Computing.Net > Forums > Security and Virus > Re: is bill drunk

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Re: is bill drunk

Reply to Message Icon

Name: Tank863
Date: December 21, 2002 at 08:46:25 Pacific
OS: Win XP Pro
CPU/Ram: Self
Comment:

I received the ~.dat file.. it was only 180kb in size.
I examined it with all this fancy equipment and software that I have here.
I could find nothing wrong with the file.
It is not a virus, that I know of,however I have forwarded it to Symantec and the NAI for examination.

They will get back to me and let me know if anything is wrong or if this is a new type of virus.
I, in turn will get back to you.

Tank863



Sponsored Link
Ads by Google

Response Number 1
Name: IS BILL DRUNK
Date: December 21, 2002 at 10:37:37 Pacific
Reply:

Thank you Tank,
I tried again for about an hour last night to send or move the (tic) file.NO luck. I still have not found a reason in my searches as to why I cannot delete , move, ect this file. I will continue searching today. As I stated in my last contact, THANK YOU VERY MUCH FOR YOUR TIME! I have been reading at computing. net for quite awhile. Thanks to you Tank, and other people like murve, wawa, jack, and the list goes on. I have been able to set up my computer and protect it very well.Thanks again ya'll!


0

Response Number 2
Name: wawadave
Date: December 21, 2002 at 11:05:39 Pacific
Reply:

hello
if your not useing xp delete it from dos.


0

Response Number 3
Name: IS BILL DRUNK
Date: December 21, 2002 at 11:24:17 Pacific
Reply:

Bad news, Its XP,and safe mode doesn't work either, thanks wawa!


0

Response Number 4
Name: Michael
Date: December 21, 2002 at 11:46:52 Pacific
Reply:

There may be a way of deleting the file from the Recovery Console. You first have to enable the "SET" GPO via gpedit.msc to access all files and folders. It is under:

Local Computer Policy\Windows Settings\Security Settings\Local Policies\Security Options

It is called:

Recovery Console: Allow floppy copy and access to all drives and all folders

Once enabled, under Recovery Console, you can access the disk more like you can in DOS. This should allow you to delete the file.

If you don't have the Recovery Console because you have a Recovery CD and not a true XP installation disk, you can download the 6 setup diskettes from MS. According to one post (read arguement) I read, they should give you the option of going into the Recovery Console repair option. Haven't tried it myself as I have the RC installed on my HDDs.


0

Response Number 5
Name: Johns
Date: December 21, 2002 at 12:18:32 Pacific
Reply:

Sorry just kind of jumped in on this one without know the full problem.

there is a way to rename files from a dos boot disk with a program call NTFSDOS and NTFSREN.

after renameing the file you should be able to delete it from windows or rename it back in the recovery console.


0

Related Posts

See More



Response Number 6
Name: IS BILL DRUNK
Date: December 21, 2002 at 12:25:17 Pacific
Reply:

Thanks Michael, I'll have to read up on this,your a little above my head on the recovery console,(ok, I admit it, a lot above)lol,this is new to me.Thank You and I'll check into it.


0

Response Number 7
Name: IS BILL DRUNK
Date: December 21, 2002 at 14:30:25 Pacific
Reply:

Tank, I found the link that Created the ( ~ ) dat file. This is the link to the reference page on tic files( File extensions lookup )I hope that PASTE worked? lol In the reference pages under tic, are links to lotto 2002 and arcinfo. The lotto 2002 page created a folder in my computer called ( ~datasol ). THIS FILE put 7 hidden files around my computer. The one that keep showing up in my IMAGES was the only one I sent you Tank. The other 7 were hidden and the ( ~datasol ) FOLDER was hidden. The only link I can find between the ( TIC ) file *that I can not delete,* and the ( ~ ) that reappeared, is that in searching for tic, LOTTO 2002 IS LISTED UNDER (*TIC* IN THE REFERENCE PAGES.)HUM?? DO NOT click on the lotto 2002 link unless you want a folder with 7 files planted on your computer.NONE of my programs detected these hiden files. ad-aware, spybot, nortons,trojan hunter,pc-cillian,ect. Is this SPYWARE, and HOW can a page web page create a whole hidden folder and 8 files planted in different parts of my computer.(7 hidden) Do you see a link between the ( TIC ) file I CANNOT DELETE and the fact that lotto 2002 is listed under tic references. I had the ( TIC ) file before I visited the lotto page.I caught a bug trying to get rid of one, LOL ! AND THANKS TO YOU TOO JOHNS, THANKS AGAIN TANK!


0

Response Number 8
Name: IS BILL DRUNK
Date: December 21, 2002 at 15:24:35 Pacific
Reply:

TANK, I am going to visit the lotto 2002 web page again and let them replant the folder on my computer. The second time I visited the page after deleting their first folder.( HIDDEN) The new (2nd)folder they planted on my computer was not hidden.I am going to watch my firewall logs to see if this folder sends out info from my computer.I also want to see if the file becomes hidden again. My guess is that the unhidden folder sends out and new (SHALL I SAY) orders that come back, to hide the folder on my computer.I want to find out why the folder became hidden on my computer, and try and prevent this from happening again in the future.Wish me luck! lol! I'm telling ya, that TIC file is driving me to drink, lol I am also going to watch and see if that TIC file is sending out any info also. whoisit, here i come.


0

Response Number 9
Name: wawadave
Date: December 21, 2002 at 16:52:00 Pacific
Reply:

sounds like spy ware to me should aleart the guys at spybot in there forum one for them to add.
the recovery consol may be the route to got and to:Johns
you might do a google on ntfsdos pro. you can run dos from boot disk useing this program. it would allso get ridd of this file. but its 200 usd


0

Response Number 10
Name: IS BILL DRUNK
Date: December 22, 2002 at 12:19:14 Pacific
Reply:


I have been going through all my files. I just open my coral user file, I never use this file for anything. In the coral user file is a folder called (my visuals). My mouse pointer displays that it contains a file called (pictureviz.exe) in the file is a (win 32 self extractor) both listed at 184KB. When I run my mouse over the coral user file it shows that the file is 502KB !makes no sense. I have no idea where the pictureviz.exe came from.

http://www.geocities.com/rcep_rayn/rayn_007.html a google search of pictureviz came up with only 1 result. This is to a guy named ryan and he seems to have a lot of links to hacking. He has a bunch of links on his page. Hacking passport, passwords,ect. he has a link to pictureviz.exe. What is pictureviz.exe ?? He says he is from LEBANON! He says you must be linked to ryans club in order to open the link pictureviz.exe. I tried to open the Pictureviz.exe link and it would not work.

I completely emptied the picture file except for the (leavecri.tic) file (28KB )when I run my mouse over the my pictures file it shows that it is (67.3MB). It displays that it contains (digital photos),(Images), and (graphic files) now. Also the file (LEAVECRI.TIC FILE) !HUM ! I went to the folders option to unhide all hidden folders. Nothing showed up to explain the size differences. I scanned both with nortons and pc-cillin. nortons scanned 2 files in MY PICTURES. PC-CILLIN scanned 3 files in MY PICTURES. (leavecri.tic) (pictures/desktop.ini) and (pictures/thumbs.db). I am completely lost now. I searched my computer and did not find anything relating to the above except the (TIC) file.
So far the (~datasol) file from lotto pro 2002 web page is just sitting in my temporary internet file. It has not created the 8 other ( ~ ) files yet! NO weird activity in my firewall logs.It did create a file next to it called WWW .WINDOWSLOTTO . COM !! SO FAR NOTHING OUT OF IT EITHER!
I did do a scan with ad-aware-found nothing. Then I did a scan with spybot and it found (Avenue A.)
CAN ANYONE HELP TO EXPLAIN ALL THIS TO ME! I am going to search now to try and find out more about the (PICTUREVIZ.EXE) and if I can find a link to the (LEAVE.TIC) file that is stuck in my pictures folder.
thanks again to everyone!


0

Response Number 11
Name: ryna buergle
Date: December 22, 2002 at 14:49:01 Pacific
Reply:

Do they have comps in Lebanon?! :-)
Well I hope the Symantec guys will help you thats what they re payed for...
Good luck!!


0

Response Number 12
Name: IS BILL DRUNK
Date: December 22, 2002 at 18:48:29 Pacific
Reply:

ryna buergle, Do you know what pictureviz is and can you help me? Do you see a connection to pictureviz and this (tic) file I cannot get rid of. Viz exe is the only thing I can find and it seems to go with 3d graphics programs. thank you


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Re: is bill drunk

virus alert!!!!!!!!! www.computing.net/answers/security/virus-alert/5438.html

AOL is spyware www.computing.net/answers/security/aol-is-spyware/14397.html

scam or not???anyone tell me pls!!! www.computing.net/answers/security/scam-or-notanyone-tell-me-pls/10594.html