Caedes

Off Topic

Discussion Board -> Off Topic -> ? about comp...

? about comp...

.shortturtle
04/15/07 2:35 AM GMT
Whenever I turn off my computer, my .mp3 files get changed to .exe files the next time i boot up. Anyone have a clue as to why this might be happening? I never used to have this problem with my music =(
0∈ [?]

Comments

Post a Comment  -  Subscribe to this discussion
&KEIFER
04/15/07 4:27 AM GMT
(*strums guitar*)

♪ ♫ ♪ ♫ .. all my muzak'es live in exes .. ♪ ♫ ♪ ♫


I don't have a clue .. do you mean that the icon changes to an .exe icon? ... or do you mean the extension actually gets renamed to exe

because if it's just the icon, then you just need to rebuild the icon cache that windows holds .. I've forgotten how to do that natively within windows ... but ..

"RefreshEm" claims to do it .. it's freeware .. and the DL link seems to work


also .. Microangelo, an Icon editing suite of tools




I've used "microangelo" in the past to do that .. but not the "RefreshEm"
0∈ [?]
*---===>>>>>(¯`·._(¯`·._.: It ain't over till the FAT BABY sings :._.·´¯)_.·´¯)<<<<<===---*
.timw4mail
04/15/07 11:26 AM GMT
Sounds like somethings getting corrupted. Have you heard any strange noises out of your computer? Your harddisk could be going bad...
0∈ [?]
"But shun profane and vain babblings: for they will increase unto more ungodliness." - 2 Timothy 2:16 (KJV) <- -> Timothy J. Warren | My homepage|My Forum| My Gallery| My DeviantArt Gallery| AIM: aviat4ion
::tealeaves
04/15/07 3:51 PM GMT
If it's just the icon that changes, and you are running XP, you can try TweakUI .

"This PowerToy gives you access to system settings that are not exposed in the Windows XP default user interface, including mouse settings, Explorer settings, taskbar settings, and more."

0∈ [?]
Each cup of tea represents an imaginary voyage. ~Catherine Douzel
.timw4mail
04/15/07 8:31 PM GMT
Careful be with TweakUI...and all that Yoda stuff...

TweakUI can be a little too powerful for the average user.
0∈ [?]
"But shun profane and vain babblings: for they will increase unto more ungodliness." - 2 Timothy 2:16 (KJV) <- -> Timothy J. Warren | My homepage|My Forum| My Gallery| My DeviantArt Gallery| AIM: aviat4ion
::HauntingMorgana
04/15/07 10:52 PM GMT
Do you use icon packager?

At times it will screw things up.
0∈ [?]
Haunting made me do it damnit.
.shortturtle
04/16/07 8:41 PM GMT
nope the entire extension changes to .exe not just the icon =/
0∈ [?]
.animaniactoo
04/16/07 8:45 PM GMT
are you on a mac or windows machine?
0∈ [?]
One man sees things and says "why?" - but I dream things that never were and I say "why not?"
::purmusic
04/16/07 9:28 PM GMT
You gotz viruseseseses ... eseses.

Well, maybe just one Trojan.

Go to trendmicro.com and pandasoftware.com ... if your anti-virus software is not identifying the culprit.

These viruses typically attach themself as an executable to installed files.

Any pop-ups? Any other suspicious internet activity? Is your pc slower than before?

You can also go to "Task Manager" (right click on your taskbar to get to it) to see if there is a process running that is not recognizable. Sort by cpu activity to bring the most active processes to the top of that column. Then ... google the name of that process.

The above is for Windows though. Might help if you can provide some additional information.

Give the online scans a try.
0∈ [?]
The real voyage of discovery consists not in seeking new landscapes, but in having new eyes. - Marcel Proust
.timw4mail
04/16/07 10:48 PM GMT
If you don't have anything very important on your computer, the easiest thing to do would be re-install Windows, if you can.
0∈ [?]
"But shun profane and vain babblings: for they will increase unto more ungodliness." - 2 Timothy 2:16 (KJV) <- -> Timothy J. Warren | My homepage|My Forum| My Gallery| My DeviantArt Gallery| AIM: aviat4ion
&KEIFER
04/17/07 2:11 AM GMT
Chances are good that you Downloaded and installed a program of ill repute .. some little gadget that promised to do something you felt you needed .. and chances are that was just before the problem started

Only YOU can dredge up that information .. anything suspicious?

a quick googling of keywords is not revealing any results for me

could you list your AntiVirus Arsenal


If you know your way around your "registry" you could take a look at

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

this is where most "autostart" programs install the "keys"



stinger is a FREE util from McAfee that looks for 45 specific viruses and trojans

0∈ [?]
*---===>>>>>(¯`·._(¯`·._.: It ain't over till the FAT BABY sings :._.·´¯)_.·´¯)<<<<<===---*
.shortturtle
04/18/07 2:41 AM GMT
I'm on windows, & I've got Norton AntiVirus running on my comp. My computer is a tad slower I noticed also..and i'm not completely computer literate so I don't know my way around the registry. But if you write out steps to follow, I can do that =) Anything that will help! (Thanks by the way) Oh and one more problem, I tried what ::purmusic said to do by bringing up the task manager, but it won't even let me open that...and I also learned that when I hit Ctrl+Alt+Delete, nothing happens =(
0∈ [?]
&KEIFER
04/18/07 5:36 AM GMT
RE: .. "bringing up the task manager, but it won't even let me open that"

that's a pretty good indication that you have a virus .. they try to keep you from accessing the tools that will help you determine you have a virus

they just rename your MP3's to make you laugh

:o)

if your antivirus isn't up to date .. and you can make it so within your "alotted" time .. then do so

if it's out of date .. then run their online scan


`·.¸¸.·´´``··._.·`·.¸¸.·´´``··._.·`·.¸¸.·´´``··._.·`·.¸¸.·´´``··._.·


0∈ [?]
*---===>>>>>(¯`·._(¯`·._.: It ain't over till the FAT BABY sings :._.·´¯)_.·´¯)<<<<<===---*
+Samatar
04/18/07 6:11 AM GMT
You could try pcpitstop.com, I used to use them (before I got a mac). They have a free virus scanner also.
0∈ [?]
-Everyone is entitled to my opinion- rescope.com.au
::gloopical
04/18/07 11:31 AM GMT
Ah, Norton... I have Norton on my computer, and for us, it seems to do NADA.

My brother has McAfee... it seems to work fine. But the Norton computer gets a new virus around once a week, and has to be rebuild by my brother and dad around once a month.

Listen to these people, they know their stuff. But I'd consider getting a new security package. But that's just me... our computer seems to be a target.
0∈ [?]
I wish I was a glow worm, a glow worm's never glum. How can you be gloomy when the sun shines out your bum? *runs off into distance giggling*
.timw4mail
04/18/07 1:23 PM GMT
Windows is the problem here...but since everything runs on Windows...

I would suggest AVG, as it is free, and it has a very good rating.
0∈ [?]
"But shun profane and vain babblings: for they will increase unto more ungodliness." - 2 Timothy 2:16 (KJV) <- -> Timothy J. Warren | My homepage|My Forum| My Gallery| My DeviantArt Gallery| AIM: aviat4ion
::purmusic
04/18/07 1:43 PM GMT
Ok then ... buckle up ... here we go ...

First, download and install these two anti-spyware apps:

Ad-Aware SE Personal

Spybot-S&D

Free to use and widely touted as excellent programs. I use both myself in addition to Windows free beta Defender and have AVG anti-virus software to complete my own personal arsenal of security.

Update (hopefully you are not blocked from accessing Symantec's site) Norton's virus definition files.

Then ...


Disconnect from the internet. No ... do not just disable, physically unplug your pc.

Disable "System Restore." A common place where viruses will 'hide,' if you will, and then upon rebooting, re-infect your system.

Run the two spyware apps first. Spybot first preferrably, then run Ad-Aware.

You can, if you wish, just 'quarantine' any items that are found ... I usually delete and/or choose "Fix." Quarantining is probably a safer bet, until you determine that any of the files that are quarantined are not operationally necessary.

Then do a virus scan.

Then ... go to Start >> Accessories >> System Tools >> Disk Cleanup. This step is important before re-booting to delete any temp files that could possibly be still infected.

Reboot.

Do it allll over again to ensure that nothing was left behind, so to speak.

If this doesn't solve your problem ... no worries ... there is another way ... it will take some time and effort on your part though.

And it is this ...

Google "Hijack This."

Small bump in the road though ... this has been sold to TrendMicro. But, I think you will be ok, support has not started up yet.

This is a great program that will list all running processes. But, first ... go one step further and delve into some of the forums on other sites.

Typically, what you do is this ... install "Hijack This" ... and then find a tech forum to post the log file produced once you have run the program.

And then someone will review the log and give you specific recommendations as to what further steps you may have to take.

A little lengthier procedure, as it depends on how busy the volunteers and the particular site is that you post to.

The fact that you are telling us that the Windows tasks are not accessible, tells me that yes ... your pc is infected.

No worries ... this is fun stuff. You get to stomp and kick around the nasties and learn in the process.

Hey, put on a cape ... use a magic marker, inscribe a big "S" and go get the bad guys. It ain't no big thing.

Or ... re-install Windows. :o(

Having said all of this ... when you do get back up and running, keep "System Restore" disabled. That one aspect can be a real kicker of a headache when trying to disinfect a infected pc.

Let us know, how things go. :o)
0∈ [?]
The real voyage of discovery consists not in seeking new landscapes, but in having new eyes. - Marcel Proust
.shortturtle
04/19/07 5:35 AM GMT
thanks everyone for your help =) i tried what purmusic said, and yes my computer is seriously infected =( after taking all the steps, i still am unable to open task manager or ctrl+alt+dlt. i'm gonna try to the hijack this dealy. i'll let you know how it goes. thanks again!
0∈ [?]
::purmusic
04/19/07 9:29 AM GMT
Ok, I won't write a book this time for you to read. :oP

Sorry to hear about your pc troubles. You'll get it figured out.

One other step, or steps you could try ... as it seems you still have internet access ... is to run your computer in 'safe mode' and repeat the first parts again. The two anti-spyware apps scans and then your anti-virus scan.

In safe mode, only the essential services are started ... it may be ... may be possible to clean your pc this way before heading onto the Hijack This part.

Typically, when you boot your pc, you hold down the ... F8 key or delete key (check this to make sure ... I am tired, lol ... and don't want to give you the wrong instructions) .. and then select "Run in Safe Mode" from the window that will appear.

Google is your friend here.

As well as, any of the major virus manufacturers have instructions how to run your pc in safe mode.

Hmm, maybe Norton (Symantec) can assist you with some online help? You could check that out as an option too.

Yeah ... you'll get it cleaned up. Happens to everyone at some point or another.

Good luck ... and then once you are clean ... we will celebrate. :o)
0∈ [?]
The real voyage of discovery consists not in seeking new landscapes, but in having new eyes. - Marcel Proust
&KEIFER
04/19/07 12:21 AM GMT
NEWS ALERT .. I, uh, asked for outside Help .. and these possibilities have been proffered

I-Worm.Myba ..

Quote .. MP2, MP3, M3U: the worm creates a new file with ".EXE" extension (for "SONG.MP2" the worm creates the "SONG.MP2.EXE" file), writes its code to there and sets the file attribute "hidden" for the original file.


W32/Avette-A

Quote .. W32/Avette-A replaces the default application for playing MP3 files, renaming the original by appending '.COM' to its name. Subsequently, when a file with MP3 extension is opened, the virus prepends itself to the file, also adding '.EXE' to the filename.


`·.¸¸.·´´``··._.·`·.¸¸.·´´``··._.·`·.¸¸.·´´``··._.·`·.¸¸.·´´``··._.·

`·.¸¸.·´´``··._.·`·.¸¸.·´´``··._.·`·.¸¸.·´´``··._.·`·.¸¸.·´´``··._.·


so .. poke around in your mp3 player folder .. if you find your player with a .com extension then it might be the "W32/Avette-A" or a variant .. but your Mp3's are T.O.A.S.T

If you find that all of your original mp3's have been "Hidden" .. then it might be the "myba" virus ..

whether you trust anything on your computer after this is YOUR call ... RUN don't Walk to the nearest neighborhood GEEK

if this proves helpful .. all thanks go to the "Octopus Overlords" .. namely, AWS260 from brooklyn

:o)
0∈ [?]
*---===>>>>>(¯`·._(¯`·._.: It ain't over till the FAT BABY sings :._.·´¯)_.·´¯)<<<<<===---*
.timw4mail
04/20/07 1:35 AM GMT
Wait, Windows isn't a virus? ;øP
0∈ [?]
"But shun profane and vain babblings: for they will increase unto more ungodliness." - 2 Timothy 2:16 (KJV) <- -> Timothy J. Warren | My homepage|My Forum| My Gallery| My DeviantArt Gallery| AIM: aviat4ion

Leave a comment (registration required):

Subject: