 |  |  |  |  |  |  |  |
Shellpar
 |
I recently made it so I could see hidden files and folders. On ym desktop popped up a file called SHELLPAR. I looked through other folders and saw multiples of this same file. When opened with Notepad each gave a different name of a file stored on my computer (or previously deleted/moved).
Does anyone know what this is?
Does anyone know what this is?
•
•
Join Date: Aug 2003
Posts: 9,601
Reputation: 
Solved Threads: 497
•
•
•
•
Originally Posted by JoeyBritt
I recently made it so I could see hidden files and folders. On ym desktop popped up a file called SHELLPAR. I looked through other folders and saw multiples of this same file. When opened with Notepad each gave a different name of a file stored on my computer (or previously deleted/moved).
Does anyone know what this is?
Linux boot cd http://www.knopper.net/knoppix/index-en.html
A possible trojan dialer. Can you give us some of the filenames listed in the shellpar files please?
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
•
•
Join Date: Dec 2004
Posts: 207
Reputation:
Solved Threads: 7
Posting Whiz in Training
These are the shell parameters for each program in the Registry. Don't mess with them.
•
•
•
•
Originally Posted by Real-tiner
These are the shell parameters for each program in the Registry. Don't mess with them.
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
http://img.photobucket.com/albums/v4...creenSHELL.jpg
Screenshot of SHELLPAR on desktop and in My Docs.
Screenshot of SHELLPAR on desktop and in My Docs.
Hmm, possibly interesting... the filename listed in that particular shellpar file happens to be the SpyBot Search & Destroy executable.
What are the filenames listed in some of the other shellpar files? Please just post the names of the files; those tiny screenshots are a bit hard on the eyes.
What are the filenames listed in some of the other shellpar files? Please just post the names of the files; those tiny screenshots are a bit hard on the eyes.
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
C:\Documents and Settings\Joey\Cookies\index.dat was the one on my desktop.
they are all links to files like that. I will post some more when I have more time
they are all links to files like that. I will post some more when I have more time
Do that. In the mean time I'll try to dig up more info on the "shellpar" files in general.
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
•
•
Join Date: Aug 2003
Posts: 9,601
Reputation:
Solved Threads: 497
maybe we should see a hijackthis log ,as info found when searching shelpar comes up with reference to a dialer .
Linux boot cd http://www.knopper.net/knoppix/index-en.html
|
Other Threads in the Windows NT / 2000 / XP Forum
- Previous Thread: Keyboard I/O Range Help
- Next Thread: driver_irql error question
| Thread Tools | Search this Thread |
You need to join our community in order to build your list of favorite forums. You can visit the forum index for a listing of all forums.
Related Forum Features
Latest Windows NT / 2000 / XP Posts
- Today's Posts
- Unanswered Threads
.net 3.5 3daccelertion 64bit 2010 a.exe activedirectory address alaris android application arm auto black blue book bsod bulletin canonical cellphones chinese chkdsk codeplex collaboration combofix computer computerfreezes deployments desktop domain drive error explorer fax fonts freeze gadgets hardware home intel killprocess laptop laptops latitude lcd linux load mac markshuttleworth memory microsoft minimalizes mobile monitor netbooks opensource operatingsystems options oracle osinstallationproblem outlook partition patch port program proxy raid rds reformat remotedesktopconnection retail screen security server. sharepoint sitetositevpn slowperformance sp1 sp3 spyware studios technology ubuntu unreadable update upgrade usb verizon virtual virus vpn wab webos weecam window windows windows7 windowsxp worm xp
