PDA

View Full Version : Strange thing happened today.


farmerlee
January 3rd, 2007, 07:15 PM
I turned on my laptop today (sony vaio running xphome sp2) and when the desktop came up i noticed the 'My Documents' icon had strangely been renamed to '2345789-'. I found this a bit disturbing and did some scans with antivir premium, a-squared free and ad-aware which brought up nothing. Checking things in my computer i realised i'd left gss disabled which was a bit stupid but everything looked normal. So instead of wasting time looking into this i just reformated to be safe.

Anyone have any idea what this is? Malware? Windows bug/error?

ccsito
January 3rd, 2007, 07:42 PM
Never seen that before, but I would scan with several vendor programs besides the three that you mentioned. Also, if you have a rootkit, I would use a rootkit scanner (like rootkit revealer, sophos anti-rootkit, ice sword) as well.

ccsito
January 3rd, 2007, 07:52 PM
Did your registry contain the following Class ID entry? Click on the advanced tab to see the registry settings of this trojan.

http://www.sophos.com/virusinfo/analyses/trojagentcl.html