Chatroom
 

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Bad Astronomy and Universe Today Forum > General > Off-Topic Babbling
Register FAQ Members List Calendar Mark Forums Read

   

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 08-November-2007, 11:11 PM
crosscountry's Avatar
crosscountry crosscountry is offline
Senior Member
 
Join Date: Feb 2005
Location: Texan in Texas
Posts: 4,641
Default Weird Virus

I'm not sure if I have a virus or not. Nothing seems to be damaged on my computer, but it is acting weird.


So, "My Documents" is set to read only. This means I cannot save or edit anything even photos and put them in that folder or any other Windows starts with. So, "My Photos" My videos, My Music all seem to be write protected. I can open everything and see it, but no editing.


It is so strange. My desktop and other folders I created allow me to use them, but windows folders not.


Any ideas on what is going on? Thanks in advance.
__________________
"I will do my best to understand and explain the universe from big to small without invoking miracles, unrepeatable events, or divine intervention. In place of those things I will use observations, mathematics, and science."


-Cross
My travel blog

Some of my Astrophotography


Those that lack education have a hard time understanding its value. - Cross
Reply With Quote
  #2 (permalink)  
Old 08-November-2007, 11:25 PM
JohnBStone's Avatar
JohnBStone JohnBStone is offline
Member
 
Join Date: May 2007
Location: UK
Posts: 89
Default

Most likely the bios settings got changed somehow - do the bios setting thing during boot - DEL or whatever and reset

Possibly jumper settings on the hard drive, but unlikely
__________________
Always challenge the assumptions
Reply With Quote
  #3 (permalink)  
Old 09-November-2007, 12:03 AM
crosscountry's Avatar
crosscountry crosscountry is offline
Senior Member
 
Join Date: Feb 2005
Location: Texan in Texas
Posts: 4,641
Default

it's a laptop,and I've never taken any components out nor gone into the BIOS



I built my other computers and know everything in them, but this one was purchased. It's over a year old and no problems up till now.


one other odd thing is that occasionally my browser will open and a page comes asking to update some programs I don't have.

here is a link to that page

it seems harmless - but of course there is a warning.
__________________
"I will do my best to understand and explain the universe from big to small without invoking miracles, unrepeatable events, or divine intervention. In place of those things I will use observations, mathematics, and science."


-Cross
My travel blog

Some of my Astrophotography


Those that lack education have a hard time understanding its value. - Cross
Reply With Quote
  #4 (permalink)  
Old 09-November-2007, 12:11 AM
Neverfly's Avatar
Neverfly Neverfly is offline
Senior Member
 
Join Date: Dec 2006
Location: Verginia Crater
Posts: 11,906
Default

What type of anti-virus anti-spyware are you using?
Reply With Quote
  #5 (permalink)  
Old 09-November-2007, 12:12 AM
Neverfly's Avatar
Neverfly Neverfly is offline
Senior Member
 
Join Date: Dec 2006
Location: Verginia Crater
Posts: 11,906
Default

http://home3.ca.com/Microsoft/Defaul...?sc_lang=en-US
http://www.google.com/search?hl=en&q=ca+antivirus

I'm not getting any hits that it is illegitimate...
Reply With Quote
  #6 (permalink)  
Old 09-November-2007, 12:15 AM
Neverfly's Avatar
Neverfly Neverfly is offline
Senior Member
 
Join Date: Dec 2006
Location: Verginia Crater
Posts: 11,906
Default

Does that program show up on Add/Remove list?
If so, remove it.

Also you might want to do a registry sweep for ca antivirus. Delete all registry keys governing its behavior.

Run something like Lexicon RegScrub and Spybot Search and Destroy and AdAware.

You might also try www.Ewido.net (Now owned by AVG) and try that product.
Reply With Quote
  #7 (permalink)  
Old 09-November-2007, 12:22 AM
crosscountry's Avatar
crosscountry crosscountry is offline
Senior Member
 
Join Date: Feb 2005
Location: Texan in Texas
Posts: 4,641
Default

I'm not running any programs other than 2 firewalls. It's been good till now.

and the ca stuff doesn't show up on my list of programs.


I'll run the anti-spyware then see from there.
__________________
"I will do my best to understand and explain the universe from big to small without invoking miracles, unrepeatable events, or divine intervention. In place of those things I will use observations, mathematics, and science."


-Cross
My travel blog

Some of my Astrophotography


Those that lack education have a hard time understanding its value. - Cross
Reply With Quote
  #8 (permalink)  
Old 09-November-2007, 12:23 AM
crosscountry's Avatar
crosscountry crosscountry is offline
Senior Member
 
Join Date: Feb 2005
Location: Texan in Texas
Posts: 4,641
Default

Quote:
Originally Posted by Neverfly View Post
Does that program show up on Add/Remove list?
If so, remove it.

Also you might want to do a registry sweep for ca antivirus. Delete all registry keys governing its behavior.

Run something like Lexicon RegScrub and Spybot Search and Destroy and AdAware.

You might also try www.Ewido.net (Now owned by AVG) and try that product.


where can I find a registry sweep?
__________________
"I will do my best to understand and explain the universe from big to small without invoking miracles, unrepeatable events, or divine intervention. In place of those things I will use observations, mathematics, and science."


-Cross
My travel blog

Some of my Astrophotography


Those that lack education have a hard time understanding its value. - Cross
Reply With Quote
  #9 (permalink)  
Old 09-November-2007, 12:30 AM
Neverfly's Avatar
Neverfly Neverfly is offline
Senior Member
 
Join Date: Dec 2006
Location: Verginia Crater
Posts: 11,906
Default

Quote:
Originally Posted by crosscountry View Post
where can I find a registry sweep?
http://www.majorgeeks.com/Lexun_RegScrubXP_d2048.html
I typed Lexicon. I was thinking funny. I meant Lexun

Also, WinPatrol and Spybot Search and Destroy's Tea Timer offer registry change protection.

That is- if something tries to change your registry or add itself to your Start up list- they alert you to it first.

When in doubt- DENY!

On Major Geeks, you can also find HDCleaner- I use- prefer it to C Cleaner.
It comes in German, but an english version is available.
It has some really great controls, options, features and anti-spy tweaks.
like Spybot S&D it offers a file shredder too.

All of these are free.
No I don't work for the company.
Reply With Quote
  #10 (permalink)  
Old 09-November-2007, 01:19 AM
crosscountry's Avatar
crosscountry crosscountry is offline
Senior Member
 
Join Date: Feb 2005
Location: Texan in Texas
Posts: 4,641
Default

man, you're taking this way more seriously than I would. I haven't even backed up my computer yet. Don't want to start stirring up trouble.
__________________
"I will do my best to understand and explain the universe from big to small without invoking miracles, unrepeatable events, or divine intervention. In place of those things I will use observations, mathematics, and science."


-Cross
My travel blog

Some of my Astrophotography


Those that lack education have a hard time understanding its value. - Cross
Reply With Quote
  #11 (permalink)  
Old 09-November-2007, 01:21 AM
Neverfly's Avatar
Neverfly Neverfly is offline
Senior Member
 
Join Date: Dec 2006
Location: Verginia Crater
Posts: 11,906
Default

Quote:
Originally Posted by crosscountry View Post
man, you're taking this way more seriously than I would. I haven't even backed up my computer yet. Don't want to start stirring up trouble.
Reply With Quote
  #12 (permalink)  
Old 09-November-2007, 01:36 AM
crosscountry's Avatar
crosscountry crosscountry is offline
Senior Member
 
Join Date: Feb 2005
Location: Texan in Texas
Posts: 4,641
Default

sorry. I ran Ad-Aware and the RegScrub. They of course found a few hundred things, and I deleted those things.


The problem still exists though.



Neverfly thanks for your help. I do appreciate you taking the time to go through this when I asked for your help.

Thank You.
__________________
"I will do my best to understand and explain the universe from big to small without invoking miracles, unrepeatable events, or divine intervention. In place of those things I will use observations, mathematics, and science."


-Cross
My travel blog

Some of my Astrophotography


Those that lack education have a hard time understanding its value. - Cross
Reply With Quote
  #13 (permalink)  
Old 09-November-2007, 02:14 AM
Neverfly's Avatar
Neverfly Neverfly is offline
Senior Member
 
Join Date: Dec 2006
Location: Verginia Crater
Posts: 11,906
Default

You never answered as to whether or not the program is listed in Add/Remove programs...


The review of the product is not flattering.

Quote:
So, "My Documents" is set to read only. This means I cannot save or edit anything even photos and put them in that folder or any other Windows starts with. So, "My Photos" My videos, My Music all seem to be write protected. I can open everything and see it, but no editing.
Haven't gotten to this part yet Or have you given up?
Reply With Quote
  #14 (permalink)  
Old 09-November-2007, 02:32 AM
crosscountry's Avatar
crosscountry crosscountry is offline
Senior Member
 
Join Date: Feb 2005
Location: Texan in Texas
Posts: 4,641
Default

Quote:
Originally Posted by crosscountry View Post
and the ca stuff doesn't show up on my list of programs.


AVG hasn't found anything yet either - still scanning.
__________________
"I will do my best to understand and explain the universe from big to small without invoking miracles, unrepeatable events, or divine intervention. In place of those things I will use observations, mathematics, and science."


-Cross
My travel blog

Some of my Astrophotography


Those that lack education have a hard time understanding its value. - Cross
Reply With Quote
  #15 (permalink)  
Old 09-November-2007, 07:07 AM
Van Rijn's Avatar
Van Rijn Van Rijn is offline
Senior Member
 
Join Date: Mar 2004
Posts: 10,646
Default

Quote:
Originally Posted by crosscountry View Post
I'm not sure if I have a virus or not. Nothing seems to be damaged on my computer, but it is acting weird.


So, "My Documents" is set to read only. This means I cannot save or edit anything even photos and put them in that folder or any other Windows starts with. So, "My Photos" My videos, My Music all seem to be write protected. I can open everything and see it, but no editing.


It is so strange. My desktop and other folders I created allow me to use them, but windows folders not.


Any ideas on what is going on? Thanks in advance.
A few questions:

What version of Windows is this?

By "Windows folders" do you mean that "My Documents" is under the Windows directory?

If you try to save a new file you can't do that? Or is it just updates to existing files you can't save?

Generally, if you can't edit existing files, it's because the read only attribute for the files is set on. You can clear that by an "attrib -r" in a DOS or CMD window. I'm not aware of anything that wouldn't let you save new files in the folder, except maybe severe disk space problems (which would probably be pretty obvious anyway) or a messed up file structure. XP (if this is XP) appears to ignore read only attributes on directories, but not individual files.
__________________
I say there is an invisible elf in my backyard. How do you prove that I am wrong?

Disclaimer: Avatar is not an official NASA image and does not imply any specific interplanetary or interstellar capability.

The Leif Ericson Cruiser
Reply With Quote
  #16 (permalink)  
Old 09-November-2007, 09:19 AM
Jeff Root Jeff Root is online now
Senior Member
 
Join Date: Dec 2004
Location: Minneapolis
Posts: 4,086
Default

It sounds like what would happen if you copied the "My Documents"
folder to a CD-ROM, then copied the folder back to the hard drive.
Everything would have the "Read Only" attribute set.

-- Jeff, in Minneapolis
__________________
http://www.FreeMars.org/jeff/

"I find astronomy very interesting, but I wouldn't if I thought we
were just going to sit here and look." -- "Van Rijn"

"The other planets? Well, they just happen to be there, but the
point of rockets is to explore them!" -- Kai Yeves
Reply With Quote
  #17 (permalink)  
Old 09-November-2007, 02:39 PM
crosscountry's Avatar
crosscountry crosscountry is offline
Senior Member
 
Join Date: Feb 2005
Location: Texan in Texas
Posts: 4,641
Default

you guys are correct on some part. every time I check the "read only" attribute is set.


I bought this computer 15 months ago and this is the first time I had this problem. Of course I copied data over from the other computer, but it was on a network I made.

and by windows folder I mean any folder which windows created. If windows assigns a folder it is "read only" any folder i create (except in folders that windows created) is still useable.


And believe me, I have undone the "read only" attribute many times. It comes back immediately.
__________________
"I will do my best to understand and explain the universe from big to small without invoking miracles, unrepeatable events, or divine intervention. In place of those things I will use observations, mathematics, and science."


-Cross
My travel blog

Some of my Astrophotography


Those that lack education have a hard time understanding its value. - Cross
Reply With Quote
  #18 (permalink)  
Old 09-November-2007, 02:52 PM
Moose's Avatar
Moose Moose is online now
Senior Member
 
Join Date: Nov 2002
Location: The Maritimes
Posts: 7,631
Send a message via MSN to Moose
Default

Sounds like Windows System Restore again. It's supposed to keep a backup of a successful system state and restore it if anything makes an unauthorized change. The problem is that it's very easy for malware to get into the backup.

I had to clean a XP (first flight) system where the user had been trying to delete a virus, only to have it reappear on every reboot. Before I discovered System Restore's role in this, I deleted the virus, then "touched" a file with the same name. (I just renamed a notepad text file.) I did this on the hypothesis that whatever was replacing the virus might not be doing the full CRC check and only looking to see if the dll "existed". It worked.

The short answer is: try turning off Windows System Restore. You can get it by going into your partition properties (my computer, right click on the drive letter, select properties), and reverse the tick-box that says to allow system restore to work on that drive.

Reboot, then undo the read-only attribute for the folder. You can then turn the system restore tick-box back on if you want that feature. I never do.
__________________
In Fallout 3, 'happiness' is a warm junkyard dog and a loaded gun. It's mostly the loaded gun.
- Moose's one-line review.

"your going to regret that one. You are now a colonoscope...
- Chrissy, corrupting PraedSt's wish.
Reply With Quote
  #19 (permalink)  
Old 09-November-2007, 02:52 PM
mike alexander's Avatar
mike alexander mike alexander is online now
Senior Member
 
Join Date: Jul 2003
Location: McMinnville, Oregon
Posts: 7,085
Default

Have you run a disk scan for bad sectors? I had some total wierdness in an old computer last summer that I finally traced to a bad sector/corrupted file problem.
__________________
The Devil offered me power. I told him I preferred aperture.
Reply With Quote
  #20 (permalink)  
Old 09-November-2007, 03:22 PM
crosscountry's Avatar
crosscountry crosscountry is offline
Senior Member
 
Join Date: