Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Over 20,000 Infected Files In "complete" Folder


  • Please log in to reply
5 replies to this topic

#1 heavyjavadrinker

heavyjavadrinker

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Vermont
  • Local time:05:29 PM

Posted 13 December 2007 - 01:26 PM

hi, i did a thorough scan with Avast! antivirus and it found over 20,000 infected files in
a folder
at C:/documents and settings/(user name)/complete

i have no idea how these files got there. there are thousands of zip files in a folder called
"complete". i enabled view hidden folders and i still don't see it. but everytime i do a scan
it's there. :thumbsup: what are these files? how did they get there?
Posted Image

does anyone know how to find the "complete" folder and delete the whole thing?
i can put a few at a time the Avast! quarantine chest and delete them but it takes
forever.

the virus description is Win32.VB.ie [wrm]


thanks!

Edited by heavyjavadrinker, 13 December 2007 - 01:29 PM.


BC AdBot (Login to Remove)

 


m

#2 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:05:29 PM

Posted 13 December 2007 - 01:51 PM

just to hazard a guess, they are copies of the virus/worm put in a P2P shared folder to infect others

open my computer and follow that path you wrote
Chewy

No. Try not. Do... or do not. There is no try.

#3 heavyjavadrinker

heavyjavadrinker
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Vermont
  • Local time:05:29 PM

Posted 13 December 2007 - 02:58 PM

thanks.
i did that. i went to my computer, C Drive, Documents and Settings, Christopher Schmidt
and there's nothing there called "Complete". even with hidden folders turned on.
here is C:/Documents and Settings/Christopher Schmidt/
Posted Image
i don't see it.
should i just continue deleting them using Avast! ?
any suggestions?

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,214 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:29 PM

Posted 13 December 2007 - 05:05 PM

Do you have Limewire installed ther is a folder there named complete. also download ,install SUPERAntiSpyware
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining.

Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet

Now reboot into Safe Mode:How to start Windows in Safe Mode
NOW Scan with SUPER
Open from the desktop icon or the program Files list
On the left, make sure you check C:\Fixed Drive.
Perform a Complete scan. After scan,Verify they are all checked.
Click OK on the summary screen to quarantine all found items.
Reboot
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 heavyjavadrinker

heavyjavadrinker
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Vermont
  • Local time:05:29 PM

Posted 14 December 2007 - 01:54 PM

i followed your advice and did the scan with super antispyware and after
4 hours it only detected tracking cookies. i saw it looking through the Complete folder
but it didnt do anything with the files. they're all still there. :thumbsup:
i cannot find the Complete folder when looking myself. I looked through ever folder
in that area, including the limewire folder and nothing comes up in a search. i'm going to try and delete
the infected .zip files again using Avast!

any other suggestions?

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,214 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:29 PM

Posted 14 December 2007 - 02:26 PM

I have not been able to come up with anything more. This is some type of malware and best thing is to let the HJT experts get inside.
Please folow these instructions Preparation Guide for use before posting a HijackThis Log
Then post those instructions here HijackThis Logs and Malware Removal by clicking on NEW topic. Give the post a name like 20,000 infected files.

Good Luck
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users