What's this?

I was seeing whats on my C: drive and all I seen was these random images of me and my desktop screen I took and other icons and my stereo.

I didn't delete them and they are still in my documents.

What would create these copies and then delete them?

Could it be a sign of someone Remotely up to something on my computer?

win7rtm156.gif

Looks to me like someone remotly desktoped in and took pictures using your webcam. . . however this seems unlikly unless you have enemies. . . and those enemies are smart enough to do some television type stuff. . . and you have a gaping hole in your firewall. . . and you have VNC installed on your machine and have it set to not ask for your permission to have someone connect and remotly use your machine

if all of those things are true i'd worry. you may want to check your machine for spyware etc but others will have to help you from that point.

What is the actually address of the images?

e.g c\documents and settings\my pictures

^^^ what hazelnut said. Do any of the suspect files have intact paths? If not this gets more suspicious. And do any of them have intact created or modified dates/times?

You don't by chance have some type of software that runs to support your webcam somehow do you? If so it's maybe possible this is somehow related. Built-in automated testing of image capture and saving by the software?

These are images from different location in MY Documents.

I have no webcam.

They are old images in several different folders.

as you can see on the right side of the image they are unknown times and location C:\?

Weird stuff.

win7rtm157.gif

win7rtm158.gif

Could it be dbghelp.dll, aka Windows Image Helper?

A lot of those images look like ones that are saved in your browser cache from visiting forums and other web pages.

Some also like like images from an installed program to chose and be used when using the program to make something.

Can you please empty any cache from the browser that you use, plus IE cache as well.

Also when you have the images open on your computer what does it say in the address bar for the location?

WAIT!!!!

I have no webcam

if this is the case, either you're playing us for fools or .... i don't know what else.

if you have no webcam than the pictures in there (those of you and your stereo equipment) must've come from a digital camera and then moved to your computer then deleted

as for the screen shot, that could well have been made by the people who built your pc to confirm that everything works (it is after all a screen shot of your specs

as hazelnut said, most eveything listed here is normal deleted items

the ones that concern you are

the screenshot

the pictures of your stereo

the pictures of yourself

however (as stated above) without a web camera I don't find these to be of concern to your computer

Is this a laptop or a PC?? some newish laptops come with build in web cams above the screen.

Richard S.

I'm not playing you for a fool.

I HAD a webcam that I tokk the pics of myself and stereo in 2006.

They are in the old image studio folder and the other avatars are in other folders in MY Documents.

The reason I am concerened is that they were NEVER deleted, BUT Recura see's them deleted and renamed.

They arent thumbnail cache cause I haven't veiwed them for at least a year.

I'm wondering why copies of my images are found deleted on my hard drive.

I use Eraser also so these deleted copies are fresh.

Usually I use eraser to clean my drive and use recura to see if it did it's job.

I see The INDESTRUCTABLE outlook emails.zip and a few desktop.ini's but that's it.

Guess it's time to nuke and re-image my back up.