PDA

View Full Version : I have a realy big problem, please help!!!


Aurimas
08-01-07, 19:23
.

Titanium
08-01-07, 19:31
Press the delete button on your keyboard with the pictures selected. :)

If that doesnt work, do you get a particular error message when trying to delete them?

Edit: Hold on, did these emails come from a reliable source?

Aurimas
08-01-07, 19:37
.

Titanium
08-01-07, 19:41
Is the email you recieved reliable?
Whats the filename and file extension of the broken pictures?

Lord Icon
08-01-07, 19:41
Here's my suggestion:

Update and run your AV software and then do the same with your Anti-spyware software (Adaware, Spybot etc.)

Aurimas
08-01-07, 19:51
.

Titanium
08-01-07, 19:54
Norton isnt enough, download the following.

Spybot Search & Destroy (http://www.safer-networking.org/en/index.html)

Ad-Aware® SE Personal Edition (http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10045910.html?part=dl-ad-aware&subj=dl&tag=top5)

SpywareBlaster (http://www.javacoolsoftware.com/)
Update these Anti-spywares and then scan and delete the items it finds. :)

Aurimas
08-01-07, 20:08
.

Joseph
08-01-07, 20:13
Spybot Search & Destroy (http://www.safer-networking.org/en/index.html)

Ad-Aware® SE Personal Edition (http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10045910.html?part=dl-ad-aware&subj=dl&tag=top5)

SpywareBlaster (http://www.javacoolsoftware.com/)
ARE ALL FREEWARE!!!


Please answer about the attachments, Aurimas: do you know the sender or do you just save and open random attachments?

If the latter: you should never do that. Also: disable the preview option in Outlook Express. View > Layout > untick Preview option.

Aurimas
08-01-07, 20:16
.

Titanium
08-01-07, 20:25
There were just attackments.

So you had no idea what these attachments were? Never ever download attachments that you dont know about.

Aurimas
08-01-07, 20:30
.

Lord Icon
08-01-07, 20:32
There were just attackments.

We know those files were attachments. What we all want to know is if you know the sender (the person that sent you that email). Was your friend, co-worker or was just a spam email from someone you don't know?

Lord Icon
08-01-07, 20:34
Nothing found.
:hea:

Delete that email. That will take care of the attachments too. If you saved those files on your hard drive and can't delete them just boot into safe mode and then delete them.

Aurimas
08-01-07, 20:36
.

Lord Icon
08-01-07, 20:38
Don't move them around. Boot into safe mode and delete those files.

Aurimas
08-01-07, 21:01
.

Lord Icon
08-01-07, 21:06
What it means boot in safe mode?

It's a diagnostic mode in Windows. Windows loads with minimal configuration and generic drivers so that most of the problems you may have can possibly be corrected. You can access this mode by keep pressing, usually, F8 when you're starting up your computer.

Joseph
08-01-07, 22:39
Titanium :wve: i corrected the links in our posts (and our quoted posts) to the direct ones i copied from our Tech page. I simply had to, sorry. :o

Joseph
08-01-07, 22:47
@ Aurimas, very important:


you are learning now that you may NEVER open emails you don't know the sender of, you can be certain they are all spam and malware, in worse cases they are viruses and phishing mails ALL BAD!
To delete emails: do not send them to the "deleted messages folder" or your Recycle Bin. Instead, highlight them (=select with 1 left-mouse click), then press Shift + Del keys at the same time. ONLY THAT way they are immediately deleted from your PC.
As i said, UNtick the preview option in Outlook Express.

Titanium
09-01-07, 00:38
Titanium :wve: i corrected the links in our posts (and our quoted posts) to the direct ones i copied from our Tech page. I simply had to, sorry. :o

No problem, although the links in my post didnt work. ;)

Joseph
09-01-07, 00:43
Thanks. Maybe i forgot to save...:pi: anyway, fixed, again. :o

Aurimas
09-01-07, 12:10
.

KurtisLonely
09-01-07, 13:31
absolutely not, reboot your computer, while you get the black screen with all the info or something you press F8 OR if you are running on a windows ME computer or something, press and hold both the CTRL buttons ( I dont know for sure wich one it is, so I say both ) now you can choose if you want to get in the safe mode...
download Spybot S&D and Ad-Aware ( google it, I don't know the websites)
scan your computer first with your AV, and then with you anti-spyware programs, I recommend to don't use the anti-spyware programs at the same time! it scans slower...

if you scan you computer first with your anti-spyware, there is a chance that you activate the virus and then it's harder to remove...

[and I recommend to never use Norton, use AVG Anti-Virus (http://grisoft.com/doc/10/lng/us/tpl/tpl01) (especialy when you run on Windows Vista!)]
if you need anymore help, feel free to PM me or post your questions here...

Aurimas
09-01-07, 14:31
.

irjudd
09-01-07, 19:15
Have you tried just dragging the files to the recycle bin/trash can?

Aurimas
09-01-07, 20:25
.

Joseph
09-01-07, 23:01
get in the safe mode...
download Spybot S&D and Ad-Aware ( google it, I don't know the websites) These programs are linked in above posts... maybe you didn't read the whole thread? ;)


scan your computer first with your AV, and then with you anti-spyware programs, I recommend to don't use the anti-spyware programs at the same time! it scans slower... Wonderfull advise. Who in the world would run TWO scanning programs at the same time?!..... :confused: Of course you should never do that!


if you scan you computer first with your anti-spyware, there is a chance that you activate the virus and then it's harder to remove...
This is nonsense. scanning with a anti-spyware tool can NEVER activate a virus.


[and I recommend to never use Norton, use AVG Anti-Virus (http://grisoft.com/doc/10/lng/us/tpl/tpl01) (especialy when you run on Windows Vista!)]
There is no reason to not use Norton; it is an excellent antivirus program. It slows down the system start up and makes Windows a bit sluggish, but it does its job very thorough and reliable. AVG is good too. Aurimas does not use Vista (yet).


if you need anymore help, feel free to PM me or post your questions here...Please keep tech help public so that everybody with knowledge can contribute, and members are not sent into the wood with wrong advises. :)

Joseph
09-01-07, 23:16
Yes, but nothing. :( :( :( Today I was so angry because of them.
Please right-click on one of them. Then press the "PrtScr" button on your keyboard, open Paint, press Ctrl+V to paste the prinstcreen. Then click File > Save as...
In the "Filename:" box give it a name.
In the "Save as filetype:" box select JPEG.
Upload this picture to your image hoster (photobucket.com?) and post a link to it here.

Aurimas
10-01-07, 09:30
.

Joseph
10-01-07, 14:57
Thanks. Could you try to change its extension?
Left-click once on the NAME, then press PrtScr and save the printscreen... then again left-click once on the highlighted name, try to change the extension (=the part after the last dot). For instance if it says "picture.jpeg"...can you change jpeg to "iso". If you succeed, this is the way to make the file worthless. maybe you can delete it afterwards? Anyway, the printscreen you made, could you upload that too?
I'm determined to help you to get rid of this file. :)

Aurimas
10-01-07, 15:32
.

Joseph
10-01-07, 15:34
Can you copy the file(s), zip it, and upload it to somewhere i could download it from?

Aurimas
10-01-07, 15:40
.

Joseph
10-01-07, 15:54
Ahh, you replaced the printscreen with a better one. Now i see the proff of its mailiciousness. Yes, this is a Trojan in the form of a jpeg image, a nasty thing.

Download and install Startup Control Panel (http://www.mlin.net/StartupCPL.shtml).
Run it. Make a printscreen of the complete list what it shows in HKLM (Run) and post it please.

Like this picture (http://www.tombraiderforums.com/www.jozefdekkers.nl/Trforum/Computer/startup_control_panel1.jpg)shows.

Aurimas
10-01-07, 16:04
.

Joseph
10-01-07, 16:08
I edited. I never used this "startup control panel" program before, so just downloaded and installed it (the standalone exe version). Ahh, you replaced the printscreen with a better one. Now i see the proff of its mailiciousness. Yes, this is a Trojan in the form of a jpeg image, a nasty thing.

Download and install Startup Control Panel (http://www.mlin.net/StartupCPL.shtml).
Run it. Make a printscreen of the complete list what it shows in HKLM (Run) and post it please.

Like this picture (http://www.tombraiderforums.com/www.jozefdekkers.nl/Trforum/Computer/startup_control_panel1.jpg)shows.
Expand the panel and the text in it like in my picture.

Aurimas
10-01-07, 16:26
.

Joseph
10-01-07, 16:31
Yes but please expand the panel by grab and dragging the edge with the cursor to make it bigger, look again at my picture above... the point is that i would be able to read the complete lines...

Joseph
10-01-07, 16:39
Anyway, you can already try the following.
Right-click on This Computer > properties. On the System Restore tab, tick "shut OFF System Restore on all drives". Confirm with OK.
Reboot while pressing the F8 key to get into Safe Mode.
Open the My Ducuments folder and delete the bad files.
Reboot into normal Windows.

Aurimas
10-01-07, 17:04
.

irjudd
10-01-07, 17:08
And thats a really gross file name especially if it was a 'real' picture. Shame for downloading it :p

I have encountered some systems that require F4 to be pressed to get into safemode, so if F8 doesn't work try F4.

Aurimas
10-01-07, 17:13
.

Joseph
10-01-07, 17:21
While booting up, during the POST screen (that is the black screen with the white letters, summary info from your BIOS), press the F8 key.

Aurimas
10-01-07, 17:48
.

Joseph
10-01-07, 18:03
OK. It is not amongst your startup list (i analyzed).

Aurimas
10-01-07, 18:07
.

Joseph
10-01-07, 18:13
A suggestion i just tried:

Open Documents and Settings > *your name* folder.
Amongst the folders there, you see "My Documents" folder. Can you rename that to XMy DocumentsX.
Then create a new folder, call it "My Documents".

Report back please.

Joseph
10-01-07, 18:22
Forget my previous suggestion for now...

Try UNLOCKER (http://ccollomb.free.fr/unlocker/). (freeware)

Aurimas
10-01-07, 18:23
.

Joseph
10-01-07, 18:38
Unlocker not working? Pity.

My suggestion was (but i'm afraid it will not work as well but you could try):

Now open XMy documentsX. Select All (Ctrl+A), then press and hold Ctrl, and deselect the bad files.
Now paste all (so without the bad files) into your new My documents folder.
Make sure you copy via this way ALL files that belong in your original My documents folder EXCEPT the bad files.

Then, reboot into Safe Mode and try to delete the complete "XMy documentsX" folder.

Aurimas
10-01-07, 18:56
.

Joseph
10-01-07, 18:58
Ahh....? Success? :)

Aurimas
10-01-07, 19:35
.

Joseph
10-01-07, 19:44
I assume they are fully deleted.
But i recommend, NOW run Spybot Search & Destroy (updated), then run Ad-Aware SE(updated). Then do a full system scan with your antivirusscanner (updated!)

And please check that Windows recognizes your "new" "My documents" folder as the default, because the original is a system folder.

Aurimas
10-01-07, 19:47
.

Joseph
10-01-07, 19:51
Harmless screenshots, yes. :) But i hope they will be a reminder for you to always be very cautious before downloading anything.

I'm glad this method worked, ooofff! :tmb:

KurtisLonely
11-01-07, 16:02
There is no reason to not use Norton; it is an excellent antivirus program. It slows down the system start up and makes Windows a bit sluggish, but it does its job very thorough and reliable. AVG is good too. Aurimas does not use Vista (yet).
Yes there is...
Norton asked Microsoft to get the rights to get into the Kernel, and they got it, but now there are virusses wich 'act' like Norton, and now they can get in the Kernel, when they are in the Kernel, they can do everything they want.. and this may sound childish but let me explain a bit: Virusses say that they are Norton, Norton gets confused and don't know anymore who Norton is...
Norton doesn't work, and virusses can get in and out the Kernel, and can do everything they want.

Joseph
11-01-07, 16:23
I have never heard/read of this. Could you provide a Microsoft / Symantec or otherwise any knowledgeable third party source to back this story up? :)

Not that it sounds completely impossible or untrue to me, but -you know, i'd like to read more about it, not rumour. Interesting and important enough to know more about... :)

KurtisLonely
11-01-07, 16:39
Well, my neighbour said it, and he is a computer 'freak'....
I will ask him where he got this information from ok?

Joseph
11-01-07, 16:40
Please do. :)

KurtisLonely
19-01-07, 13:48
I have to look for it again.. but it was on Nucia.nl (www.nucia.nl)... it's dutch :(