The Warring States of NPF

The Warring States of NPF (http://www.nuklearforums.com/index.php)
-   Dead threads (http://www.nuklearforums.com/forumdisplay.php?f=91)
-   -   Weird Files in my C:\, should I be concerned? (http://www.nuklearforums.com/showthread.php?t=3851)

Sky Warrior Bob 05-15-2004 08:20 AM

Weird Files in my C:\, should I be concerned?
 
For starters, they're all 0 kb big, and named weird like Ý or ¼÷¼÷¼÷¼÷¼÷ and they all have no extension. I've got the latest update of McAffee & Spybot, but thus far I've found nothing.

Should I just continue, as I have, and delete these files as they appear? Or is a dreaded re-install in my future? (I only did one at the end of April)

Sky Warrior Bob

Carnage 05-15-2004 08:21 AM

Maybe it's part of the Sasser worm. Can't say.

RaiRai 05-15-2004 10:01 AM

I keep getting links posting themselves on my desktop. Damn spyware. At any rate, what date were these files put into your folder?

Meddros 05-15-2004 10:18 AM

Try going to Mcafee's web site and look up the Sasser worm. IN there you will find a link to the stinger program. Download it and run to see if it finds anything. Certain viruses can get on the computer before you get the updates for Mcafee and then hide themselves from the virus scan programs. Also goto Google and search Ad-aware and Bazooka. No one single Spyware program finds everything. We use at least three to clean a computer completely at work. Ad-aware is made by Lavasoft and is free for the basic program you need. They and Spy-bot are one of the few that actually clean your machine instead of adding more to it in secret. Bazooka is another great program with one little hitch though. It only tells you what Spy-ware you have but will not remove it automatically, but instead will give you detailed instruction on how to remove it manually. So I don't recommend Bazooka for everyone because you will have to go into your systems Registry and that's a place you can really do some damage if you are not careful. You must be online for the instruction to work. Also make sure Spy-bot is really up to date. We've had a problem updating it lately. When you use the auto updater it always tells us it's up to date but it never is. You need to go to their main site and download the updates automatically. You should be scanning for at least 12,000 errors. If it is less you don't have the most current updates.

Just so you all know if you do get the Sasser or Qhost virus you will not be able to get to most of these websites. Let me know here and I will tell you how to fix the problem they cause. Then you can browse the web to remove said problems.

Sky Warrior Bob 05-15-2004 02:04 PM

Quote:

Originally Posted by RaiRai
I keep getting links posting themselves on my desktop. Damn spyware. At any rate, what date were these files put into your folder?

Generally, the date the file was created. From the ones I've been able to collect (I keep copies in a little compressed folder, but some have names that won't compress), they tend to be created around when I get home in the evenings.

Thus far, I haven't been able to find anything, but I've only tried stinger and have yet to try any of Meddros's other suggestions.

Sky Warrior Bob

RaiRai 05-15-2004 02:11 PM

I meant moreso what date did they start to appear. =3

I'm not technical at these things, but I'm having a similar problem so peoples advice would come in handy for me also. I just want to see what similarities there are.

Lockeownzj00 05-15-2004 05:03 PM

Use bazooka, it's a good detector for half spyware half trojans.

http://www.kephyr.com/spywarescanner/

Sky Warrior Bob 05-15-2004 05:50 PM

Quote:

Originally Posted by RaiRai
I meant moreso what date did they start to appear. =3

I'm not technical at these things, but I'm having a similar problem so peoples advice would come in handy for me also. I just want to see what similarities there are.

Heck if I know, I just started to take notice on Tuesday/Wensday and went about the business of deleting them. Wasn't paying too much attention, and really I was just in VIRUS, KILL IT!!! panicy mode, so I didn't start looking for any helpful details until after the fact.

I'm D/Loading Bazooka right now, and maybe that'll nix it. Then again, maybe not.

Sky Warrior Bob

Otaku Son 05-15-2004 07:47 PM

1 Attachment(s)
'Nuff typed.

Static Hamster 05-15-2004 08:07 PM

Wow, your dedicated. Sometimes programs that you install will put programs like that in you C:\

I wouldn't worry about it too much.

Unless it is viral...


All times are GMT -5. The time now is 02:41 AM.

Powered by: vBulletin Version 3.8.5
Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.