[nparab]

Hello all,

I am running Win XP Home edition from the C: drive of my computer. There is another partition D: on which certain files have suddenly appeared two days back.

A folder by the name "a575b0727d5ddcce010e599889c1" has been created with the sub-folders "common", "sp1" and "sp2" inside of it.

Inside "common" there are files:

eula.txt,
spcustom.dll,
spmsg.dll,
spuninst (Windows Service Pack Uninstall),
update (Windows Service Pack Setup)

Inside "sp1" and "sp2" folders there are a lot of dlls (eg. browser.dll, callcont.dll) and "update" sub-folders.

If I try to delete any of these folders, they are read-only. When I try to change permissions and press "Apply", they still show as read-only.

If I try to delete any of the files inside the folders, I get this message: "Cannot delete browser.dll. Make sure the disk is not full or write-protected and that the file is not in use".

I just want to know if these are malware files.

BTW, there doesn't seem to be anything wrong with my computer's functioning.

I have scanned for adware using Ad-Aware and Spybot S&D. I also have Spywareblaster installed and protecting against adware.

Please let me know if this is some kind of malware, or is it part of the "Automatic Upgrades" feature of Win XP.

Thank You & Best Regards,
Nilesh

Edited by nparab, 29 April 2006 - 10:07 AM.

[Advertisements]

Hello there nparab,

I found a LOT on this, and what you're seeing appears to be legit from Microsoft. Here's but one discussion of many:

http://forumz.tomsha...pict197446.html



tea

[teacup61]

Hello there nparab,

I found a LOT on this, and what you're seeing appears to be legit from Microsoft. Here's but one discussion of many:

http://forumz.tomsha...pict197446.html



tea

[nparab]

Hello tea,

Thanks for your help and reply. I also read some of the Windows Autoupdate logs in my c:\windows folder and found the directory name inside one of the logs. So these files indeed seem legit like you said.

Thanks Again & Best Regards,
Nilesh