[AT] Off topic, computer related.

[charliehill]

Update.

I've gotten this thing beat down to two files that I can't remove 
.....YET....   I was finally able to download Spybot search and destroy but 
it won't get these files either or even find them.  I've found some web 
sites dedicated to this problem but the solutions are manual solutions that 
require going into a particular folder and substituting an instruction 
stream that has to be cut and pasted from the web site.  First I have to get 
comfortable that the web sites are legit and then get comfortable with the 
proceedure but I'm gonna do it.

If any of you ever do a web seach, click on a link and then think to 
yourself that the link took you somewhere different than what you thought 
you might have the problem.   Look for these files:

Now it's comming up clean except two files:  C:Documents and settings\All
>> Users\applications Data\Temp:A8ADE5D8:$Data

and  C:Documents and
>> settings\All Users\applications Data\Temp:DFC5A2B2:$Data
>>

If you have either of these files or a similar file with a differerent 
alpha/numeric stream but in applications data\Temp or if you find any files 
that have the extension $DATA then you need to figure out how to get rid of 
them.  I don't know how long I've had this problem but for months, maybe 
over a year my computer has been slow and I've often gone to web sites where 
I thought the link was a misrepresentation of what the web site really was. 
If they hadn't gotten greedy and started doing stuff that made my computer 
unusable there's no telling how  long they would have gotten away with it.

By the way,  I run anti-virus and anti-spyware software and keep my drive 
cleaned up.  I don't know exactly when or how the problem got started.  I 
guess there must have been a period of time that my protection was off for 
some reason.

Thanks to all that helped me on the list and especially to Mike Sloane for 
repeatedly helping me off list.

Charlie

----- Original Message ----- 
From: "charliehill" <charliehill at embarqmail.com>
To: "Antique tractor email discussion group" <at at lists.antique-tractor.com>
Sent: Wednesday, March 17, 2010 7:44 AM
Subject: Re: [AT] Off topic, computer related.


I think I might have it whippped for now with the use of Trend Micro's
Rootkit removal tool.  There's no telling what damage I might have done to
some files in the process but I'm running again, at least for now.   I
haven't had enough time to really test it out yet so it might have just been
a temporary fix.


----- Original Message ----- 
From: "Mattias Kessén" <davidbrown950 at gmail.com>
To: "Antique tractor email discussion group" <at at lists.antique-tractor.com>
Sent: Wednesday, March 17, 2010 2:43 AM
Subject: Re: [AT] Off topic, computer related.


> Charlie,
> I've read some forums and from what I can see the solutions vary but most
> include. resetting your computer to a point before infection and deleting
> some files or downloading a file to fix it. One of those downloadable
> files
> was made so you could get it on a USB-stick and the get it into your
> system,
> it even changed it filename by random so it wouldn't be detectable.
> I wish I wasn't so short of time right now. But my advice would be get on
> a
> public computer or a friends, bring an USB-stick and browse some geek
> forums.
>
> Mattias
>
>
> 2010/3/17 Frank <gremaux at midrivers.com>
>
>> So will it also back up spyware? And where do we find it?
>>
>>
>> -----Original Message-----
>> From: at-bounces at lists.antique-tractor.com
>> [mailto:at-bounces at lists.antique-tractor.com] On Behalf Of H. L. Staples
>> Sent: Tuesday, March 16, 2010 6:26 PM
>> To: at at lists.antique-tractor.com
>> Subject: Re: [AT] Off topic, computer related.
>>
>>
>> Simple solution to backing up your data.
>>
>> Just use Carbonite. Everything is backed up off site so no worries if
>> tragedy strikes, fire; storm etc.
>>
>> Any time you are connected to the Internet the  program takes care of
>> backing up your files that have changed.
>>
>> H. L. Staples
>> McLoud, Oklahoma
>> USA
>> _______________________________________________
>> AT mailing list
>> http://www.antique-tractor.com/mailman/listinfo/at
>>
>> _______________________________________________
>> AT mailing list
>> http://www.antique-tractor.com/mailman/listinfo/at
>>
> _______________________________________________
> AT mailing list
> http://www.antique-tractor.com/mailman/listinfo/at
>
>
>
>
> =======
> Email scanned by PC Tools - No viruses or spyware found.
> (Email Guard: 7.0.0.18, Virus/Spyware Database: 6.14570)
> http://www.pctools.com/
> =======





=======
Email scanned by PC Tools - No viruses or spyware found.
(Email Guard: 7.0.0.18, Virus/Spyware Database: 6.14570)
http://www.pctools.com/
=======
_______________________________________________
AT mailing list
http://www.antique-tractor.com/mailman/listinfo/at




=======
Email scanned by PC Tools - No viruses or spyware found.
(Email Guard: 7.0.0.18, Virus/Spyware Database: 6.14570)
http://www.pctools.com/
======= 





=======
Email scanned by PC Tools - No viruses or spyware found.
(Email Guard: 7.0.0.18, Virus/Spyware Database: 6.14580)
http://www.pctools.com/
=======