Errorsafe.... HELP... 1

[draugen]

I have gotten hit by the spyware "Errorsafe". Norton can not remove it, only point to the location of the spyware file. However when I go to the folder, the file is not there. even the folder is not there. The folders name is content."someting", in ...\Temporary Internet files. There is noting there. I have tried viewing hidden and system files to no avail. but ther is alot of mb in the "empty" 'temporary internet files' folder. Also I whent in via the dos command window, and changed the atribute in the "dir" command so I could view hidden and system file and folder, and here I found the content."something" folder. But no file maching the one norton ponted to.
Do anyone know how to get rid of the spyware errorsafe?
And how to view these hidden files and folders with windows?

 

[kjv1611]

You could try searching your registry to see if it's in there. It's got to be somewhere, after all.

Also, try one of these programs to remove it:
AVG Antispyware

http://free.grisoft.com

Spybot Search and Destroy
Lavasoft Ad-Aware Personal SE
both available at

http://www.download.com

PC Tools Spyware Doctor Starter Edition

There are others, but that could be a good start for scanning and removing stuff.

Also, if you've not already done it, try just flat out removing all temporary internet files, cookies, etc as well as all temp/temporary files.

If you are running Windows XP, you can try the program called "RegscrubXP" and see if that helps knock it out. It's just a Registry cleaning program, no longer supported to the best of my memory, but it works quite well. If they still have it, you can get it at

http://www.majorgeeks.com

--

"If to err is human, then I must be some kind of human!" -Me

 

[pechenegs]

Download hijack this from the link below.Please do this. Click here:

http://www.thespykiller.co.uk/files/hijackthis_sfx.exe

to download HijackThis. Click scan and save a logfile, then post it here so
we can take a look at it for you. Don't click fix on anything in hijack this
as most of the files are legitimate.


Member of ASAP Alliance of Security Analysis Professionals

under the name khazars

 

[draugen]

Thanks to you both, I'm going to try all of you suggestions and let you know if I got rid of errorsafe.

Also, kjv1611, how do I

flat out removing all temporary internet files, cookies, etc as well as all temp/temporary files.

This I do all the time with cookies I don't need, and also with whats in the temporary internet file folder, that I can see. In the Temp folder there are alot of other folders, will is hurt my system to remove all these?
I do not want to do anything that might come back to haunt me.

Thanks, I'll let both of you know how it turned out.

 

[kjv1611]

Someone else can probably point out the exact command statement context, but I don't remember that one off the top of my head - I just do a Google search for it when I think I might need it.

But, in the least, you can do this:
In Internet Explorer, go to Tools-Options, and under the section(s) for cookies and temporary internet files, you can delete those there.

Any "Temp" or "Temporary" folder should be fine to delete stuff out of. For instance, there should be one located on your machine at C:/Windows/Temp or something to that extent.

The way to remove the temp files from the command line is something like:

something %temp% Or something\%temp%\ - but I forget the exact way to type it out. You can find this on the web quite readily.

--

"If to err is human, then I must be some kind of human!" -Me

 

[kjv1611]

One note about removing temporary files with the command line option or from the "temp" folder is this: Some programs will put some files helpful for updates there - I'm thinking specifically Microsoft Office. You do not HAVE to have these programs, but having them makes it possible for you to not be required to have your product CD handy when getting updates.

But, deleting the files from that folder SHOULD not cause any real problems, just maybe a minor inconvenience as detailed above.

--

"If to err is human, then I must be some kind of human!" -Me

 

[draugen]

Thanks, what about if I delete the whole Temp or Temporary internet folder, will windows recreate them, like in outlook express (where the inbox.??? file will be recreated if deleted)

 

[kjv1611]

The folders that are actually under "Temporary Internet Files"? Yes, Windows will recreate those. But I'm not sure about the actual Temporary Internet Folder itself. Also, for the Windows/Temp folder, I'd not just delete the whole folder, but rather the contents.

Also, if you want to be sure you find all "temp" files, make sure you can see ALL files:

In Windows Explorer, choose Tools -> Folder Options, and on the View Tab, make sure "Show hidden files and folders" is selected instead of "Do not show hidden files and folders". When you first open up that window, it should be pretty close to the bottom of the list (as far as the portion you actually see).

--

"If to err is human, then I must be some kind of human!" -Me