Re: hidden file



Josh
07-10-2005, 01:01 AM
Ok. I did all of that and it appeares to be gone. I can't truely see until a
few days. I used to have Norton Anti-Virus but someone in my family deleted
it. Thanks for all your help.

"Fitz" wrote:

> Alright...let's try this. I know you've done most of these tings before but
> let's take them in order.
>
> Disable System restore.
> Download updated virus definitions for your AV program.
> Download HijackThis (do a Google search) and see if anything suspicious is
> listed. Be careful.
> If you use Spybot, Spyare Guard, Adaware, or others, download latest
> definitions.
> If the hack is in MSCONFIG, note the path to the file then disable it in
> MSCONFIG.
> Follow the noted path and delete the file if found.
> Uninstall the game.
> Uninstall the hack (if present)
> If the hack is in the registry,
> (SOFTWARE/Microsoft/Windows/Currentversion/Run) delete it.
> While in the registry, do a search for the file and if found, delete all
> references to it.
> Open Task Manager and see if the hack is running in the process list.
> Navigate to the C:\Program files directory and delete the folder for the
> game (if present).
> Navigate to the C:\Program files and delete the folder for the hack (if
> present).
> Navigate to the C:\Windows\Prefetch and delete the contents (not the folder
> itself).
> Run a free online virus scan from somebody like
> www.pandasoftware.com./acvtivescan.
> Make notes of any suspicious things it finds but doesn't delete.
> Find those things from Panda and manually delete them.
>
> Restart in safe mode.
>
> Run your antivirus. If stuff is found, clean it and run again until nothing
> is found.
> Run Adaware and etc. If stuff is found, clean it and run again until
> nothing is found.
> If the hack is still in MSCONFIG, note the path to the file then disable it
> in MSCONFIG.
> Follow the noted path and delete the file if found.
> If the hack is in the registry,
> (SOFTWARE/Microsoft/Windows/Currentversion/Run) delete it.
> While in the registry, do a search for the file and if found, delete all
> references to it.
> Open Task Manager and see if the hack is running in the process list.
> Navigate to the C:\Program files directory and delete the folder for the
> game (if present).
> Navigate to the C:\Program files and delete the folder for the hack (if
> present).
> Look for those things from Panda that weren't cleaned and manually delete
> them (if present).
>
> Restart computer. Your computer has something listed somewhere that is
> calling this program to run when it starts. It may be in the registry,
> startup items or just hidden someplace sneaky. Also, I'm not clear on
> whether you are still getting the message on boot up or when you start the
> game. Let us know how the above works for you.
>
>
> "Josh" <Josh@discussions.microsoft.com> wrote in message
> news:E6264DCA-3AEE-4A49-AF39-EC5A4B90FE31@microsoft.com...
> > No it's not there. This program is supposed to hack the game but I haven't
> > played it much, just in case it worked. The only way I know it's still
> > there
> > is the game gives me a message that I'm running a hack or macro. I'm not
> > sure
> > what site it came from. I had the game installed, removed it, then
> > reinstalled it.
> >
> > "Fitz" wrote:
> >
> >> After you turned off System Restore and before you rebooted, did you
> >> check
> >> msconfig and make sure the file wasn't there? You said this was a patch
> >> that turned out to be a hacking program. Did you mean it was a game hack
> >> or
> >> a program that hackers use? What site did it come from? Do you still
> >> have
> >> the game installed?
> >>
> >>
> >> "Josh" <Josh@discussions.microsoft.com> wrote in message
> >> news:AF5364FD-C727-4D54-B96E-33FCFC06A0AD@microsoft.com...
> >> >I did what you said and it's still there.
> >> >
> >> > "Fitz" wrote:
> >> >
> >> >> Right click My Computer>Select Properties>Select System Restore Tab.
> >> >> Check
> >> >> Turn Off System Restore.
> >> >>
> >> >>
> >> >> "Josh" <Josh@discussions.microsoft.com> wrote in message
> >> >> news:6318A39F-F7CE-46C3-AEF4-10F0727A1BF4@microsoft.com...
> >> >> > How do I turn off system restore?
> >> >> >
> >> >> > "Fitz" wrote:
> >> >> >
> >> >> >> Navigate to C:\windows\prefetch. Delete all the files in the
> >> >> >> prefetch
> >> >> >> folder. Don't delete the folder itself. Make sure the item has
> >> >> >> not
> >> >> >> been
> >> >> >> added again in the msconfig startup group or in the run section of
> >> >> >> the
> >> >> >> registry (SOFTWARE/Microsoft/Windows/Currentversion/Run). Turn off
> >> >> >> system
> >> >> >> restore and reboot. If all is OK, re-enable system restore. If
> >> >> >> not,
> >> >> >> post
> >> >> >> back.
> >> >> >>
> >> >> >>
> >> >> >> "Josh" <Josh@discussions.microsoft.com> wrote in message
> >> >> >> news:2E4B8A10-E4C6-47D0-83C5-09E17D6329A6@microsoft.com...
> >> >> >> > Oh sorry about that. It's called SurvivalProjecthack. The link
> >> >> >> > was a
> >> >> >> > patch
> >> >> >> > for this game and it turned out to be a hacking program. I don't
> >> >> >> > want
> >> >> >> > to
> >> >> >> > use
> >> >> >> > it though.
> >> >> >> >
> >> >> >> > "Fitz" wrote:
> >> >> >> >
> >> >> >> >> I don't see where you have mentioned the name of the file. My
> >> >> >> >> news
> >> >> >> >> server
> >> >> >> >> may have dropped it but what is the name of the file?
> >> >> >> >>
> >> >> >> >>
> >> >> >> >> "Josh" <Josh@discussions.microsoft.com> wrote in message
> >> >> >> >> news:A9D2EA85-55A4-4720-B8EA-2FD69FCA15ED@microsoft.com...
> >> >> >> >> > I've tried searching for this file but nothing comes up. I
> >> >> >> >> > looked
> >> >> >> >> > through
> >> >> >> >> > just about every place I can think of and still nothing. Every
> >> >> >> >> > time
> >> >> >> >> > I
> >> >> >> >> > boot
> >> >> >> >> > up
> >> >> >> >> > my computer a message comes up and asks me if I want to start
> >> >> >> >> > this
> >> >> >> >> > hack. I
> >> >> >> >> > click no everytime and thankfully nothing happens. I just want
> >> >> >> >> > to
> >> >> >> >> > get
> >> >> >> >> > rid
> >> >> >> >> > of
> >> >> >> >> > it. Can anyone help me?
> >> >> >> >>
> >> >> >> >>
> >> >> >> >>
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

Fitz
07-10-2005, 01:01 AM
If you still have problems, post a new thread. Good luck.


"Josh" <Josh@discussions.microsoft.com> wrote in message
news:A48ED139-E1C7-40A3-88CF-C3B0379F14E2@microsoft.com...
> Ok. I did all of that and it appeares to be gone. I can't truely see until
> a
> few days. I used to have Norton Anti-Virus but someone in my family
> deleted
> it. Thanks for all your help.
>
> "Fitz" wrote:
>
>> Alright...let's try this. I know you've done most of these tings before
>> but
>> let's take them in order.
>>
>> Disable System restore.
>> Download updated virus definitions for your AV program.
>> Download HijackThis (do a Google search) and see if anything suspicious
>> is
>> listed. Be careful.
>> If you use Spybot, Spyare Guard, Adaware, or others, download latest
>> definitions.
>> If the hack is in MSCONFIG, note the path to the file then disable it in
>> MSCONFIG.
>> Follow the noted path and delete the file if found.
>> Uninstall the game.
>> Uninstall the hack (if present)
>> If the hack is in the registry,
>> (SOFTWARE/Microsoft/Windows/Currentversion/Run) delete it.
>> While in the registry, do a search for the file and if found, delete all
>> references to it.
>> Open Task Manager and see if the hack is running in the process list.
>> Navigate to the C:\Program files directory and delete the folder for the
>> game (if present).
>> Navigate to the C:\Program files and delete the folder for the hack (if
>> present).
>> Navigate to the C:\Windows\Prefetch and delete the contents (not the
>> folder
>> itself).
>> Run a free online virus scan from somebody like
>> www.pandasoftware.com./acvtivescan.
>> Make notes of any suspicious things it finds but doesn't delete.
>> Find those things from Panda and manually delete them.
>>
>> Restart in safe mode.
>>
>> Run your antivirus. If stuff is found, clean it and run again until
>> nothing
>> is found.
>> Run Adaware and etc. If stuff is found, clean it and run again until
>> nothing is found.
>> If the hack is still in MSCONFIG, note the path to the file then disable
>> it
>> in MSCONFIG.
>> Follow the noted path and delete the file if found.
>> If the hack is in the registry,
>> (SOFTWARE/Microsoft/Windows/Currentversion/Run) delete it.
>> While in the registry, do a search for the file and if found, delete all
>> references to it.
>> Open Task Manager and see if the hack is running in the process list.
>> Navigate to the C:\Program files directory and delete the folder for the
>> game (if present).
>> Navigate to the C:\Program files and delete the folder for the hack (if
>> present).
>> Look for those things from Panda that weren't cleaned and manually delete
>> them (if present).
>>
>> Restart computer. Your computer has something listed somewhere that is
>> calling this program to run when it starts. It may be in the registry,
>> startup items or just hidden someplace sneaky. Also, I'm not clear on
>> whether you are still getting the message on boot up or when you start
>> the
>> game. Let us know how the above works for you.
>>
>>
>> "Josh" <Josh@discussions.microsoft.com> wrote in message
>> news:E6264DCA-3AEE-4A49-AF39-EC5A4B90FE31@microsoft.com...
>> > No it's not there. This program is supposed to hack the game but I
>> > haven't
>> > played it much, just in case it worked. The only way I know it's still
>> > there
>> > is the game gives me a message that I'm running a hack or macro. I'm
>> > not
>> > sure
>> > what site it came from. I had the game installed, removed it, then
>> > reinstalled it.
>> >
>> > "Fitz" wrote:
>> >
>> >> After you turned off System Restore and before you rebooted, did you
>> >> check
>> >> msconfig and make sure the file wasn't there? You said this was a
>> >> patch
>> >> that turned out to be a hacking program. Did you mean it was a game
>> >> hack
>> >> or
>> >> a program that hackers use? What site did it come from? Do you still
>> >> have
>> >> the game installed?
>> >>
>> >>
>> >> "Josh" <Josh@discussions.microsoft.com> wrote in message
>> >> news:AF5364FD-C727-4D54-B96E-33FCFC06A0AD@microsoft.com...
>> >> >I did what you said and it's still there.
>> >> >
>> >> > "Fitz" wrote:
>> >> >
>> >> >> Right click My Computer>Select Properties>Select System Restore
>> >> >> Tab.
>> >> >> Check
>> >> >> Turn Off System Restore.
>> >> >>
>> >> >>
>> >> >> "Josh" <Josh@discussions.microsoft.com> wrote in message
>> >> >> news:6318A39F-F7CE-46C3-AEF4-10F0727A1BF4@microsoft.com...
>> >> >> > How do I turn off system restore?
>> >> >> >
>> >> >> > "Fitz" wrote:
>> >> >> >
>> >> >> >> Navigate to C:\windows\prefetch. Delete all the files in the
>> >> >> >> prefetch
>> >> >> >> folder. Don't delete the folder itself. Make sure the item has
>> >> >> >> not
>> >> >> >> been
>> >> >> >> added again in the msconfig startup group or in the run section
>> >> >> >> of
>> >> >> >> the
>> >> >> >> registry (SOFTWARE/Microsoft/Windows/Currentversion/Run). Turn
>> >> >> >> off
>> >> >> >> system
>> >> >> >> restore and reboot. If all is OK, re-enable system restore. If
>> >> >> >> not,
>> >> >> >> post
>> >> >> >> back.
>> >> >> >>
>> >> >> >>
>> >> >> >> "Josh" <Josh@discussions.microsoft.com> wrote in message
>> >> >> >> news:2E4B8A10-E4C6-47D0-83C5-09E17D6329A6@microsoft.com...
>> >> >> >> > Oh sorry about that. It's called SurvivalProjecthack. The link
>> >> >> >> > was a
>> >> >> >> > patch
>> >> >> >> > for this game and it turned out to be a hacking program. I
>> >> >> >> > don't
>> >> >> >> > want
>> >> >> >> > to
>> >> >> >> > use
>> >> >> >> > it though.
>> >> >> >> >
>> >> >> >> > "Fitz" wrote:
>> >> >> >> >
>> >> >> >> >> I don't see where you have mentioned the name of the file.
>> >> >> >> >> My
>> >> >> >> >> news
>> >> >> >> >> server
>> >> >> >> >> may have dropped it but what is the name of the file?
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >> >> "Josh" <Josh@discussions.microsoft.com> wrote in message
>> >> >> >> >> news:A9D2EA85-55A4-4720-B8EA-2FD69FCA15ED@microsoft.com...
>> >> >> >> >> > I've tried searching for this file but nothing comes up. I
>> >> >> >> >> > looked
>> >> >> >> >> > through
>> >> >> >> >> > just about every place I can think of and still nothing.
>> >> >> >> >> > Every
>> >> >> >> >> > time
>> >> >> >> >> > I
>> >> >> >> >> > boot
>> >> >> >> >> > up
>> >> >> >> >> > my computer a message comes up and asks me if I want to
>> >> >> >> >> > start
>> >> >> >> >> > this
>> >> >> >> >> > hack. I
>> >> >> >> >> > click no everytime and thankfully nothing happens. I just
>> >> >> >> >> > want
>> >> >> >> >> > to
>> >> >> >> >> > get
>> >> >> >> >> > rid
>> >> >> >> >> > of
>> >> >> >> >> > it. Can anyone help me?
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >>
>> >> >> >>
>> >> >> >>
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>


Re: hidden file