An AVG virus scan showed three trojans, all located in a folder and its
subfolders on my E: drive.

E:\mp3 downloads\NTI Media Maker Premium v8 0 0 6366 {4-2008}
[+BEST+][h33t][migel].zip

E:\mp3 downloads\NTI Media Maker Premium v8 0 0 6366 {4-2008}
[+BEST+][h33t][migel].zip\setup.exe

E:\mp3 downloads\NTI Media Maker Premium v8 0 0 6366 {4-2008}
[+BEST+][h33t][migel].zip\crack\crack.exe

While the scan was in progress, I couldn't find these files using XP's
Search. Likewise, using Windows Explorer, I can't find the NTI... folder.

Why didn't Windows find them? I have the Show Hidden Files and Folders
option checked, and I am not hiding Known file extensions or Protected
operating system files.

AVG successfully removed these files to something their Virus Vault.



As an aside, that NTI Media Maker program, from Limewire, was how a
virus called MaCatte got into my computer. The crack.exe program is a
part of it.

Another search question: When I used XP's Search function to find
crack.exe, it found an occurrence (before running AVG, but not after),
but not on either of the hard drives or their partitions, and it didn't
appear on my desktop. Where was it hiding?

Thanks for your insights.

Ray

Ray K wrote:
> An AVG virus scan showed three trojans, all located in a folder and its
> subfolders on my E: drive.
>
> E:\mp3 downloads\NTI Media Maker Premium v8 0 0 6366 {4-2008}
> [+BEST+][h33t][migel].zip
>
> E:\mp3 downloads\NTI Media Maker Premium v8 0 0 6366 {4-2008}
> [+BEST+][h33t][migel].zip\setup.exe
>
> E:\mp3 downloads\NTI Media Maker Premium v8 0 0 6366 {4-2008}
> [+BEST+][h33t][migel].zip\crack\crack.exe
>
> While the scan was in progress, I couldn't find these files using XP's
> Search. Likewise, using Windows Explorer, I can't find the NTI... folder.
>
> Why didn't Windows find them? I have the Show Hidden Files and Folders
> option checked, and I am not hiding Known file extensions or Protected
> operating system files.
>
> AVG successfully removed these files to something their Virus Vault.
>
>
>
> As an aside, that NTI Media Maker program, from Limewire, was how a
> virus called MaCatte got into my computer. The crack.exe program is a
> part of it.
>
> Another search question: When I used XP's Search function to find
> crack.exe, it found an occurrence (before running AVG, but not after),
> but not on either of the hard drives or their partitions, and it didn't
> appear on my desktop. Where was it hiding?
>
> Thanks for your insights.
>
> Ray

There are probably newsgroups that discuss these subjects extensively.

It's my understanding that some malware hides itself. For example,
interrupts controlled by the malware actually cause the files and
registry entries to be bypassed if you do a search for the specific files.

--
Joe =o)