- Spyware problem
- Posted by Blaze on June 1st, 2005
I have recently noticed that when I do a virus check and I watch the files
as they go through the process that it shows a file which I never added
called C:\uploads. Just about everything in this file shows a virus called
Win32.Alcan.B. I do a search and it never shows this file. I then started
investigating and find that my system 32 file in windows does not show and
does not come up on a search for files either. How can I find this uploads
file to get rid of it and how can I get rid of this Alcan.B?
- Posted by pcbutts1 on June 1st, 2005
Why doesn't your antivirus clean it?. The system32 folder is a hidden folder
if your search is not set to search hidden files then it will not find it.
Change that settings under advanced option on the search screen and get a
better antivirus program.
--
The best live web video on the internet http://www.seedsv.com/webdemo.htm
Sharpvision simply the best http://www.seedsv.com
"Blaze" <mgctoona@verizon.net> wrote in message
news:uqhne.17918$Ib.8045@trndny03...
- Posted by roach on June 1st, 2005
"Blaze" <mgctoona@verizon.net> wrote in message
news:uqhne.17918$Ib.8045@trndny03...
boot into safe mode then delete the folder called uploads
delete all your temp internet files and delete the contents of the
c:\documents and settings\yourname\local settings\temp you will have to
show hidden files to get at this folder.
then after all that run a full system scan
also run a full spyware scan, microsofts free anti spyware is very good as
is spybot
use them both.
roach
- Posted by Blaze on June 1st, 2005
I have the option checked to view hidden files, and my spyware is able to
delete some of the virus but it will not do all. As far as the uploads file,
it doesn't show it in windows explorer. Will it show in safe mode?
"Blaze" <mgctoona@verizon.net> wrote in message
news:uqhne.17918$Ib.8045@trndny03...
- Posted by roach on June 1st, 2005
"Blaze" <mgctoona@verizon.net> wrote in message
news:w2kne.11803$zb.730@trndny01...
If you see a folder called uploads being scanned then its there somewhere,
According to your post its in the root of C:\.
A bit of manual removel may help so go here if you feel confident
http://netsquirrel.com/msconfig/ and remove anything dodgy
Which av and spyware progs you using?
- Posted by Buffalo on June 1st, 2005
"Blaze" <mgctoona@verizon.net> wrote in message
news:uqhne.17918$Ib.8045@trndny03...
Have you tried putting uploads in the Named box using the Find feature?
Are you using Win98,SE,XP?
Perhaps, using Google, put Win32Alcan.B in and see if you can find manual
removal instructions for it.
- Posted by Buffalo on June 1st, 2005
"Blaze" <mgctoona@verizon.net> wrote in message
news:uqhne.17918$Ib.8045@trndny03...
Put win32.alcan in Google for more info.
Don't add the .B as this may not get any results.
- Posted by Blaze on June 1st, 2005
Thank you for the replies. I have done all that you-all have suggested.
Google hasn't been much help as the same for Jeeves. I know that the uploads
is there somewhere but it doesn't appear and I've done the search also. I
use XP Pro.
"Evan Platt" <evan@theobvious.espphotography.com> wrote in message
news:kmqr911d5p41u5lgjb4sc27kg2tlr0ddfg@4ax.com...
- Posted by Duane Arnold on June 1st, 2005
Blaze wrote:
You may want to drop a line at alt.comp.anti-virus.
Duane 
- Posted by Tony Meyer on June 1st, 2005
Have you tried starting in Safe mode then searching/browsing for this
folder? I have seen folders like this which are invisible in normal mode,
but which only become visible in safe mode. If you can see it, you can
re-name if necessary and delete.
--
Tony Meyer
"Blaze" <mgctoona@verizon.net> wrote in message
news:Y%nne.17956$Ib.10412@trndny03...
- Posted by What's in a Name? on June 1st, 2005
Blaze wrote:
Virus Removal Instructions: http://home.neo.rr.com/manna4u/
-max
--
You can find my e-mail address on my pages.
This message is virus free as far as I can tell.
- Posted by Buffalo on June 2nd, 2005
"Blaze" <mgctoona@verizon.net> wrote in message
news:Y%nne.17956$Ib.10412@trndny03...
of info.
Don't include the .B part, as I suggested earlier.