NEW FOLDER APPEARS IN DOCS AND SETTINGS

  • Thread starter Thread starter Malcolm
  • Start date Start date
M

Malcolm

We run two machines, one of which acts as our link to the internet via
an ADSL modem. Scans by Avast show nothing, but in the Documents and
Settings folder a new folder has appeared. This seems to copy the users
folder (lets say it is call Alpha) as alpha.ALPHA. When I try to delete
or change the name of this I am told that it is in use, and it seems to
have become the default folder on startup.

I have tried going in as administrator, and this does enable me to
delete the folder, but after rebooting as the user it appears again.

We have lost our desktop image, windows search does not open, and IE
will not let me access some sites (notabley Symantech) but will permit
others.

Any clues. please?
--
Regards
Malcolm

Clarke Associates Limited
tel: +44 (0)117 9268864
fax: +44 (0)117 9226437
www.clarkeassoc.com
 
RE: in the Documents and Settings folder a new folder has appeared. This
seems to copy the users folder

A friend of mine has had this happen. The new folder is called Lithium. It
has shoved her out of 'administrative' user. She has done a 'hijackthis log'
and posted on the Spywareinfo forum.
http://forums.spywareinfo.com/index.php.

The forum requires registration in order to post and they send you an e-mail
to confirm. The assistance is very high on that forum; particularly
translating the logs produced by the software HijackThis.

I think this issue might circulate around a backdoor trojan. There are
several backdoor.lithium types. The Symantec(Norton) site has several
removal tools. It appears to me important to establish exactly which
backdoor trojan is in place because each removal tool aims at different
files.

I hope there is more input on this group into your inquiry.

Rose
 
Your description make me think that your users profiles may be corrupted.
When a user profile is corrupted Windows NT and 2000 used to copy the new
active one to "old_profile.new_profile" directory... and create it brand
new... The behavior you describe is normal... For IE and windows search,
does it appears also in a new profile user ?

regards
bob
 
-= J.A.N.U.S said:
Your description make me think that your users profiles may be corrupted.
When a user profile is corrupted Windows NT and 2000 used to copy the new
active one to "old_profile.new_profile" directory... and create it brand
new... The behavior you describe is normal... For IE and windows search,
does it appears also in a new profile user ?

regards
bob
Click to expand...

This sounds possible. I assume that you are recommending that I create
a new user and see what happens. I'll give that a try. I'm using XP
Home. by the way.

Malcolm
--
Regards
Malcolm

Clarke Associates Limited
tel: +44 (0)117 9268864
fax: +44 (0)117 9226437
www.clarkeassoc.com
 
Back
Top