ewido scan...

Attached Files

New Text Document (2).txt (33.4 KB, 1 views)

Oh, about the SubSeven stuff... Just so you know, I am not a hacker or anything, a kid that I used to be very good friends with just turn into a complete 'A' hole one day (and thats putting it nicely). So I was gonna get back at him, couldn't bring myself to stoop to his level though. Dunno why I chose to ignore it in the scan though.

I was indeed gona ask about those subseven entry's , lol. But other then that the Ewido log looks good.

Did you try the instructions i posted above?

Ah, yes, thanks.

There was no searchbar to uninstall; the Remote Packet Capture Protocol was already stopped, but startup was set to manual so I just changed it; deleted rpcapd with HJT; I only had to remove the O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} - entry as the other two were already gone when I rescanned; and the messenger service was already disabled, the site to get that util is cool though, definitely bookmarking it :-).

So, after all that, obviously there were things that could be changed, but was I correct in thinking that it was the download manager that screwed up and corrupted that DIR by creating a duplicate subdir? And now how do I fix it? I scanned the drive with OnTrack RecoverySuite, it looks as if everything is still there, plus some **** that I deleted long ago, heh, however in order to recover it, I need almost 7GB of free space (which doesn't make any sense because there is 20GB+ in that DIR). I barely have 2 free gigs spread over 5 partitions, is there any way to just simply fix it without needing to copy and rewrite the data elsewhere?

That might be part of/the cause of youre problem , to ensure proper operations you should always have atleast 15% free space on each partition.


But i don't know that IDA app myself , but here is a link to the manufacturers support forum. They probebly can give better advice about it:

http://forum.westbyte.com/

Here are a couple of screenshots of what I see, I figured they may be helpful. In windows, only a single DIR is uncorrupted, in Linux, most things can be seen, and one of the things you'll notice is that there are two DIRs with the same name. I figured adding a 2 to one of them might help fix this issue, it did not. Should I try deleting the second one?

Attached Images

	DirectoriesScreenShot.jpg (94.5 KB, 2 views)
	LinuxScreenshot2.jpg (95.0 KB, 3 views)