Sony Rootkit & MP3 Problems & Hidden Files

Updated 12/14/05 at the bottom:

HP Computer
I thought that I had fixed the problems. However, on Saturday, I started to have connection issues (internet and my network) on the HP computer. On Sunday, I attempted to play an MP3. I got the same error message as before - waveout file not supported! I put in a regular CD and the music played fine. Again, anything to do with MP3s (extracting or playing) has been disabled on that HP computer.

On the day that the problem started, I was working with 5 to 7 CDs. Two were Sonys (one brand new and one old). However, there were 4 other brand new CDs. Sony released a listing of which CDs had the rootkits. My CDs were not on the list. I am not sure Sony's list was complete. Plus, I think there are more software issues that Sony has not owned up to. They may not in the ear future because of the current litigation and the threat of future litigation.

I give up. I am going to reformat the HP hard disk and start all over with that computer. I am sick of trying to fix the computer. I have already wasted 15 to 20 hours trying to get the HP ship-shape. Plus, some of those hours were paid for.

Update 12/15/05: I have not reformatted this computer because the data files are not backed up yet. In addition, I wanted to try the Linux boot disk that I just bought. I have to finish all of this before tomorrow because Scott comes in around 1 pm to work on specific projects. I would hate to have to waste his time on routine matters.

Older Dell Computer
I used Rootkit Revealer on my older Dell. I think the software's name is very inaccurate. It found about 150,000 files! I was shocked. Then I started to examine all the files. Hmmm... How odd.

The software listed ALL my excel worksheets. Why would it do that? The diagnostic was that the file was hidden from API. I am not sure what are the consequences of that. Although, on the HP computer, none of my excel files were tagged. Guess I shall have to try to figure out why the excel files got tagged.

In addition, the Rootkit Revealer showed 1,000's of cookies. Huh? How was this possible? I routinely delete cookies from my computer. When I looked closely at the cookies, I saw they dated back to 2001 (when I got that computer). These cookies were not in the cookie folder, but were in a folder called Temp Internet Files.

I went through the step to delete all cookies and temp internet files. Nada. The files were still there. When I tried to manually delete the files, I started getting kicked out of File Manager and getting the error message to send Microsoft a diagnostic. Since I could d not scroll down the folder without a lockout, I tried Select All and then Delete. This visibly worked.

However, when I checked the properties for the Temp Internet Files folder, there was about 140 MB in 5,000 files and 28 folders. What was that? I checked another computer and saw a similar situation (75 MB in 2,500 files and fewer folders). I had already asked the system to not hide any files from me.

Update 12/15/05: Looks like this folder is the same folder which appears in all the various users (under Documents and Settings). When I went through each user (I have never used any of these accounts) and deleleted all the files in ... C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files the problem was resolved. That is good because I was starting to have visions of Microsoft planting hidden software on all system to ...

Newer Dell Computer
Since I am waiting for a call from a Microsoft techie, I shall try to see if he will answer this question too. I downloaded their beta spyware detection software on my newest Dell. I ran the software and it detected one spyware which it deleted. I used Spybot Search and Destroy and it found another.

After installing the Microsoft beta software, my desktop acts screwy. It keeps resetting the theme to XP (which I hate). I have to manually set it back to Windows Classic each time I cold boot the machine. What a drag. I left a message at Microsoft Support and a Live body (from India) called me. He had me uninstall the software, eliminate cookies, temp internet files and history. Great, this seemed to work.

Unfortunately, the fix did not last long. The next day, when I started up the computer, it was doing it again. In addition, I lost my Show Desktop icon. When I try to use it, I am told that it is a missing shortcut and Show Desktop.scf cannot be found. I don't use the icon very often, but I do like to figure out why things happen.

Anyway, I shall try to see if I can get the Microsoft techie to answer my questions:

1. Why does the theme reset itself each time I cold boot?
2. What happened to my Show Desktop file?
3. What files and folders are hidden in the Temp Internet File folder on all my machines?

Hopefully, the continuing saga of my Computer Woes will come to a successful conclusion! I do plan to reformat both the HP and the Older Dell. However, I am not ready because I still have to backup all my data files.

Update: Today is Tuesday 12/13/05 2:30 AM. The Microsoft techie did not call me on Sunday as promised. I wonder if I need to call them again...

Update: Today is Wednesday 12/14/05. The Microsoft Techie (Michelle) called me at around 9 am. We just finished around 10:30 am. She was not able to help. Her department is the Virus department.

I had already ascertained that I did not have any detectable virus, spyware or adware. So tomorrow, I have to call another number for help in replacing the missing system files which the Microsoft Spyware beta program may have deleted.

On the hidden files in my Temp Internet Folder (under my user account in Documents and Settings section), she suggested that I start to empty the same folder under the other user accounts (Administrator, default, etc). I did this and I now only have 13 MB in 1,400 files. This looks about right since I still have 2 IE5 folders in two other user accounts.

According to Michelle, Microsoft leaves the IE5 files there. I am not sure why...