25RERLDI ?

  • Thread starter Thread starter Opinicus
  • Start date Start date
O

Opinicus

In my Local Settings\Temporary Internet Files folder I have an odd folder
called 25RERLDI whose contents are:

25RERLDI\YSUCFRPR
25RERLDI\YSUCFRPR\Offline\0x00000001_R
25RERLDI\YSUCFRPR\Offline\0x00000003_R
25RERLDI\YSUCFRPR\Offline\e
25RERLDI\YSUCFRPR\Offline\f
25RERLDI\YSUCFRPR\Offline\g
25RERLDI\YSUCFRPR\Offline\HashFile.dat

What are these? Google fetches up nothing.
 
Opinicus said:
In my Local Settings\Temporary Internet Files folder I have an odd folder
called 25RERLDI whose contents are:

25RERLDI\YSUCFRPR
25RERLDI\YSUCFRPR\Offline\0x00000001_R
25RERLDI\YSUCFRPR\Offline\0x00000003_R
25RERLDI\YSUCFRPR\Offline\e
25RERLDI\YSUCFRPR\Offline\f
25RERLDI\YSUCFRPR\Offline\g
25RERLDI\YSUCFRPR\Offline\HashFile.dat

What are these? Google fetches up nothing.
Click to expand...

Since Google brings up nothing and these files are in the TIF folder,
malware is suspected. What is the virus/malware state of the computer?
Be sure your machine is clean:

http://www.elephantboycomputers.com/page2.html#Removing_Malware


Malke
 
Since Google brings up nothing and these files are in the TIF folder,
malware is suspected. What is the virus/malware state of the computer? Be
sure your machine is clean:
Click to expand...

It's squeaky clean. I find it interesting that all the files and folders are
dated 2-11-2006. (November.) That's exactly a week after I installed IE7.
I'm wondering if it's related.
 
Opinicus said:
In my Local Settings\Temporary Internet Files folder I have an odd folder
called 25RERLDI whose contents are:

25RERLDI\YSUCFRPR
25RERLDI\YSUCFRPR\Offline\0x00000001_R
25RERLDI\YSUCFRPR\Offline\0x00000003_R
25RERLDI\YSUCFRPR\Offline\e
25RERLDI\YSUCFRPR\Offline\f
25RERLDI\YSUCFRPR\Offline\g
25RERLDI\YSUCFRPR\Offline\HashFile.dat

What are these? Google fetches up nothing.
Click to expand...

Hi Bob,
Read this article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;281899
Note:
If these entries in here:
C:\Docuemnts and Settings\Local User\User Data\< file here>
Also it could be a Dialer for some sort, bear in mind a script can fool the
Anti-Virus or the Anti-Spyware to avoid detection.
You can use AutoRun or Processor Explorer to monitor what in the background
and the traffic from/out of yiour machine:
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

If you have a Website publishing serive it can generate these folder (
specially if you are using fash).
HTH.
Let us know.
nass
 
Opinicus said:
It's squeaky clean. I find it interesting that all the files and folders are
dated 2-11-2006. (November.) That's exactly a week after I installed IE7.
I'm wondering if it's related.
Click to expand...

I don't know since I don't have IE7 on any of the machines except the
Vista one. You might want to ask in the IE7 newsgroup, which is:

microsoft.public.internetexplorer.general


Malke
 
Opinicus said:
In my Local Settings\Temporary Internet Files folder I have an odd folder
called 25RERLDI whose contents are:

25RERLDI\YSUCFRPR
25RERLDI\YSUCFRPR\Offline\0x00000001_R
25RERLDI\YSUCFRPR\Offline\0x00000003_R
25RERLDI\YSUCFRPR\Offline\e
25RERLDI\YSUCFRPR\Offline\f
25RERLDI\YSUCFRPR\Offline\g
25RERLDI\YSUCFRPR\Offline\HashFile.dat
Click to expand...

Why not delete all the TIFs and see if they come back?
 
Back
Top