Jump to content

What's this?


cartel

Recommended Posts

I was seeing whats on my C: drive and all I seen was these random images of me and my desktop screen I took and other icons and my stereo.

I didn't delete them and they are still in my documents.

 

What would create these copies and then delete them?

 

Could it be a sign of someone Remotely up to something on my computer?

 

win7rtm156.gif

Link to comment
Share on other sites

  • Moderators

Looks to me like someone remotly desktoped in and took pictures using your webcam. . . however this seems unlikly unless you have enemies. . . and those enemies are smart enough to do some television type stuff. . . and you have a gaping hole in your firewall. . . and you have VNC installed on your machine and have it set to not ask for your permission to have someone connect and remotly use your machine

 

if all of those things are true i'd worry. you may want to check your machine for spyware etc but others will have to help you from that point.

 

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

CCLEANER, RECUVA, DEFRAGGLER AND SPECCY DOCUMENTATION CAN BE FOUND AT  https://support.piriform.com/hc/en-us and  https://www.ccleaner.com/docs

Pro users file a PRIORITY SUPPORT request at https://support.piriform.com/hc/en-us/requests/new

link to WINAPP2.INI explanation

Link to comment
Share on other sites

^^^ what hazelnut said. Do any of the suspect files have intact paths? If not this gets more suspicious. And do any of them have intact created or modified dates/times?

The internet - Where men are men, women are men and children are FBI agents.

Link to comment
Share on other sites

You don't by chance have some type of software that runs to support your webcam somehow do you? If so it's maybe possible this is somehow related. Built-in automated testing of image capture and saving by the software?

The internet - Where men are men, women are men and children are FBI agents.

Link to comment
Share on other sites

These are images from different location in MY Documents.

I have no webcam.

 

They are old images in several different folders.

 

as you can see on the right side of the image they are unknown times and location C:\?

Link to comment
Share on other sites

  • Moderators

A lot of those images look like ones that are saved in your browser cache from visiting forums and other web pages.

 

Some also like like images from an installed program to chose and be used when using the program to make something.

 

Can you please empty any cache from the browser that you use, plus IE cache as well.

 

Also when you have the images open on your computer what does it say in the address bar for the location?

Link to comment
Share on other sites

  • Moderators

WAIT!!!!

 

I have no webcam

 

if this is the case, either you're playing us for fools or .... i don't know what else.

 

if you have no webcam than the pictures in there (those of you and your stereo equipment) must've come from a digital camera and then moved to your computer then deleted

 

as for the screen shot, that could well have been made by the people who built your pc to confirm that everything works (it is after all a screen shot of your specs

 

as hazelnut said, most eveything listed here is normal deleted items

the ones that concern you are

the screenshot

the pictures of your stereo

the pictures of yourself

 

however (as stated above) without a web camera I don't find these to be of concern to your computer

 

ADVICE FOR USING CCleaner'S REGISTRY INTEGRITY SECTION

DON'T JUST CLEAN EVERYTHING THAT'S CHECKED OFF.

Do your Registry Cleaning in small bits (at the very least Check-mark by Check-mark)

ALWAYS BACKUP THE ENTRY, YOU NEVER KNOW WHAT YOU'LL BREAK IF YOU DON'T.

CCLEANER, RECUVA, DEFRAGGLER AND SPECCY DOCUMENTATION CAN BE FOUND AT  https://support.piriform.com/hc/en-us and  https://www.ccleaner.com/docs

Pro users file a PRIORITY SUPPORT request at https://support.piriform.com/hc/en-us/requests/new

link to WINAPP2.INI explanation

Link to comment
Share on other sites

I'm not playing you for a fool.

I HAD a webcam that I tokk the pics of myself and stereo in 2006.

They are in the old image studio folder and the other avatars are in other folders in MY Documents.

 

The reason I am concerened is that they were NEVER deleted, BUT Recura see's them deleted and renamed.

They arent thumbnail cache cause I haven't veiwed them for at least a year.

 

I'm wondering why copies of my images are found deleted on my hard drive.

 

I use Eraser also so these deleted copies are fresh.

 

Usually I use eraser to clean my drive and use recura to see if it did it's job.

 

I see The INDESTRUCTABLE outlook emails.zip and a few desktop.ini's but that's it.

 

Guess it's time to nuke and re-image my back up.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.