Folder

I have a strange folder that pops up on reboot. There is nothing in it, and
I delete it, reboot, and it comes back. I'm running WinXP home with Sp3. My
software helpers are MBAM, SAS, MRT, Stinger, and Microsoft Security
Essentials but none of them find anything. Can anyone help?
..
Eric
..

 

I forgot the screen shot.

 

Eric Allen wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> I forgot the screen shot. <!--colorc--><!--/colorc-->

Twice

 

Eric Allen wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> I forgot the screen shot.
>
> <!--colorc--><!--/colorc-->

HINT: do not put attachments or actual images in the Microsoft
forums/groups... provide LINKS to where you have placed them.

--
MEB

Windows Info, Diagnostics, Security, Networking

The "real world" of Law, Justice, and Government
___---

 

I don't have a un-rar-er handy, and I'm not sure what good a screenshot
would do anyway (unless it is a very strange *looking* folder).

Maybe you could tell us something about the folder such as name and
location. You could maybe get some hint from the "properties" of the
folder (such as "owner" under security).


"Eric Allen" <Eric-Allen@peoplepc.com> wrote in message
news:ufaL6Y0UKHA.4360@TK2MSFTNGP04.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>I forgot the screen shot.
>
> <!--colorc--><!--/colorc-->

 

An image of an empty folder named "Program" is not very helpful toward
diagnosis. How about giving the full path of the folder? Go up one
level from your screen shot and then right-click the folder and
copy-paste the folder's complete path into a follow up in this thread.

 

"Geoff" <geoff@invalid.invalid> wrote in message
news:did1e5d2tppe8kuk2llkjhn5h6o3jvktrv@4ax.com...
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> An image of an empty folder named "Program" is not very helpful toward
> diagnosis. How about giving the full path of the folder? Go up one
> level from your screen shot and then right-click the folder and
> copy-paste the folder's complete path into a follow up in this thread.<!--colorc--><!--/colorc-->

Make sure the folder properties (under tools) folder options
(any from normal folders) is set to show extensions and to
unhide system files...select apply all.

Then be aware the 'Programs' folder in Windows root
(the boot OS partition for that OS usually C:/) is where
programs are run during start/bootup (automagically).

So one of the security tools installed may be doing
some work either at OS shutdown or startup but
this has to be checked at or via those programs
specific forums, and check their 'help' files.

Maybe Google/Bing with the complete path and
security tools name just as a starting point.
Example to online search (include " marks).
"C:\Programs" mbam.exe

'Seek and ye shall find'
NT Canuck

 

From: "MEB" <MEB-not-here@hotmail.com>

| Eric Allen wrote:<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> I forgot the screen shot.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->



| HINT: do not put attachments or actual images in the Microsoft
| forums/groups... provide LINKS to where you have placed them.

Actually, Microsoft allows attachments on their server.
However, posting a RAR of a BMP is dump. A simple compressed JPEG would suffice.

--
Dave

Multi-AV -

 

From: "Eric Allen" <Eric-Allen@peoplepc.com>

| I have a strange folder that pops up on reboot. There is nothing in it, and
| I delete it, reboot, and it comes back. I'm running WinXP home with Sp3. My
| software helpers are MBAM, SAS, MRT, Stinger, and Microsoft Security
| Essentials but none of them find anything. Can anyone help?
| .
| Eric
| .


Chances are EXPLORER is in the StartUp and thus you get a empty program folder.

As Geoff noted, it would be MORE helpful if we had a fully qualified name and path.

--
Dave

Multi-AV -

 

David H. Lipman wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> From: "MEB" <MEB-not-here@hotmail.com>
>
> | Eric Allen wrote:<!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> I forgot the screen shot.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
>
>
>
> | HINT: do not put attachments or actual images in the Microsoft
> | forums/groups... provide LINKS to where you have placed them.
>
> Actually, Microsoft allows attachments on their server.
> However, posting a RAR of a BMP is dump. A simple compressed JPEG would suffice.
> <!--colorc--><!--/colorc-->

Oh, I know their allowed, but who actually lets these get loaded
anymore... no one that knows anything about malware...

--
MEB

Windows Info, Diagnostics, Security, Networking

The "real world" of Law, Justice, and Government
___---

 

On Thu, 22 Oct 2009 16:10:28 -0500, "NT Canuck"
<remove_ntcanuck@hotmail.com> wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
>"Geoff" <geoff@invalid.invalid> wrote in message
>news:did1e5d2tppe8kuk2llkjhn5h6o3jvktrv@4ax.com...
><!--coloro:green--><span style="color:green <!--/coloro-->
>> An image of an empty folder named "Program" is not very helpful toward
>> diagnosis. How about giving the full path of the folder? Go up one
>> level from your screen shot and then right-click the folder and
>> copy-paste the folder's complete path into a follow up in this thread.<!--colorc--><!--/colorc-->
>
>Make sure the folder properties (under tools) folder options
>(any from normal folders) is set to show extensions and to
>unhide system files...select apply all.
>
>Then be aware the 'Programs' folder in Windows root
>(the boot OS partition for that OS usually C:/) is where
>programs are run during start/bootup (automagically).
>
>So one of the security tools installed may be doing
>some work either at OS shutdown or startup but
>this has to be checked at or via those programs
>specific forums, and check their 'help' files.
>
>Maybe Google/Bing with the complete path and
>security tools name just as a starting point.
>Example to online search (include " marks).
>"Crograms" mbam.exe
>
>'Seek and ye shall find'
>NT Canuck
><!--colorc--><!--/colorc-->

His screen shot shows "Program" not "Programs". The full path will be
listed in the Properties dialog as "Location" and it can be selected
and copied.

 

"Geoff" <geoff@invalid.invalid> wrote in message
news:cno1e59a9lb5g8fut79ukb08eu8j42dc8s@4ax.com...
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> His screen shot shows "Program" not "Programs". The full path will be
> listed in the Properties dialog as "Location" and it can be selected
> and copied.<!--colorc--><!--/colorc-->

Could be \program just as well, it's an fyi, there are many
recent malware that do not even have or show paths, so
this insert was just a consideration not an absolute.
"cannot find c:\program"

'Seek and ye shall find'
NT Canuck

 

From: "MEB" <MEB-not-here@hotmail.com>

| David H. Lipman wrote:<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> From: "MEB" <MEB-not-here@hotmail.com><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> | Eric Allen wrote:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>>> I forgot the screen shot.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->


<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> | HINT: do not put attachments or actual images in the Microsoft
>> | forums/groups... provide LINKS to where you have placed them.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> Actually, Microsoft allows attachments on their server.
>> However, posting a RAR of a BMP is dump. A simple compressed JPEG would suffice.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->


| Oh, I know their allowed, but who actually lets these get loaded
| anymore... no one that knows anything about malware...

ME !

Like I wrote... "A simple compressed JPEG would suffice."

--
Dave

Multi-AV -

 

David H. Lipman wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> From: "MEB" <MEB-not-here@hotmail.com>
>
> | David H. Lipman wrote:<!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> From: "MEB" <MEB-not-here@hotmail.com><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
> <!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> | Eric Allen wrote:
>>>>> I forgot the screen shot.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
>
>
> <!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> | HINT: do not put attachments or actual images in the Microsoft
>>> | forums/groups... provide LINKS to where you have placed them.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
> <!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> Actually, Microsoft allows attachments on their server.
>>> However, posting a RAR of a BMP is dump. A simple compressed JPEG would suffice.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
>
>
> | Oh, I know their allowed, but who actually lets these get loaded
> | anymore... no one that knows anything about malware...
>
> ME !
>
> Like I wrote... "A simple compressed JPEG would suffice."
> <!--colorc--><!--/colorc-->

Yeah but you know what you're doing <grin>, gotta remember all the
others not so technically inclined who use the group, *and* the
distribution.

Certainly you aren't suggesting everyone enable pictures and
inclusions,,, are you?

--
MEB

Windows Info, Diagnostics, Security, Networking

The "real world" of Law, Justice, and Government
___---

 

From: "MEB" <MEB-not-here@hotmail.com>

<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> ME !<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> Like I wrote... "A simple compressed JPEG would suffice."<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->


| Yeah but you know what you're doing <grin>, gotta remember all the
| others not so technically inclined who use the group, *and* the
| distribution.

| Certainly you aren't suggesting everyone enable pictures and
| inclusions,,, are you?


A picture is worth a thousand words. If a graphic (pure JPEG, GIF, etc) can help make a
point to get assistance, yes. Attach a graphic.

Note the size limitatation is ~73KB.

--
Dave

Multi-AV -

 

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:u0SCX31UKHA.3720@TK2MSFTNGP02.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> From: "MEB" <MEB-not-here@hotmail.com>
>
> | Eric Allen wrote:<!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> I forgot the screen shot.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
>
>
>
> | HINT: do not put attachments or actual images in the Microsoft
> | forums/groups... provide LINKS to where you have placed them.
>
> Actually, Microsoft allows attachments on their server.
> However, posting a RAR of a BMP is dump. A simple compressed JPEG would
> suffice.<!--colorc--><!--/colorc-->

It does not surprise me that anyone posting a RAR or BMP instead of a JPEG
would have a virus. If you get my meaning

--

<!--coloro:blue--><span style="color:blue <!--/coloro-->
> --
> Dave
>
> Multi-AV -
>
> <!--colorc--><!--/colorc-->

 

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:%23UbYI%233UKHA.4592@TK2MSFTNGP06.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> From: "MEB" <MEB-not-here@hotmail.com>
>
><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> ME !<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> Like I wrote... "A simple compressed JPEG would suffice."<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
>
>
> | Yeah but you know what you're doing <grin>, gotta remember all the
> | others not so technically inclined who use the group, *and* the
> | distribution.
>
> | Certainly you aren't suggesting everyone enable pictures and
> | inclusions,,, are you?
>
>
> A picture is worth a thousand words. If a graphic (pure JPEG, GIF, etc)
> can help make a
> point to get assistance, yes. Attach a graphic.
>
> Note the size limitatation is ~73KB.<!--colorc--><!--/colorc-->

And if you have no idea what any of this mean. You can assume you are
fubarred
with a virus situation ;-)

--

 

From: "The Central Scrutinizer" <gcisko@hotmail.com>


| "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
| news:u0SCX31UKHA.3720@TK2MSFTNGP02.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> From: "MEB" <MEB-not-here@hotmail.com><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> | Eric Allen wrote:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>>> I forgot the screen shot.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->


<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> | HINT: do not put attachments or actual images in the Microsoft
>> | forums/groups... provide LINKS to where you have placed them.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> Actually, Microsoft allows attachments on their server.
>> However, posting a RAR of a BMP is dump. A simple compressed JPEG would
>> suffice.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->

| It does not surprise me that anyone posting a RAR or BMP instead of a JPEG
| would have a virus. If you get my meaning

Actually, the chance of it being 'virus' related is very slim. Maybe malware but not a
virus.



--
Dave

Multi-AV -