Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Malware on computer (I think)


  • Please log in to reply

#1
nparab

nparab

    New Member

  • Member
  • Pip
  • 2 posts
Hello all,

I am running Win XP Home edition from the C: drive of my computer. There is another partition D: on which certain files have suddenly appeared two days back.

A folder by the name "a575b0727d5ddcce010e599889c1" has been created with the sub-folders "common", "sp1" and "sp2" inside of it.

Inside "common" there are files:

eula.txt,
spcustom.dll,
spmsg.dll,
spuninst (Windows Service Pack Uninstall),
update (Windows Service Pack Setup)

Inside "sp1" and "sp2" folders there are a lot of dlls (eg. browser.dll, callcont.dll) and "update" sub-folders.

If I try to delete any of these folders, they are read-only. When I try to change permissions and press "Apply", they still show as read-only.

If I try to delete any of the files inside the folders, I get this message: "Cannot delete browser.dll. Make sure the disk is not full or write-protected and that the file is not in use".

I just want to know if these are malware files.

BTW, there doesn't seem to be anything wrong with my computer's functioning.

I have scanned for adware using Ad-Aware and Spybot S&D. I also have Spywareblaster installed and protecting against adware.

Please let me know if this is some kind of malware, or is it part of the "Automatic Upgrades" feature of Win XP.

Thank You & Best Regards,
Nilesh

Edited by nparab, 29 April 2006 - 10:07 AM.

  • 0

Advertisements


#2
teacup61

teacup61

    Visiting Staff

  • Member
  • PipPipPip
  • 268 posts
Hello there nparab,

I found a LOT on this, and what you're seeing appears to be legit from Microsoft. Here's but one discussion of many:

http://forumz.tomsha...pict197446.html

:whistling:

tea
  • 0

#3
nparab

nparab

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Hello tea,

Thanks for your help and reply. I also read some of the Windows Autoupdate logs in my c:\windows folder and found the directory name inside one of the logs. So these files indeed seem legit like you said.

Thanks Again & Best Regards,
Nilesh
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP