Windows, Operating System, Security, Networking, Malware, Support, Forum, Help Site Check Our Facebook Page!
Notices
Internet Explorer Post your Internet Explorer questions here.


Register your FREE account to unlock additional features at WindowsBBS.com
   
 
 
LinkBack Thread Tools
Old 7th November 2004   #1
Aku
Inactive
THREAD STARTER
 
Profile:
Join Date: Sep 2004
Location: Scottsdale, Arizona, USA
Posts: 116
Computer Experience:
Intermediate
Aku Reputation Level

Send a message via AIM to Aku

Trojan DELETED Favorites...HELP!!!!


Earlier today, I was using the family PC before I left to go job hunting. As I was leaving, my mom used XP Fast User Switching to switch to her account and browse the internet using, sadly, IE 6. I came home, and after she logged off, discovered an AVG Resident Shield warning telling me that in my moms temporary internet directory, a troajn was downloaded. I believe the name was Downloader.Agent.M3. I got rid of the trojan, logged off, and then started playing GameCube. She came to me complaining that most of her Internet Explorer favorites were gone. I searched all the directories they SHOULD be in, restored the computer to yesterday (LONG before the trojan came about), and even used Firefox to migrate her favorites to it, hoping it could find em. nope. gone. WHERE ARE THEY? She had many important websites in her favorites, and she was pretty angry that they dissapeared.

One good thing DID came because of this though...it FINALLY convinced her to start using Mozilla Firefox. She deleted all her IE6 shortcuts, and replaced em with Firefox. This shouldn't happen again, as long she uses firefox.

Aku is offline  

 

Register
to remove this ad.
 
 

Old 8th November 2004   #2
Inactive
 
Profile:
Join Date: Jan 2002
Location: Albuquerque, NM, USA
Posts: 5,655
Computer Experience:
still learning
Welshjim Reputation Level

Aku--I have no experience with that piece of malware, but it is hard to believe it deleted your mother's Favorites.
You have not told us what version of Windows your mother runs. Favorites reside in C:\Windows in the Win98 family. In WinXP it resides in C:\Documents and Settings\Default User or C:\Documents and Settings\HerName. Have you run a Find or Search for Favorites*? In WinXP, is Search set up to find "hidden folders and files"?
If they really are deleted you might still find them by using a program called Restoration.

http://www.webattack.com/get/restoration.html
Download to a floppy, not to the hard drive and run from there.

Welshjim is offline  

Did you find this post helpful? Yes | No
Old 9th November 2004   #3
Aku
Inactive
THREAD STARTER
 
Profile:
Join Date: Sep 2004
Location: Scottsdale, Arizona, USA
Posts: 116
Computer Experience:
Intermediate
Aku Reputation Level

Send a message via AIM to Aku
We're running Win XP Pro, and I'm pretty darn sure it did delete the favorites. I dont have any floppy disks right now, so i'll buy some on friday and run the program called Restoration. I went to Start>Search and chose for it to search all files and folders, and it found nothing. I checked C:\Documents andSettings\USERNAME\favorites, and none were there. I checked under her User Name, and Administrator. nothing. Where else would they be? It was a clean install oF XP, not an upgrade from 9X, so all the folders will be named properly.

I think what happend was she somehow downloaded a trojan, and the trojan somehow connected to its client and the favorites were manually deleted. I dont know how this would have happend though. IM CONFUSED!

Aku is offline  

Did you find this post helpful? Yes | No
Old 9th November 2004   #4
Inactive
 
Profile:
Join Date: Jan 2002
Location: Albuquerque, NM, USA
Posts: 5,655
Computer Experience:
still learning
Welshjim Reputation Level

Aku--Just so you understand why I suggested downloading Restoration to a floppy. Actually you could download it to any external medium--just not your hard drive. (Restoration is small enough that it fits on a floppy, so for many people, that is a very useful consideration.)
The reason is that deleted files are infact still on the hard drive. However, Windows thinks the space they occupy is now available for writing other data. So you want to avoid use of the hard drive for any reason until you have tried to recover the "deleted" data. Otherwise the more you use the hard drive, the more likely the desired data will be overwritten.

Welshjim is offline  

Did you find this post helpful? Yes | No
Old 11th November 2004   #5
Aku
Inactive
THREAD STARTER
 
Profile:
Join Date: Sep 2004
Location: Scottsdale, Arizona, USA
Posts: 116
Computer Experience:
Intermediate
Aku Reputation Level

Send a message via AIM to Aku
Well, thanks for the information but unfortunately this week the family PC HAD to be used for school. I'll try Restoration friday, but until then, I'll use it as little as possible

Aku is offline  

Did you find this post helpful? Yes | No


 

THIS THREAD HAS EXPIRED.

Are you having the same problem? Please post a new thread, but first you'll have to join us by Registering (FREE).



Discussion Forums
Operating Systems
Windows 8 Windows 8
Windows 7 Windows 7
Windows Vista Windows Vista
Windows XP Windows XP
Windows Server System Windows Server System
Legacy Windows OS Legacy Windows OS
Internet & Networking
Networking (Hardware & Software) Networking
Internet Explorer Internet Explorer
Microsoft Mail Microsoft Mail
Firefox, Thunderbird & SeaMonkey Firefox, Thunderbird
      & SeaMonkey

Web Applications & Cloud Web Applications & Cloud
General Internet
Security
Malware and Virus Removal Malware and Virus
     Removal

Security and Privacy Security and Privacy

Other
Other PC Software Other PC Software
Test Posts Test Posts
Hardware
PC Hardware PC Hardware
Mobile Devices Mobile Devices
Community
Introductions Introductions
General Discussions General Discussions
Site Comments & Suggestions Site Comments
      & Suggestions

News News @ WindowsBBS

Thread Tools


Find us on Facebook   Web Of Trust Rating

All times are GMT. The time now is 08:38.


Recent Discussions
Tabbed Browsing In Windows Explorer.. (2)
XP and MS Popup (6)
Dual Boot Question (8)
Repair Windows XP using USB (9)
[Is Windows 2000 still supported by.. (3)
Windows 7-Internet connection conce.. (13)
ink for HP photosmart (4)
[Login password required when resum.. (2)
Best thing to do with an old XP box (9)
Laptop HD running constantly (10)
Choosing Optional Windows/Microsoft.. (2)
Someone here with experience with e.. (11)
laptop randomly shut down (4)
Install Win 8.1 Update or lose futu.. (3)
Windows Live Mail and Yahoo (3)
[Windows live mail - unable to send.. (4)
Print doesnt start with HP1015 in W.. (16)
Today's Vista windows updates messe.. (4)
Malwarebytes Anti-Malware new versi.. (9)
Kaspersky Key Problem....... (1)


Donate!
Support Windows BBS!



Powered by vBulletin® Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO
Copyright 2002 - 2013 WindowsBBS.com. All rights reserved.
FDMA Media LLC
Terms of Use, Legal Information & Privacy Policy
Page generated in 0.09179 seconds with 7 queries