Thank you for the greeting and Happy New Years to you. A little festive pic for you at the bottom.
I think we might have got it.
This file was a tad suspicious, unless of course, the laptop came over on the Mayflower.
C:\hiberfil.sys created 1/1/1601 6:00 AMHere's some info about hiberfil and what it is. If you (your friend) uses hibernation on the laptop, just do what you did and check enable.
http://forums.vnunet.com/message.jspa?messageID=677239So then, if everything is ok, it's time to clean up.
Click the start button, click run and copy and paste this line in to the box and click ok
combofix /uOpen OTMOVEIT then click the Clean Up button. You may get prompted by your firewall that OTMoveIt wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will delete all the tools you have downloaded plus itself.
Download and run this program. When first run it will be in demo mode to show you what it will remove, have a look and then run it in real mode.
CleanUpTo clear existing restore points and make a new one
Create a new restore point
You must be logged on to an administrator account
Go to Start - All Programs - Accessories - System Tools - System Restore.
Click Create a restore point, and then click Next.
In the text box labeled Restore Point Description, type a name for this restore point , click create
Remove old restore points
Disk Cleanup
- Go to Start - All Programs - Accessories - system tools. Launch the Disk Cleanup tool and let it run. When it finishes a box with tabs will appear, select the more options tab. On this tab you will find a section for System Restore. If you press the Clean Up button for that section, Windows will delete all restore points except for the most recent one.
You can also delete the notepads and logs you may have saved to your desktop. Empty the recycle bin.