General discussion

Locked

File Extention .___

By juager1 ·
I am running W98 and on my slave drive I have a number of weird file names and they all end in the extention .___ I can't delete them, move them or any access. Any ideas?

This conversation is currently closed to new comments.

12 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

File Extention .___

by sgt_shultz In reply to File Extention .___

send an actual file name? are they all over the drive or in particular folers? maybe you can delete them if you right-click on one, pick properties. uncheck the read-only attribute and any others that are checked. then see if you can delete it.
are you up to date on anti-virus protection? what kind of internet connection do you have? if it is broadband do you run a firewall? what i am getting at is remote possiblility somebody has a backdoor into your computer and is hiding stuff on your drive...(sorry, been reading too much spy stories). good luck. let us know...

Collapse -

File Extention .___

by juager1 In reply to File Extention .___

The question was auto-closed by TechRepublic

Collapse -

File Extention .___

by cglrcng In reply to File Extention .___

I just e-mailed you a file attachment called "NotHideFileExt_Win9598NT4.reg"

Copy the file to a folder named "NotHideFileExt.exe", shut down all programs except Explorer & Systray and run the file by double clicking on it, this dhould uncover theculprit actual file extensions. It does sound like your machine is being "used". I had a box a year or so ago that was being used as a slave for someones misdeeds and it had the same problems you listed (check for an open path thru your firewall or a program that shows as Rundll.-the LL's are really ii's, but due to the font type they look like LL's)- I actually figured it was a MS file needing access to the net & was authorizing (on my ZA firewall), my own attack. Problem was he was not just hiding files on my drive, he was using my box to carry out DDOS attacks on others using my power, speed, connection & hardware. This file was the tool I used to delve into that black mysterious world. The dude was amazed when he received copies of his files returned to him in an in e-mail. My security is bit higher today due to this experience, and every box I build or repair has this registry tweak on it so file extensions can't be hidden.

Again, Good Luck.

Collapse -

File Extention .___

by juager1 In reply to File Extention .___

The question was auto-closed by TechRepublic

Collapse -

File Extention .___

by cglrcng In reply to File Extention .___

I just e-mailed you a file attachment called "NotHideFileExt_Win9598NT4.reg"

Copy the file to a folder named "NotHideFileExt.exe", shut down all programs except Explorer & Systray and run the file by double clicking on it, this should uncover theculprit actual file extensions. It does sound like your machine is being "used". I had a box a year or so ago that was being used as a slave for someones misdeeds and it had the same problems you listed (check for an open path thru your firewall or a program that shows as Rundll.-the LL's are really ii's, but due to the font type they look like LL's)- I actually figured it was a MS file needing access to the net & was authorizing (on my ZA firewall), my own attack. Problem was he was not just hiding files on my drive, he was using my box to carry out DDOS attacks on others using my power, speed, connection & hardware. This file was the tool I used to delve into that black mysterious world. The dude was amazed when he received copies of his files returned to him in an in e-mail. My security is bit higher today due to this experience, and every box I build or repair has this registry tweak on it so file extensions can't be hidden.

Again, Good Luck.

Collapse -

File Extention .___

by cglrcng In reply to File Extention .___

Sry all, hiccups!

Collapse -

File Extention .___

by cglrcng In reply to File Extention .___

BTW, this is only the beginning, once you uncover his files and know what they are, a reformat WILL be necessary as you can't remove them. Be prepared, a reformat will cause all kinds of problems, the worst being the "See what you get for catching me?" message that may show on your screen as you attempt to remove the files, he uses some kind of video bench test program to deliver the message (lots of colors, squares, rectangles, lines all ending in a colorful "pissed me off using my first name in the message"), and destroys the DOS boot sector @ the same time.

It might just be better after you find out the actual file extensions to back up your necessary data and just reformat & reinstall on that drive.

Collapse -

File Extention .___

by cglrcng In reply to File Extention .___

One more question though, any chance you have a disk restore program such as Roxio Go-Back writing to that disk, or have compression software active on the slave? Usually, any file extension that has an underscore (.??_ or .??__), is usually a compressed file.

Which was exactly what I found on my backdoored box, many, many compressed ftp'd files of which a few were older e-mail copies (ergo, why I was able to track the culprit), that seemed to be placed there to keep them from the possible prying eyes of a spouse or something).

Collapse -

File Extention .___

by juager1 In reply to File Extention .___

The question was auto-closed by TechRepublic

Collapse -

File Extention .___

by Johan101 In reply to File Extention .___

Well here is another posibility that will help you delete the files without formating.
first write down all the names of the files in question and make sure that it aint actualy part of some program .

Then run a MSDOS prompt and CD to the dirictory where the files are .

OPTION 1
If these files are the only ones in the directory
you can just type in del *.*
PLEASE note that this will delete all files in that directory

OPTION 2
DOS has a special hidden ASCI caracter.
It is either ALT+0255 or ALT+0225 (hold the ALT key and then press the numbers while holding the ALT key).
To delete the files you need to type in DEL<SPACE><the filename you want to delete>.<the hiden caracter 3 times>

This will Delete the files.
Please note : This caracter does not work on anything higher than win98 - it has been replaced by another visible caracter courtesy of Microsoft.

This can also indicate posible disk problems so run a thorough Scandisk . A proper Antivirus program like www.f-prot.com 's F-Prot for DOS (free) will show you wich programs might be infected with backdoors .

Back to Windows Forum
12 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums