hello team looking to clean up computer - Page 2

**grassi** · 01-11-2006, 05:10 PM

also i dont have norton firewall i think i disconnected\disabled it cause i have xindows xp built in firewall and a router(netgear)

**grassi** · 01-12-2006, 10:12 AM

okay oshwyn i think i understand that folder is suppose to be in my cookies i just dont remember it? Also i think that kaperski link was just to show me information on that folder? and that it maybe was from kaperski? sorry about the newbish replies i have. My mind works faster than my fingers, by time i type everything i forget where i was or was going. Yes my computer is running slow especially in this site and was not like this a couple of days ago. but first i have an important question on mimos security news thread internet connection security for windows i tried his 15 step test by clicking on try this in his post. Then went through test until test 9 which is copycat i clicked to run and it gave me a virus alert that said threat name hacktool and when i closed the alert there was another one that popped up and said bla bla unable to repair. Now i cant find these anywhere, i tried rescanning norton but it didnt come up. And over in hjt log everyone says its fine? I posted this question over at hjt log but nobody has replied just yet. Maybe someone can walk me through this test so i can explain whats going on better and take care of any of those threat alerts i have recieved. unable to repair and the word hack does not sound good.i would like to look into this for it might be why my computer is weird and slow. (all happend same day)

**oshwyn5** · 01-12-2006, 05:28 PM

Quote:

Originally Posted by grassi

http://www.kaspersky.com/downloads/k...an_unicode.cab link not working and found i 386 inc\kwindows and read file size 453mb and size on disk says 451 mb under prop. i deleted cookies and rebooted comp. and i still cant get rid of this folder it was not here before and created same time as smitty fraud.

Ah no, sorry, I was not telling you to click that link. I just meant that you had done an online scan at kaspersky and that explained the file I did not recognize. You can delete that one too . If you ever go back to kaspersky for an online antivirus scan they would probably insist on downloading the latest control anyway; basically that was just a file which allowed the online scan to work through your browser.

Quote:

okay oshwyn i think i understand that folder is suppose to be in my cookies i just dont remember it? Also i think that kaperski link was just to show me information on that folder? and that it maybe was from kaperski? sorry about the newbish replies i have. My mind works faster than my fingers, by time i type everything i forget where i was or was going. Yes my computer is running slow especially in this site and was not like this a couple of days ago. but first i have an important question on mimos security news thread internet connection security for windows i tried his 15 step test by clicking on try this in his post. Then went through test until test 9 which is copycat i clicked to run and it gave me a virus alert that said threat name hacktool and when i closed the alert there was another one that popped up and said bla bla unable to repair. Now i cant find these anywhere, i tried rescanning norton but it didnt come up. And over in hjt log everyone says its fine? I posted this question over at hjt log but nobody has replied just yet. Maybe someone can walk me through this test so i can explain whats going on better and take care of any of those threat alerts i have recieved. unable to repair and the word hack does not sound good.i would like to look into this for it might be why my computer is weird and slow. (all happend same day)

Correct; it is normally a hidden system / protected file so that you do not see it or get upset that if you manage to delete it it jsut comes back on reboot with a different size.
I suspect that in the course of cleaning things some one had you go to control panel / folder options / view
and had you check
"show hidden and system files"
and uncheck
"hide protected files"
so that you could get rid of your nasties.

I would reccommend at this stage you go back there and check
"Do not show hidden and system files"
and check
"Hide protected files"
so that things you should not mess with remain invisible.

I suspect that the tests you ran revealed that you are using windows firewall not norton and that you need to visit windows update.
Basically, those sites are safe and reputable; they run tests to reveal whether or not things are as secure as you think . Basically do not worry about the tests there, especially the leak test in the second post.
http://scan.sygatetech.com/
Is more than enough for the average user.
You will see what is normally sent (Your IP, Browser, Operating system, but should find that your computer name and running services etc are blocked)You can choose the stealth scan and trojan scan to make sure that nothing has opened ports in your firewall which would require you to rerun the firewall program access wizard.

Basically the program you downloaded from either of the sites in the thread you mentioned pretended to be various infestations to see whether your antivirus would detect them or your firewall would block them.It did so you are fine.

**grassi** · 01-12-2006, 09:41 PM

Thank you, i finally i understand everything you couldnt have explained this to a newbie any easier and also i think you may have found a problem i have. ever since i did this (as you qouted last reply) "I suspect that in the course of cleaning things some one had you go to control panel / folder options / view
and had you check
"show hidden and system files"
and uncheck
"hide protected files"
so that you could get rid of your nasties.

I would reccommend at this stage you go back there and check
"Do not show hidden and system files"
and check
"Hide protected files"
so that things you should not mess with remain invisible."

well this is very true, first for some reason i made sure, those boxes are checked these folders still show? This is a problem i had a long time ago with tetonbobs first hjt log i noticed these things are shown especially in my cprograms in windows folder there are normal looking folders then i scroll down i get weird text documents(type), labeled KB899587 ETC(several of these).type: ISU files,type: configuration files etc...second is it posible if i clicked on show hidden file types in safe mode would that bloch things up?? I could have done this?? lastly how can i show you what i see? I have a scanner/printer if this will help? Or maybe specific instructions on using any techsupport method. also what is the proper way to get rid of kasperski??

**grassi** · 01-13-2006, 04:20 PM

continued:::: i ran cc cleaner as this got rid of most of those weird folder,dats whatever they are, they were not there before until smitfraud took over. Man i wish i knew how to explain them?

01-11-2006, 05:10 PM	#21 (permalink)
grassi TSF Enthusiast Join Date: Dec 2005 Location: upstate, n.y. Posts: 935 OS: xp pro, sp3 My System	also i dont have norton firewall i think i disconnected\disabled it cause i have xindows xp built in firewall and a router(netgear) Last edited by grassi; 01-11-2006 at 05:11 PM.

01-12-2006, 09:41 PM	#24 (permalink)
grassi TSF Enthusiast Join Date: Dec 2005 Location: upstate, n.y. Posts: 935 OS: xp pro, sp3 My System	Oshwyn5 Thank you, i finally i understand everything you couldnt have explained this to a newbie any easier and also i think you may have found a problem i have. ever since i did this (as you qouted last reply) "I suspect that in the course of cleaning things some one had you go to control panel / folder options / view and had you check "show hidden and system files" and uncheck "hide protected files" so that you could get rid of your nasties. I would reccommend at this stage you go back there and check "Do not show hidden and system files" and check "Hide protected files" so that things you should not mess with remain invisible." well this is very true, first for some reason i made sure, those boxes are checked these folders still show? This is a problem i had a long time ago with tetonbobs first hjt log i noticed these things are shown especially in my cprograms in windows folder there are normal looking folders then i scroll down i get weird text documents(type), labeled KB899587 ETC(several of these).type: ISU files,type: configuration files etc...second is it posible if i clicked on show hidden file types in safe mode would that bloch things up?? I could have done this?? lastly how can i show you what i see? I have a scanner/printer if this will help? Or maybe specific instructions on using any techsupport method. also what is the proper way to get rid of kasperski?? Last edited by grassi; 01-12-2006 at 09:52 PM.

01-12-2006, 10:12 AM	#22 (permalink)
grassi TSF Enthusiast Join Date: Dec 2005 Location: upstate, n.y. Posts: 935 OS: xp pro, sp3 My System	okay oshwyn i think i understand that folder is suppose to be in my cookies i just dont remember it? Also i think that kaperski link was just to show me information on that folder? and that it maybe was from kaperski? sorry about the newbish replies i have. My mind works faster than my fingers, by time i type everything i forget where i was or was going. Yes my computer is running slow especially in this site and was not like this a couple of days ago. but first i have an important question on mimos security news thread internet connection security for windows i tried his 15 step test by clicking on try this in his post. Then went through test until test 9 which is copycat i clicked to run and it gave me a virus alert that said threat name hacktool and when i closed the alert there was another one that popped up and said bla bla unable to repair. Now i cant find these anywhere, i tried rescanning norton but it didnt come up. And over in hjt log everyone says its fine? I posted this question over at hjt log but nobody has replied just yet. Maybe someone can walk me through this test so i can explain whats going on better and take care of any of those threat alerts i have recieved. unable to repair and the word hack does not sound good.i would like to look into this for it might be why my computer is weird and slow. (all happend same day)

01-13-2006, 04:20 PM	#25 (permalink)
grassi TSF Enthusiast Join Date: Dec 2005 Location: upstate, n.y. Posts: 935 OS: xp pro, sp3 My System	continued:::: i ran cc cleaner as this got rid of most of those weird folder,dats whatever they are, they were not there before until smitfraud took over. Man i wish i knew how to explain them?