Folders created by virus in Documents and Settings?

  • Thread starter Thread starter Jess
  • Start date Start date
J

Jess

Hello,

Some program seems to be creating new folders in "Documents and Settings",
as follows:

PC1$
PC1$.Workgroup.000
PC1$.Workgroup.001 and so on and on... (last time I checked I had to delete
up to ...Workgroup.099)

Is this a virus? Or could I have messed up some Windows 2000 settings?

Would appreciate your help.


Jess
 
From: "Jess" <[email protected]>

| Hello,
|
| Some program seems to be creating new folders in "Documents and Settings",
| as follows:
|
| PC1$
| PC1$.Workgroup.000
| PC1$.Workgroup.001 and so on and on... (last time I checked I had to delete
| up to ...Workgroup.099)
|
| Is this a virus? Or could I have messed up some Windows 2000 settings?
|
| Would appreciate your help.
|
| Jess
|


Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Ad-aware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt512.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) Update Ad-aware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
5) Using both the Trend Sysclean utility and Ad-aware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point

* * Please report back your results * *
 
From: "Jess" <[email protected]>

| did it. negative. nothing detected.
|
| if it's a virus it must be an unknown one.

Try the below online scanners...

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Panda ActiveScan - Free online scanner
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Computer Associates:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

DialogueScience:
http://www.antivir.ru/english/www_av/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

BitDefender
http://www.bitdefender.com/scan/license.php

Freedom Online scanner
http://www.freedom.net/viruscenter/index.html
 
Back
Top