Anyone knows what are these folders or why are they created? Thanks.

[Lisa]

I have few folders with wired names created in my Windows folder! They are
all empty but they get recreated with different names when ever I delete
them! They have names like;

2rc9uzgdm3cx6j8x
4hezsl6z01a3kpi3
4p2rkle7w16bk9yj
05a3glan0lyf0per
c1q7gd6n09mv4hq7
GHM3OTQ3W12NCT2R
gpyvchmzwlevgdy7

I currently have 23 such folders in the Windows folder.

I did all the needed virus and spyware detection and nothing shows up.
Please let me know if you have an idea as to what they are? Thanks.

 

[David H. Lipman]

From: "Lisa" <[email protected]>

| I have few folders with wired names created in my Windows folder! They are
| all empty but they get recreated with different names when ever I delete
| them! They have names like;
|
| 2rc9uzgdm3cx6j8x
| 4hezsl6z01a3kpi3
| 4p2rkle7w16bk9yj
| 05a3glan0lyf0per
| c1q7gd6n09mv4hq7
| GHM3OTQ3W12NCT2R
| gpyvchmzwlevgdy7
|
| I currently have 23 such folders in the Windows folder.
|
| I did all the needed virus and spyware detection and nothing shows up.
| Please let me know if you have an idea as to what they are? Thanks.
|


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[Lisa]

All clean! Man, this took a very loooong time to run!

Obviously, I did not find anything and I still have the same issue. thanks
any way.

 

[David H. Lipman]

From: "Lisa" <[email protected]>

| All clean! Man, this took a very loooong time to run!
|
| Obviously, I did not find anything and I still have the same issue. thanks
| any way.
|

Thanx for the feedback !

 

[Guest]

I have few folders with wired names created in my Windows folder! They are
all empty but they get recreated with different names when ever I delete
them! They have names like;

2rc9uzgdm3cx6j8x
4hezsl6z01a3kpi3
4p2rkle7w16bk9yj
05a3glan0lyf0per
c1q7gd6n09mv4hq7
GHM3OTQ3W12NCT2R
gpyvchmzwlevgdy7

I currently have 23 such folders in the Windows folder.

I did all the needed virus and spyware detection and nothing shows up.
Please let me know if you have an idea as to what they are? Thanks.

Hi Lisa,
What the exact path name for this folder, my guess it is an internet folders
created by somehow, result from download or accessing the internet,
accessing Applications and all the User Data been accessed on His/Her account.

If the path looks like this it is safe to delete them:
C:\Documents and Settings\Nass\UserData \2rc9uzgdm3cx6j8x( folders name= 0
or sometimes =1KB)

If it is in the Temp file, it created by the internet downloads and websites
access and Some server create this to keep track of what downloaded and keep
track of your History download it will look like this:

C:\Windows\Temp\Temporary Internet Files\(the files/folders here).

So you can delete these Folders if you would like from these Pathes, if it
in another System Path, then try to move them to an external Storage(i.e. CD,
DVD, External HDD) and Delete them from the system and wait for a week or so
and See if any Program will misbehave or ask for a file/folder been missing,
then you know one of these folders is belonging to this Application and you
can start from there to understand the behavior of this App/Program and what
it does on your computer if not then it is likely an * orphan * file left
behind from Downloading or accessing Application and not doing any work on it
or open Empty Doc, File and close without adding any Text/Data to it.
HTH.
Please let us know.
Regards,
nass

 

[Lisa]

Hi nass,

actually, the exact path is the windows folder; C:\Windows\4p2rkle7w16bk9yj
and so on. About 25 of those! They are empty but they get recreated as soon
as I delete them and restart the PC. I really don't care if they are there
and no harm is done, I am just worried that something malicious is creating
them!

Is there a way to figure out who or what is creating these folders? Thanks
again.

 

[Guest]

Hi nass,

actually, the exact path is the windows folder; C:\Windows\4p2rkle7w16bk9yj
and so on. About 25 of those! They are empty but they get recreated as soon
as I delete them and restart the PC. I really don't care if they are there
and no harm is done, I am just worried that something malicious is creating
them!

Is there a way to figure out who or what is creating these folders? Thanks
again.

Hi Lisa,
==Try to download the clean up Hives from Ms:
http://www.microsoft.com/downloads/...6d-8912-4e18-b570-42470e2f3582&displaylang=en

Did you uninstall/install any programs recently.

== If the above didn't help try to start the Msconfig and see your start up
programs what is there and you know what you have and what you haven't.
Try to download this tool and run it:
http://www.sysinternals.com

If you suspect a program and you can't delete it or remove in Add/Remove try
this:
Start >> Run >> Regedit.exe enter. Open (back up your Registry first
please)
[+] HKEY_Local_Machine\software\Microsoft\SharedTools\MSCONFIG\Startupreg\.
Expand the *Startupreg* and you will see all start up programs there, if you
decided to remove one just delete the entry for it there and after finishing
close the Registry eidtor and Reboot.

HTH.
Please let us know.
Regs,
nass

 

[David H. Lipman]

From: "Lisa" <[email protected]>

| Hi nass,
|
| actually, the exact path is the windows folder; C:\Windows\4p2rkle7w16bk9yj
| and so on. About 25 of those! They are empty but they get recreated as soon
| as I delete them and restart the PC. I really don't care if they are there
| and no harm is done, I am just worried that something malicious is creating
| them!
|
| Is there a way to figure out who or what is creating these folders? Thanks
| again.
|


Lisa:

Go to; http://www.microsoft.com/technet/sysinternals/fileanddiskutilities.mspx

There are file process utilities there that you can use to determine what process is
auto-creating those folders.