Computer Guru?

[Son of Clyde]

My son was downloading music on MY pc yeaterday.
I now have a mysterious file named CAW1U745.
Windows will not allow me to delete it.
Any ideas? I don't know what file type it is although I can change the extension to a zip or text file but Windows cannot find the path.
Can I trace the path?

[Ste]

Put Solaris on it

http://www.sun.com/solaris

No Unix viruses!

Or if it's decent spec u can now stick MacOs X on it, if you know where to get it from

Ste

[martums]

Son of Clyde,

It's possible you've got some malware on your box.  Regardless, there is a ton of info over at BroadBand reports you can check out in their security forum: http://www.dslreports.com/forum/cleanup

The big three tools for removing Malware I usually recommend:

• Ad-Aware Personal Ed. http://www.lavasoft.de/software/adaware/
• SpyBot search & Destroy http://www.spybot.info/
• Windows Defender Beta http://www.microsoft.com/athome/security/spyware/software/default.mspx
• there's a bunch more out there, SpyWareBlaster from JavaCool software.  At work we use the McAfee Corp. anti-spyware suite, which plugs into our Mcafee corp. AV....

If you don't already have some kind of anti-virus running on your box, go get something.  For free, for fee, whatever.

Once your box is clean again, I recommend a couple other tools:

• IE SpyAd (blocks lots of junk) http://spywarewarrior.com/uiuc/resource.htm
• Mike's ad-blocking hosts file http://everythingisnt.com/hosts.html

And keep in mind, if this infection is a real PITA, you may have to wipe your drive and do a clean install.

HTH,
Marty

P.S.  Ste is right-on, getting a Mac is a good idea.   :brightidea:

[Mamma D]

And..... ??? I really hate to wipe and re-build! 

I have used AVG Free for abou4 years and find it does a good job.

[Shadow]

http://www.f-secure.com/v-descs/caw.shtml

It might be related to this one.

Clyde, update your virusscanner and install the malware programs.

And please let someone stop targetting the big numbers and produce those MAC and Unix viruses.....

[ConnerVT]

And please let someone stop targetting the big numbers and produce those MAC and Unix viruses.....

How about a cell phone virus?  Good enough for you?   

http://www.wtkr.com/Global/story.asp?S=4845275&nav=ZolHbyvj

[Jet]

I'd do as the others have already suggested. I use Ad Aware and Spybot periodically due to my 7 yr old clickmiester but sometimes even they can't help. Another great (free) program for cleaning up your computer and removing unwanted crap is RegCleanr and can be found here:http://freeware4u.com/modules/mydownloads/viewcat.php?cid=55
Just be sure you read the readme so you understand what it does and how it works.

[SANDRO43]

http://www.f-secure.com/v-descs/caw.shtml and install the malware programs.

... Clyde, also consider that ANY antispam SW cannot catch them ALL for various reasons (update cycle, resources allocated to new malware detection, etc.).

Therefore, it may not be a bad idea to have a SUITE of different programs (there are at least half a dozen available for free on the Net) and run them one after the other : the first will catch many, but the following ones will catch something else, too.

For instance, I grew into the habit of running PC Doctor first and Ad-Aware right afterwards.

[Maxx2]

Ste is right-on, getting a Mac is a good idea.   :brightidea:

I am about to get a Power Mac G 5 Quad processor with the 30 inch monitor. Probably sometime this week. The DSL is going in this afternoon. It is for my (near) future website. I want to do film editing of various interviews, pictures and scans of various documents etc. on my favorite subject.

A few weeks ago I had meeting with my immigration attorney and his associate the retired INS District Director (of three States). The attorney suggested to me that it would be a good idea to get a website going. The retired District Director said he would lend support to this and thinks he could get help from other retired INS to serve as expert witnesses in trials and for media interviews etc. Last week he went to a trial as an expert witness for a guy that contacted me. I got this going for him. Thursday he was exonerated on all charges. Recently I have been contacted twice by the media of the subject of GCG's. RWD's Golden25 had his case dropped Wednesday by the DA because of possible FOX news coverage. I had initially got that lined up for Golden25 with the FOX producer. (There is allot going on with this subject and me that few of you know about). So it seems all of this may have some potential of attracting attention.

One of my main concerns is being targeting for hacking and getting viruses. Afterall I would be butting heads with some radical feminists who have been know to play unfair. (Isn't there a connection with similar minded types who spread viruses to porn sites?)
1) So with the above operating system what programs should I add to protect my files?
2)What procedures should I follow to prevent the worst?

As far as computers I know the basics but I am looking forward to learning. That whole G 5 Mac setup looks like a dream to operate. Lots of fun.

Your suggestions on my security concerns?

Power Maxx 



 

[Ste]

G5 is a great machine - and the 30" screen is the best ever and I'm jealous!!

As regard security to be honest it's largely ok out of the box, make sure u chose decent passwords and thats it really.

OSX has a bullt in firewall that defaults to most doors closed, and there's no need for virus checker cos there aren't any for Mac and if there where, they would get very far, OSX being Unix based, as Linux is. (or unix-cloned)

No spyware either and Safari (OSX's IE Explorer) pops blockups so it's a no brainer really. I never saw any pop ups until I set up two PC's for my brother - shocking!

If u need more help Dave with specifics PM me  - I can help - I owe you for the DVD's!! Call to USA are cheap as chips here so telephone support is no problem assuming you can get through my Lancashire accent, eyup, cock, art awreet? (trans. hello friend, are you ok?'

Ste

[Shadow]

Maxx setting up a PC for a website is not a problem but if you are really afraid about attacks and viruses it might be better to put the site on a managed webserver. Better performance and the possibility to let the professionals manage the security updates.

Shadow - running a website on a Windows XP Home PC with limited security -

[jb]

Well done, Maxx.

Steve is right about security for the Mac,,, it's already very tight.  The default "doors closed" makes the Mac almost a stand alone computer.  You would also have added protection through a broadband server, i.e. a cable modem rather than a DSL phone line if you were really worried about that end of it, as this is another automatic firewall a would be virus attacker has to penetrate.

I'm looking forward to seeing your site.

[Maxx2]

Thank you Ste, Shadow and JB.

I am encouraged about the successes last week. I see from various contacts I have made that there is support for this issue. I know that it is very important to keep the site very mature. I need support from various people who would be repelled if it was a anti-feminist, anti-government, anti-Russian woman, anti-judicial system rant. I would even have to stay from terms like Green Card Girl as it might be offensive and a turn off to someone who other wise would give me their support.

The way I see it is that there is enough out there about India and Anastasia King. How about something about the good men and women in this? and mixed in with this the good men who are not so fortunate. As example I had a woman contact me whose brother serves in the Air Force. He is having troubles to put it mildly with his Russian wife. Her past life hidden from him seems to have entered into their marriage. Here is part of what he wrote me:

Mid January 2006
   I got a call from the Russian Embassy in Hxxxxx stating that Yulia had gone to Hxxxxx and they had given her someone elses passport by mistake and that she needed to return it ASAP so the girl could leave the country. While on the phone the man who called started to tell me about her VISA status, although I did not ask. He said “do not worry, even if she has a criminal record, they will not find it, it’s very difficult for them to track down Mr. H., your wife will get her Visa”.

There is real life drama and intrigue out there that would make for interesting stories for the media. Imagine the Russian embassy saying the American government could never find out about her criminal background ( I could) and then this woman sets her husband up on false charges. A man who has never had any trouble with the law, who is honorable serving his country and who has affidavits from various people testifying to her violent behavour. Then without asking him for his side of the story, the USCIS flings the doors wide open for her fast track to US citizenship.

So if I could gather such stories I could post them and then the media could see a rich source of interviews for their programs. Remember Golden25 had his case dropped because of media attention. Not just these men but men who now that they are retired from Government service can speak the truth without damaging their careers. Can you imagine the INS District Director told me that he warned the people in Arlington VA 10 years ago about the problems that are happening to thse men. They said they knew this would happen but where going to go ahead and do it anyway. US Citizens, many with spotless records, lead to the slaughter.

Thanks again guys.

Maxx


 

[Son of Clyde]

Ok I still have the file, it does not appear to be a virus.
Somehow a file without an extension was placed on the desktop. I am unable to add a file extension, or try to move the file. Nothing seems to be acceptable, the file will only revert to what it was before I tried to change it. Can't put it in a folder or the recycle bin, it just sits there on the desktop. I have not tried to add exe as the extension because then maybe it will prove to be a virus.

[catzenmouse]

SoC,

 Right click on the file and look at the properties. Play around with the different options and see is selecting or deselecting them will let you remove the file. Another thing to try is to save it with a .txt extension. Not sure if any of these will help but it may be worth a try.

Ken

[Son of Clyde]

Ken, I tried that and made it a txt file but it cannot be deleted.

[catzenmouse]

SoC,
 
 Time to go back to basics. Get a bigger hammer! 

 I did a search on the file name and got nothing. Do you have technical support for the PC that you can call?

 Can you open it in Notepad? Or is it all machine code?

Sorry I can't be of any more help to you.

 Ken

[BC]

If you're good with ol' DOS you might be able to boot direct into dos, navigate to the directory and try to delete from there.  Might have to play around with the file attributes though.

Since it seems quite persistent on the desktop could your son maybe have renamed or copied over a systems icon?  Are all your normal systems files on your desktop like my computer / recycle bin / my network places etc?

Really hard to tell from afar..  catzenmouse might be right.. BFH might be necessary LOL

[jb]

BC,

Very few people speak DOS these days, you and I may be the "Last Of The Mohicans" in the DOS world.

[Christopher]

download a bootable copy of knoppix or ubuntu.  You will be able to get to the desktop and erase it that way.  Someone suggested Solaris and I suggest you do not do that.  It can be a bitch to get it set up and secured.  You could try Ubuntu linux if you want something a lot more secure than running windows but you need to understand that it does not have all the software choices that you may want.  The good part about it is that like OS X you have to have root permission to install files.  So if your son downloads something it will not affect the entire system.  It will also allow you to keep track of what he is doing on the computer.  As of right now there are no viruses that effect *nix systems but realize that no system is ever truly secure.  If someone is determined enough they will find a way to break into your computer.  You can try clamav to remove the file to.  It is free but I have never tried it.

[jb]

If you are running XP Windows, either Pro or Home edition, one of the single best utilities you can have is PowerDesk.
http://www.v-com.com/product/PowerDesk_Pro_Home.html
It will give you are great deal more control over your FTP and when you hit the trash can with a delete command, it really goes away.

[martums]

SoC,

Can you reboot the computer in safe mode and try deleting the file, either the one on the desktop or the strange.exe that's running?  (After the BIOS flashes, tap F8, up/down arrows to Safe Mode, enter).

Also, Safe Mode might be a good place to run a scan from within Ad-Aware, and any of the other anti-spyware tools.  but make sure they're updated first, just like your anti virus.

Good luck,
M

[Son of Clyde]

The file is gone, I downloaded a program called "Delete FXP Files."
It worked well. Thanks for the advice.

[wxman]

You definately need to get Ad-Aware, Spybot, or one of the others on your system, in additon to your anti virus software. Unfortunately McAffee and Norton are pretty pathetic as most junior rate hackers can get through those. However, most hackers could care less about your computer or getting into it, instead they like to be able to find the weaknesses in the anti virus and Windows OS and create worms. These hackers are quite successful and almost everyday find weaknesses. Thats the reason for all those constant updates. The software is not that good. It's a never ending battle. What you need AD-Aware and others for, is the little trojan programs that spy on you, your key strokes etc. McAffee and Norton miss many of those.

[LarsXYZ]

I now have a mysterious file named CAW1U745.
Windows will not allow me to delete it.
Any ideas?

Yes, since you can't delete this file, it means that some process on your PC did open the file.
With ProcessExplorer, which can be downloaded for free, you can find & kill the process that opened the file.
You can get ProcessExplorer here:
http://www.sysinternals.com/Utilities/ProcessExplorer.html
Just type CRTL-F in ProcessExplorer & type "CAW1U745"
regards Lars