File folder name "Do" or variation

[pscott37]

On my C drive there are 4 files labeled as "Do" or a variant. Inside these
folders are folders for Cookies & Local Settings. Can anyone tell me what
these are & if I can delete them? Thank you to anyone that can shed light on
this.

 

[Iceman]

On my C drive there are 4 files labeled as "Do" or a variant. Inside these
folders are folders for Cookies & Local Settings. Can anyone tell me what
these are & if I can delete them? Thank you to anyone that can shed light on
this.

Are you the only user of the computer? These look like datafolders for
different users. If you are the only user and you know the location of your
userdata, I think you can safely delete those extra datafolders. If
otherwise, leave them alone.

 

[pscott37]

Are you the only user of the computer? These look like datafolders for
different users. If you are the only user and you know the location of your
userdata, I think you can safely delete those extra datafolders. If
otherwise, leave them alone.

No, my two kids use have profiles as well. All of our profiles are in the
Documents and Settings folder. Though our profiles are actually on a
different drive than the C drive. My concern is the PC being compromised of
course. I noticed that those "Do" files are modified daily. Seems odd.

 

[Iceman]

In this group pscott37 wrote in message

No, my two kids use have profiles as well. All of our profiles are
in the Documents and Settings folder. Though our profiles are
actually on a different drive than the C drive. My concern is the PC
being compromised of course. I noticed that those "Do" files are
modified daily. Seems odd.

Take a closer look at those cookie and settings folders. Are they related to
your own browsing or local settings (or those of your kids)? If you do
recognize the settings as those of your own, then somehow they have been
copied onto the second hard drive. I still can't hear any alarm bells
ringing.

Anyway, you should do a malware scan. Try these two free applications:

Malwarebytes: http://malwarebytes.org/
SUPERAntiSpyware): http://www.superantispyware.com/

 

[smlunatick]

On my C drive there are 4 files labeled as "Do" or a variant.  Inside these
folders are folders for Cookies & Local Settings.  Can anyone tell me what
these are & if I can delete them?  Thank you to anyone that can shed light on
this.

Check again. Do you mean:

C:\Documents and Settings???
-------

 

[pscott37]

Check again. Do you mean:

C:\Documents and Settings???

No, these are the file names at the root of the C drive:
Do0ÑŸ
DoÒ
DoÒ€
The Documents & Settings folder is as it should be. I haven't seen this on
other PC's which makes me leery. I have used various tools to scan the
machine & it is clean.

When I open the cookies DAT w/notepad, it shows the following: "Client
UrlCache MMF Ver 5.2 @ €
"

I can't open the browsing history folder & the Temporary Internet files all
have multiple desktop.ini files.

Thank you both for your thoughts on this.

 

[Just D.]

Is your C: shared? Take a closer look. It looks like somebody has the access
to this drive and creates some file using the code page that is not
installed on your machine. I was joking in the same manner creating files on
the company FTP server with the code page that the system administrator
didn't have access to. It was funny to see that nobody was able to
open/remane/delete these files created from my machine.

"pscott37"

 

[pscott37]

Is your C: shared? Take a closer look. It looks like somebody has the access
to this drive and creates some file using the code page that is not
installed on your machine. I was joking in the same manner creating files on
the company FTP server with the code page that the system administrator
didn't have access to. It was funny to see that nobody was able to
open/remane/delete these files created from my machine.

"pscott37"

When looking at My Computer, the C drive appears normal (no hand icon) but
when I look at properties & Sharing, it shows that is shared. This is a dual
boot machine & the Vista OS drive is the same. I think though this is a
configuration set by the Windows Home Server to do backups. Does that make
sense?

 

[Just D.]

If this is a System share then it's normal, it always exists. If not, then
it's something else and if you didn't do that then there is a possibility
that somebody's having your machine remotely.