This is SCARE-EEY!!!!

a reply to: Flyingclaydisk

thank you

a reply to: PokeyJoe

It leaves larp or suspect.

Dbl

a reply to: PokeyJoe

Correct, they were not in this directory on the old machine.

a reply to: Jonjonj

That's the second time you've said this.

What are you implying? I guess I'm failing to understand.

Are you suggesting I'm making all this up???

originally posted by: Flyingclaydisk
a reply to: Jonjonj

That's the second time you've said this.

What are you implying? I guess I'm failing to understand.

Are you suggesting I'm making all this up???

Either that or you are being watched, pretty much yeah.

No other reasons spring to mind, how about you?

a reply to: Jonjonj

Trust me, if I wouldn't have spent the time to make this up.

I've got better things to do.

ETA - WTF, Dude????

originally posted by: Flyingclaydisk
a reply to: Jonjonj

Trust me, if I wouldn't have spent the time to make this up.

I've got better things to do.

So you are being wathched, either you don't care or get off the internets, right?

a reply to: Flyingclaydisk

Was your HDD failing in the old laptop? Did you maybe ever ran a HDDchecker that marked bad sectors unusable?

Peace

a reply to: operation mindcrime

He said he thought it was the motherboard....

a reply to: PokeyJoe

Well between Jonjonj giving him the option that he faked it or is being watched and restricting this search to just the MLB based on the suspicion of the guy who posted this thread because he doesn't know how this happened...

I got nothing...

Peace

Ok, if I have read correctly, you used a standard command line copy function with wildcards to copy over all files of a few specified file types from the old machine to an external drive.

Are you able to remove the HDD from the old laptop and use an external enclosure to access the HDD?

Check the property sheet for created date and modified date to start with so you can determine it was created on the device or placed there. Checks to ID3 tag for additional details. You can see some details in the property sheet but not all. If it is still creqting the files you can check what app has a handle on the files, or use process monitor from sysinternals to trace it back to the source. With process monitor you can also see if the files qre actively being uploaded as they are recorded.

Tag to follow this.

Very interesting!

I never had anything happen like the OP, but, I do recall once I woke up at around 2:30 a.m, and noticed the cell phone which I had switched off before sleeping was ON. I thought that was interesting, and when I went to shut it off, I noticed it was "RECORDING". A few hours of recording, which would have been nothing. It was rather curious but I never thought too much about it, other than I tended to be more careful. Reading your account, made me recall what happened though.

a reply to: operation mindcrime

HDD seemed to be working fine. The issue was a series of things, but the final straw was the keyboard not responding properly at all. For example I'd type one letter and 2-3 different letters would show up. Another letter and nothing would show. At first I thought it might just be the keyboard (easy fix with an external keyboard), but then other stuff started happening like programs starting unexpectedly, or closing, then the screen would go screwy and minimize to like 1" across, or blank out, or it would constantly sit there and minimize, maximize, disappear, etc. Definitely seemed to be the MB. No separate video card on that machine so it couldn't have been that.

I think the fan had failed a while back because I rarely heard it come on recently, and this could be part of it. Probably just cooked itself.

User agreements that people agree allow companies to access and record your videos, images, web history, microphone.

I started a thread about my friend who made an app, when he added in a program for a user agreement.

We got to see a lot of crazy stuff that people have agreed to share

a reply to: jadedANDcynical Probably, but I haven't tried that. Prior to this it looked like I'd gotten everything I needed off of it, so there was no reason to.

Now I'm thinking this definitely warrants closer investigation.

a reply to: Flyingclaydisk

Win7? OK, should be able to figure that one out easily enough.

It sounds like you did have some background process running, probably a Trojan. The file names appear to be time-stamped in the filename, and were likely tucked safely away somewhere in a hidden folder. In other words, someone was listening to you remotely.

The time stamp looks like it uses a simple algorithm: yymmdd_hhmm. Hours are in 24-hour format.

It's not Windows.

Usually, these things hit the C://Users/[your name]/App Data/ folders. That's the biggest security hole Win7 seems to have. Permissions are necessarily lax on these folders, as it serves as a kind of pseudo-quarantine zone for apps to access. Unfortunately, that means an app like the browser can access it too and a website can send an app into it.

In Windows Exploder, go to the advanced view options (don't remember the exact buttons to push, but you should be able to find it... it's the long list of checkboxes) and make sure it is set to show all files, even when hidden and including system files. Win7 automatically hides these by default. There is probably a small executable hiding in the App Data folder (or a subfolder of it) that is running in the background and was hidden.

Another trick is to type "msconfig.exe," run it in administrative mode, and go to the start-up tab. That hidden app is likely running in there, but it won't advertise itself. The name (if there even is a name; not all processes have names) will be something cryptic and likely innocent-sounding. Power up the old Google and just start searching for any app that is listed. Sometimes a virus can use the same name as a Windows process, but it'll be in a different folder. So watch for that. Of course, this one is for future reference; it only works when you are running the infected machine.

And of course, unless you transferred .exe or other executable files over, it's gone. All that is left are those mp3s. If you can get your old drive to ping, you can use the first trick on it to maybe find the little devil. Just be ready to do a lot of searching... there's a lot of folders under App Data and it likely won't be conspicuous.

I do want to know, since it is likely a virus that somehow got through, what antivirus do you normally use? Also, do you run regular scans with MalWareBytes? If you do, this is the first time I have seen a virus squeak past them.

TheRedneck

www.komando.com...

InvisiMole??