Winpatrol displaying .ini files

[Foxfired]

Hello all,

I have been the victim of pretty frequent browser hijacker attacks. I run Malwarebytes and SuperAntiSpyware which usually gets rid of the viruses. I also use Winpatrol to monitor activity.

After each attack I notice a couple new .ini files in my "hidden files" section. None of my antivirus programs detect them. But they are there.

Here are just a few:

ORQWAJLM.INI2
PPRADMOQ.INI
XBCLNNNN.INI

They are all located in C:\WINDOWS\SYSTEM32\

Should I get rid of them? What are they?

[risl]

Have you tried on-demand scanners from bigger companies? Or online scans? What browser you use and is it an updated version?

Dr.Web CureIt: http://freedrweb.com
Kaspersky AVP-tool: http://ftp.kaspersky.com/devbuilds/AVPTool/
Kaspersky online-scan: http://www.kaspersky.com/virusscanner
Bitdefender online-scan: http://www.bitdefender.com/scan8/ie.html

.. for example

[Bunkhouse Buck]

-{ Quote: "Hello all,

I have been the victim of pretty frequent browser hijacker attacks. I run Malwarebytes and SuperAntiSpyware which usually gets rid of the viruses. I also use Winpatrol to monitor activity.

After each attack I notice a couple new .ini files in my "hidden files" section. None of my antivirus programs detect them. But they are there.

Here are just a few:

ORQWAJLM.INI2
PPRADMOQ.INI
XBCLNNNN.INI

They are all located in C:\WINDOWS\SYSTEM32\

Should I get rid of them? What are they?" }-

Which AV programs do you use? Try Avira which features a very high detection rate (the highest according to AV Comparatives for on-demand scans) and see what it tells you. You can verify that with other web-based free scans like Dr. Web Cure-it, etc.

[C.S.J]

-{ Quote: "

Dr.Web CureIt: http://freedrweb.com
" }-
oh yeahhhh!! ;)


also, ive never heard of those files before, are they giving you trouble?... or is it just curiosity?

[firzen771]

well judging by their name they dont look like files that are legit, but appearances culd be deceiving. well if they are really that important, Windows should automatically re-create them like it does with a lot of it's system critical files if you do choose to delete them.