In my Local Settings\Temporary Internet Files folder I have an odd folder
called 25RERLDI whose contents are:

25RERLDI\YSUCFRPR
25RERLDI\YSUCFRPR\Offline\0x00000001_R
25RERLDI\YSUCFRPR\Offline\0x00000003_R
25RERLDI\YSUCFRPR\Offline\e
25RERLDI\YSUCFRPR\Offline\f
25RERLDI\YSUCFRPR\Offline\g
25RERLDI\YSUCFRPR\Offline\HashFile.dat

What are these? Google fetches up nothing.

--
Bob
http://www.kanyak.com

Opinicus wrote:
> In my Local Settings\Temporary Internet Files folder I have an odd folder
> called 25RERLDI whose contents are:
>
> 25RERLDI\YSUCFRPR
> 25RERLDI\YSUCFRPR\Offline\0x00000001_R
> 25RERLDI\YSUCFRPR\Offline\0x00000003_R
> 25RERLDI\YSUCFRPR\Offline\e
> 25RERLDI\YSUCFRPR\Offline\f
> 25RERLDI\YSUCFRPR\Offline\g
> 25RERLDI\YSUCFRPR\Offline\HashFile.dat
>
> What are these? Google fetches up nothing.
>

Since Google brings up nothing and these files are in the TIF folder,
malware is suspected. What is the virus/malware state of the computer?
Be sure your machine is clean:

http://www.elephantboycomputers.com/...moving_Malware


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

"Malke" <(E-Mail Removed)> wrote

>> In my Local Settings\Temporary Internet Files folder I have an odd folder
>> called 25RERLDI whose contents are:
>> 25RERLDI\YSUCFRPR
>> 25RERLDI\YSUCFRPR\Offline\0x00000001_R
>> 25RERLDI\YSUCFRPR\Offline\0x00000003_R
>> 25RERLDI\YSUCFRPR\Offline\e
>> 25RERLDI\YSUCFRPR\Offline\f
>> 25RERLDI\YSUCFRPR\Offline\g
>> 25RERLDI\YSUCFRPR\Offline\HashFile.dat
>> What are these? Google fetches up nothing.

> Since Google brings up nothing and these files are in the TIF folder,
> malware is suspected. What is the virus/malware state of the computer? Be
> sure your machine is clean:

It's squeaky clean. I find it interesting that all the files and folders are
dated 2-11-2006. (November.) That's exactly a week after I installed IE7.
I'm wondering if it's related.
--
Bob
http://www.kanyak.com

"Opinicus" wrote:

> In my Local Settings\Temporary Internet Files folder I have an odd folder
> called 25RERLDI whose contents are:
>
> 25RERLDI\YSUCFRPR
> 25RERLDI\YSUCFRPR\Offline\0x00000001_R
> 25RERLDI\YSUCFRPR\Offline\0x00000003_R
> 25RERLDI\YSUCFRPR\Offline\e
> 25RERLDI\YSUCFRPR\Offline\f
> 25RERLDI\YSUCFRPR\Offline\g
> 25RERLDI\YSUCFRPR\Offline\HashFile.dat
>
> What are these? Google fetches up nothing.
>
> --
> Bob
> http://www.kanyak.com

Hi Bob,
Read this article:
http://support.microsoft.com/default...b;en-us;281899
Note:
If these entries in here:
C:\Docuemnts and Settings\Local User\User Data\< file here>
Also it could be a Dialer for some sort, bear in mind a script can fool the
Anti-Virus or the Anti-Spyware to avoid detection.
You can use AutoRun or Processor Explorer to monitor what in the background
and the traffic from/out of yiour machine:
http://www.microsoft.com/technet/sys...sExplorer.mspx

If you have a Website publishing serive it can generate these folder (
specially if you are using fash).
HTH.
Let us know.
nass

Opinicus wrote:
> "Malke" <(E-Mail Removed)> wrote
>
>>> In my Local Settings\Temporary Internet Files folder I have an odd folder
>>> called 25RERLDI whose contents are:
>>> 25RERLDI\YSUCFRPR
>>> 25RERLDI\YSUCFRPR\Offline\0x00000001_R
>>> 25RERLDI\YSUCFRPR\Offline\0x00000003_R
>>> 25RERLDI\YSUCFRPR\Offline\e
>>> 25RERLDI\YSUCFRPR\Offline\f
>>> 25RERLDI\YSUCFRPR\Offline\g
>>> 25RERLDI\YSUCFRPR\Offline\HashFile.dat
>>> What are these? Google fetches up nothing.
>
>> Since Google brings up nothing and these files are in the TIF folder,
>> malware is suspected. What is the virus/malware state of the computer? Be
>> sure your machine is clean:
>
> It's squeaky clean. I find it interesting that all the files and folders are
> dated 2-11-2006. (November.) That's exactly a week after I installed IE7.
> I'm wondering if it's related.

I don't know since I don't have IE7 on any of the machines except the
Vista one. You might want to ask in the IE7 newsgroup, which is:

microsoft.public.internetexplorer.general


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

"Opinicus" <(E-Mail Removed)> wrote

> In my Local Settings\Temporary Internet Files folder I have an odd folder
> called 25RERLDI whose contents are:
>
> 25RERLDI\YSUCFRPR
> 25RERLDI\YSUCFRPR\Offline\0x00000001_R
> 25RERLDI\YSUCFRPR\Offline\0x00000003_R
> 25RERLDI\YSUCFRPR\Offline\e
> 25RERLDI\YSUCFRPR\Offline\f
> 25RERLDI\YSUCFRPR\Offline\g
> 25RERLDI\YSUCFRPR\Offline\HashFile.dat

Why not delete all the TIFs and see if they come back?

--
Rock [MS-MVP User/Shell]