rhema7 Posted January 28, 2009 Report Share Posted January 28, 2009 during a boot time scan of a associates notebook I removed almost 20 trojans so I cannot remember what was running from the C:\WINDOWS\Fonts but now there are hidden files mostly movie titles .zip files.I calculated the list of fonts and it should contain 95mb of fonts yet Properties on the folder says 2.83 gig.a few people on the net have had this problem but none have given any good answer what to do. Folder options do no good. I have never seen this before and I would like to return the notebook soon.XP homeDell Inspirion 93002g ram2GHZ pent. Centrino160g HDD Quote Link to post Share on other sites
Rorschach112 Posted January 28, 2009 Report Share Posted January 28, 2009 Head over to the malware removal forum Quote Link to post Share on other sites
Pete_C Posted January 28, 2009 Report Share Posted January 28, 2009 This is an old method of loading trojans. Basically if it is in the fonts folder, windows loads / runs it when it boots kind of like if it was in start menu starup folder ; but most people never think of this as a path.My font folder is about 35MB by the way. Quote Link to post Share on other sites
rhema7 Posted January 29, 2009 Author Report Share Posted January 29, 2009 This is an old method of loading trojans. Basically if it is in the fonts folder, windows loads / runs it when it boots kind of like if it was in start menu starup folder ; but most people never think of this as a path.My font folder is about 35MB by the way.Any idea how to recover that space Pete? I'm sure the Trojan is gone it just worries me that the files are there. On my personal Computers I'm contantly looking for space hogs.Thanks for you reply PetePreston Quote Link to post Share on other sites
shanenin Posted January 29, 2009 Report Share Posted January 29, 2009 If you can see them, why not just manually delete them? Quote Link to post Share on other sites
Pete_C Posted January 29, 2009 Report Share Posted January 29, 2009 Yeah, only fonts belong in the font folder. Anything else does not belong there and you can safely deleteShould just have files with extension ttf, fon, pfm, (well the fonts for dos, system set etc have no extension but are recognizably fonts and will have filename starting with USE Quote Link to post Share on other sites
rhema7 Posted January 30, 2009 Author Report Share Posted January 30, 2009 They cannot be seen. Only during Avast scan do I see them. I tried cmd prompt but I can't seem to make the "|" characture in CMD Prompt. Quote Link to post Share on other sites
Pete_C Posted February 1, 2009 Report Share Posted February 1, 2009 Well, hijackthis has a delete on reboot feature where you type in the path and nameThen there is killbox / pocket killbox and move on boot and several other forceware deleters.If avast finds them, try running it in safe mode and see if it can delete them there.Do you have view hidden and system files checked in folder options? And "hide protected files" and "hide known file extensions" unchecked? If not do so. Quote Link to post Share on other sites
shanenin Posted February 1, 2009 Report Share Posted February 1, 2009 You could boot the system with a live cd like bartpe and try to delete them. Quote Link to post Share on other sites
rhema7 Posted February 3, 2009 Author Report Share Posted February 3, 2009 Thanks Guys I never thought about a "liveCD" I will try this out when she returns the unit to me next week. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.