Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help Viruses In A Folder I Cannot Find Or Open


  • Please log in to reply
25 replies to this topic

#1 justnothing

justnothing

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 22 January 2008 - 07:18 AM

I was scanning with Spyware Doctor, I noticed it was scanning some folder C:\Documents and Settings\networkservice.NT AUTHORITY\FAVORITES and it seemed to have virus files in it, altough the antivirus scanner didn't detect them. There was also some old bookmarks there.

I couldn't open the folder or even find it. I can only open the C:\Documents and Settings\networkservice.NT AUTHORITY\ but it doesn't seem to have the FAVORITES-folder?

How can I access it so I can remove those files found in it?

Edited by justnothing, 22 January 2008 - 07:35 AM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,092 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:42 PM

Posted 22 January 2008 - 09:50 AM

Are you sure about the full path? Some scanners go so fast that its easy to misread it. If your not finding that folder and the scan did not detect anything, it may not exist. To be sure, repeat your scan and see what happens.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 justnothing

justnothing
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 22 January 2008 - 10:14 AM

I stopped the scanner when it was scanning the files to look, and it shows old bookmarks and some strange exe's. I've done zonealarm and antivir scan, nothing. I cannot actually open the folder (even I have the path of it), just a window "cannot be found" pops up when trying to open it with the "Run.." command.

Edited by justnothing, 22 January 2008 - 10:16 AM.


#4 JDM2

JDM2

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 22 January 2008 - 10:34 AM

Have you run an SAS scan in safe mode? Maybe try that, and see what it finds.

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,092 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:42 PM

Posted 22 January 2008 - 10:51 AM

I still recommend you repeat your scan to confirm its existance.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 justnothing

justnothing
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 27 January 2008 - 02:59 PM

I did everything, scanning in safe mode etc with lots of antivirus progs, no dettections of any kind. I even did a custom scan to check out just those folders. I managed also get open the folder which contained some old IE bookmarks, they were some ink-files and when I clicked on one, it said it doesn't exist.

#7 justnothing

justnothing
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 28 January 2008 - 02:16 PM

Does anyone know.. When I'm scanning I clearly can see the folder contains something like msnpaint.exe, pony.exe stuff.. but when I try to open that folder it "doesn't exist". Is there a way to know if those files are inactive or do they function? No popups or anything is appearing on my computer.

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,092 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:42 PM

Posted 28 January 2008 - 02:23 PM

How many user accounts are set up on your computer? The scan may be finding this stuff on another user account which you cannot see from yours when you look.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 justnothing

justnothing
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 28 January 2008 - 03:17 PM

Only one. Is it safe to assume that those files aren't functional as I have scanned thousand times with different antivirus progs and nothing has been found?

#10 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,092 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:42 PM

Posted 28 January 2008 - 03:38 PM

Maybe you can navigate your way there using the command prompt.

Go to Start > Run and type: cmd
press Ok
To change to the ROOT directory, at the command prompt type: cd \
press Ok
at the command prompt type: cd \documents and settings
press Ok
continue until you get to the directory where you saw these files
When you get there, at the command prompt type: dir /as /ah
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#11 justnothing

justnothing
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 29 January 2008 - 01:39 PM

I can't do it. Is it possible to know if those files are working or are they just some "ghost" traces? My antivirus programs don't find anything, no matter how I do the scans.

#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,092 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:42 PM

Posted 29 January 2008 - 01:49 PM

The whole issue sounds very odd. I don't know what SD is finding/showing while scanning. Its not detecting any malware, nor are any of your other anti-malware scans and your not finding anything on your system when doing your searches.

Can you confirm whether Windows is Reconfigured to show hidden files, folders. Double-click on My Computer, go to Tools > Folder Options and click on the View tab. Under Hidden Files and Folders, check "Show hidden files and Folders", uncheck "Hide Protected operating system Files (recommended)", uncheck "Hide file extensions for known file types", and hit Apply > OK.

If it is, then I don't have an explanation as to what you saw during the scan.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#13 justnothing

justnothing
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 31 January 2008 - 09:13 AM

Seems that those files cannot be accessed or even seen unless I'm scanning and stopping on them, but is it safe to assume those files aren't functioning? Antivirus programs or keylogger detectors cannot find anything. I posted HJT on some forum and it was clean.

Edited by justnothing, 31 January 2008 - 09:15 AM.


#14 justnothing

justnothing
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 03 February 2008 - 02:23 PM

I have a screenshot.

http://www.hostdump.com/images/36111fsfsdfsdsfdsfd.JPG

Seems that it's impossible to reach..

#15 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,092 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:42 PM

Posted 03 February 2008 - 03:40 PM

At the C:\Documents & Stettings\NetworkService.NT AUTHORITY> prompt, type dir /as /ah
press Enter.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users