Forums | MacLife
You are not logged in.
#1 2003-01-26 9:02 pm
- titus02906
- Buried alive in the Japanese Knotweed.

- From: Monster Island
- Registered: 2002-01-24
- Posts: 1089
- Website
Virus question....
This is my dumb question of the month. Something strange is happening to my older Mac (an 8100/100 running System 8.1). While backing up info to create room, I discovered a nest of "Untitled Folders" in various places. In some of these folders were pictures of a pornographic nature. I did not create them or download pictures into them. Most of the folders were created around March-May of 2001 and some of them have creation dates as far back as 1996. A number of these folders were nested inside of folders named Recovered Files which were nested inside of other folders. Nothing appears to be any newer than the time I clicked on those e-mails. I have visited two or three porn sites about a year ago - in response to spam e-mail I got curious about (I know - dumb move). Is there a virus or a cookie or a macro virus or something that can have done this? Also, some of these folders have popped up into backup disks I made elsewhere. I'm worried about this never being erradicated - if it is a virus.
None of these files have shown up on my new Mac (knock wood).
Any info would be helpful.
"This is no bar room brawl. These are the bad ol' days. The all or nothing days.They're back!"
Marv, SIN CITY
Offline
#2 2003-01-26 10:40 pm
Re: Virus question....
Simple question...is the 8100 (or the hard disk in it) originally your machine? If you picked either up second-hand, perhaps these files where put there by the previous owner. Just a thought. I don't know of any virus that would download this type of material...but you never know. It wouldn't be a cookie as this is only a string containing URLs, time, and password information.
Again, just a passing thought.
Cheers,
ptervin...just passing his lunch break doing what he's always doing
Offline
#3 2003-01-26 11:11 pm
- titus02906
- Buried alive in the Japanese Knotweed.

- From: Monster Island
- Registered: 2002-01-24
- Posts: 1089
- Website
Re: Virus question....
No. The machine was bought new in 1995. What is unusual is that we just found one of these files which was created in 1994.
Just to give a summary, which may help -
Most all the Untitled Folders were located on backup disks I had made elsewhere (all at the same place). One was located on a backup CD in a System Folder which had no System in it, but had a Recovered Files folder where the Untitled Folder sat. There was another Untitled Folder in that backup CD as well. There was one more CD which held backup material which had an Untitled Folder inside. On the hard drive of the 8100/100 there were two: one was in a copy of a zip disk which I had to put onto the hard drive at some point. The other was nested in a sub folder of a Help folder in Acrobat Reader. There were four other Zip disks which had Untitled Folders in them. On the hard drive were several other empty Untitled Folders which were nested inside other files, and there were a couple with Untitled Folders inside of Untitled Folders. I'll occasionally make an Untitled Folder for something, but these look like randomly created folders in odd places.
At the top of a couple of the folders was an application called KPT QVWR (or something like that) which I didn't open....
"This is no bar room brawl. These are the bad ol' days. The all or nothing days.They're back!"
Marv, SIN CITY
Offline
#4 2003-01-27 8:18 am
- Tetrachloride
- ❖ ❖ ❖

- Registered: 2001-01-29
- Posts: 7150
Re: Virus question....
I did a search on the KPT phrase -- nothing worthwhile came up. I'd consider backing up, wiping and re-installing. I would guess that a program you installed was contaminated. I find the virus or download scenario less likely.
Offline
#5 2003-01-27 8:32 am
- registered_user
- bulletproof
- From: padding: zero-pixels;
- Registered: 2000-12-19
- Posts: 16026
- Website
Re: Virus question....
pshaw. That's not a virus, that's the porn fairy leaving you presents.
Um, a few questions. Has there ever been anonymous FTP access to that machine? Have there ever been any other users on that machine? And have you ever used software that automates your back-ups?
Offline
#6 2003-01-27 9:09 am
- zerocool90
- Member
- From: N.C.
- Registered: 2002-05-02
- Posts: 1538
- Website
Re: Virus question....
how bout the question "are there or have there been any teens in your house?" i would bet either its some sort of cache that got misplaced, or someone trying to hide thier misdeeds.
the time created/modified can be altered depnding on what the system date was set at when the incident occured.
....Shopping on BuyMusic.com is best described as Soviet.... from the washington post
and goto www.deloreanrocks.com and listen to my music
Offline
#7 2003-01-27 9:38 am
- titus02906
- Buried alive in the Japanese Knotweed.

- From: Monster Island
- Registered: 2002-01-24
- Posts: 1089
- Website
Re: Virus question....
pshaw. That's not a virus, that's the porn fairy leaving you presents.
![]()
Um, a few questions. Has there ever been anonymous FTP access to that machine? Have there ever been any other users on that machine? And have you ever used software that automates your back-ups?
Not on my home machine. However, I've traced many of these folders to backups I had made at my work, where there is anonymous ftp access, though I rarely had the need to retrieve info from the fto site. (I would take my zip disks there to make CD backups and to transfer some work between there and home). I am not aware if they automate their backups. I'm not as panicky now since I seem to have located everything and the last folder was created nearly a year ago. I don't think it's a virus anymore - I ran a current Norton anti-virus scan through it and there was a macro virus on the machine which seemed to affect MS Word docs - though the KPT QVWR app mystefies me. I'm certainly not going to open it.
I guess the next thing would be to backup files and wipe the HD.
With regard to teens in the house with access - no. We went away last summer for two weeks and had a number of people come in to take care of the cat. They're all PC people, however and I don't think any of them would have known how to do things on the Mac - and I would have thought they would rather use the flat panel iMac instead of the 8100 and it's clean (knock wood).
Thanks for the info.
"This is no bar room brawl. These are the bad ol' days. The all or nothing days.They're back!"
Marv, SIN CITY
Offline
#8 2003-01-27 1:06 pm
- cheesy
- Member
- From: LA, CA / Seattle WA / SF, CA
- Registered: 2001-09-21
- Posts: 1813
Re: Virus question....
KPT=Kai's Power Tools???
Its image editing pluggins for Photoshop. No clue what QVWR stands for.
Offline
#10 2003-01-27 3:14 pm
- titus02906
- Buried alive in the Japanese Knotweed.

- From: Monster Island
- Registered: 2002-01-24
- Posts: 1089
- Website
Re: Virus question....
KPT=Kai's Power Tools???
Its image editing pluggins for Photoshop. No clue what QVWR stands for.
Definitely not opening it then.
Thanks!
"This is no bar room brawl. These are the bad ol' days. The all or nothing days.They're back!"
Marv, SIN CITY
Offline
