Help. Is this a virus,...or am I just making things up?

Question

Ok, I guess I just want to be told that what I see is normal...When I run Ccleaner, I see that it's erasing ".exe" files from the Recycler. These all start with Dc, and a number. Example. Dc8.exe, Dc7.exe, Dc23.exe.

I did google this, and found some trojan's associated with those files, however Norton, nor Zone Alarm detect them.

I took two screen shots in safe mode of the Recycle bins in the Recycler folder, plus a screen shot of an unknown user that appears to be allowed to access this folder.

I'm not as computer savy as a I wished, so maybe, maybe this is normal? I hope so. Although my laptop not being able to run my updated Norton, or Zone Alarm in safe mode does concern me.

Help? Or am I just making stuff up lol.

Screenshots:

http://img242.imageshack.us/img242/8459/questionxp7.th.jpg

http://img134.imageshack.us/img134/6151/rozy1pl4

Answer 1

When a file is moved to the Recycle Bin, it loses its filename and becomes a number. All deleted files start with Dc, and a number follows that; then the extension, hence, if my Recycle Bin is initially empty, then I delete a text file and an executable, my Recycle Bin will then contain Dc1.txt and Dc2.exe (I think). However, it appears that the filenames are still the same.

Anyways, I don't think you have an issue with files from the Recycle Bin being deleted, right? And I wouldn't be concerned about extra user accounts unless they have suspicious names. In fact you might do more harm than good if you modify that account.

If you are concerned about security, try Avast! or AVG. These are much better than Norton and ZoneAlarm.

Answer 2

making things up

Answer 3

I would up my security settings to Zone Alarm.

Click

1. anti-spyware tab

2. Advanced Options

- updates - every 3 hrs

VIRUS MANAGEMENT

scan targets (check boot and system memory)

- On-Access Scanning - (enable)

AUTO TREATMENT

- "try to repair, quarantine if fails..."

SCAN OPTIONS

- uncheck "skip if the object is greater than... (don't skip any file when scanning.

- enable extended database

SPYWARE MANAGEMENT

Automatic Treatment

- check "enable automatic spyware treatment"

DETECTION

- check "scan for tracking cookies"

- check (IMPORTANT!!!) - "Deep Inspection Scan"

(this is a low level scanner, and the only way to find hostile items on a computer.)

SPY SITE BLOCKING (TAB)

- "ON"

PROGRAM CONTROL TAB

Main (sub tab)

Set Program Control" to "Maximum"

Programs (sub tab)

- make sure  NO programs are running as "Server." Block any (X-out) that are including Zone Alarm.

PRIVACY TAB

main (sub tab)

- Cookies

Block persistent, 3rd party, disable web bugs, remove private header info. (check boxes)

Ad Blocking (sub tab)

- block all ads

Mobile Code (sub tab)

Block scripts

Block embedded objects

Block mime...

(check boxes)

Cache Cleaner (sub tab)

check ever box under each tab

set "clean cashe automatically every" "1 day"

(clean now)

FIRE WALL (tab)

Internet Zone Security

- Set to high

Click "Custom" button

- allow broadcasts/ multicast

-Block Incoming NetBios

-Block Outgoing NetBios

-Block incoming ping

-Block other incoming ICMP

-Block outgoing ping

-Block other ICMP

-Block incoming IGMP

-Block outgoing IGMP

Trusted Zone Security

- Set to high

use the same settings above (check same boxes for this zone).

Blocked Zone Security (sub tab)

- Advanced (tab)

General Settings

- check every box in this section.

Network Settings (tab)

- check 3rd item "ask which zone to place new network..."

and check box below it "automatically put new unprotected wireless in internet zone"

Overview Tab

Preferences (sub tab)

General (sub tab)

- check "Load Zone Alarm (at start up)

Contact w/ Zone Alarm

- check "hide my IP..."

Identity Protection (tab)

main (sub tab)

Identity Lock - move to "High"

Go back to Anti-Spyware tab

1. click "Update now"

2. If you have not subscribed for the regular updates  (requires 12 month subscription, I would strongly encourage this). If not, security can get outdated in 30 days or less.

last:

1. Unplug from the Internet

2. Run The Anti-Spyware now.

3. leave the computer, this can take some time depending on the number of programs and files in your PC. Everything will be looked at now.

4. If any issue is found, run the scan one more time until clear.

If there is any issue, it should be found now.

I have found that Norton does not protect at the same level as Zone Alarm when running ZA at high security settings.

Good Luck!

Answer 4

The questions i need to ask you are... when did you nitise this event takeing plase on your machine, how old are your anti-virous programs, and in your computer properties (just right-click on your "my computer" icon) under the "remote" tab and there should be a check box that next to it says " allow other users to acses your computer for assistance" or something(this allows some one from your computer maker to be able to oporate your machine. if that check box is checked then un-check it becasue some one can easliy gain acsess to your computer. althogh there is probly a lock on it but with the right info i could crack that "code". do you have a shared computer? i was alwas the admistrator but if not the admistraror the administrator could (i think) acsess your files. if you have any other questions please email me, please i have no freind mainly casue APPARENTLY THEY CANT UNDERSTAND MY WHEN I TALK ABOUT COMPUTERS(sorry for shouting :-) i'm just so amped-up right now) any ways please email me wether i helped you or not. i could give you more answeres and research more about those trojins. if i dont help you enough i could recremend you to an other yahoo user.

PS my email adress is [e-mail] (no caps no spaces)

Answer 5

.

No Thing to Worry About How Ever if You Want to Make

Sure Every Thing is Fine Run Full System Scan After

Updating Your Anti Virus Of Course , , , , Good Luck.

.