|
Posted by Malke on June 30, 2008, 7:30 am
If you were Registered and logged in, you could reply and use other advanced thread options
Will wrote:
> I have a very strange looking folder under my C:\WINDOWS folder, which if
> it is not a trojan then it must be some kind of device driver install that
> went
> very bad. I would like help identifying what it might be.
>
> The folder is named:
>
> C:\WINDOWS\EFUZEJYDIXC1AZ4D
>
> and it contains copies of many Windows system files. The contents of
> this folder are posted here:
>
> http://pages.uschw.com/usenet/EFUZEJ-folder/folder-contents.txt
>
> Of special note is a logfile in that folder whose name and contents are
> linked here:
>
> http://pages.uschw.com/usenet/EFUZEJ-folder/sthdae.log
>
> You may want to open that logfile in an editor other than NOTEPAD that can
> hand LF only at the end of each line. Word 2003 opened it fine here.
>
> In that logfile I see attempts to add device drivers, that are failing
> with
> various messages about an invalid pin. That almost looks like Bluetooth?
>
> What I find most suspicious about this folder is that it copies over so
> many
> critical Windows system files. Why would any device installation need
> its own private copies of those files?
>
And what results do you get when you do virus/malware removal scanning?
http://www.elephantboycomputers.com/page2.html#Removing_Malware
Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ
| 
XML site map