xxxyyyzzz.dat and xXx.xXx files in AppData\Local\Temp

I noticed self replicating files xxxyyyzzz.dat and xXx.xXx in AppData\Local\Temp folder.

The xxxyyyzzz.dat containsthe email adress in |Messenger| [email address] |Password| [password] |format.

Eset doesnt find anything, anyone know what this is?

 

Hi strange Eset doesnt find anything as they list it as Malware ? http://www.eset.com/threat-center/encyclopedia/threats/win32spateta

But there are lots of links on google suggesting it could be legit as well

I would do a System Restore and see if they still appear, and/or download MBAM and update and scan http://www.malwarebytes.org/mbam.php

Also i would upload those files to VT for scanning http://www.virustotal.com but posting the full results on here is against TOS. You can say if they are detected though, and PM me the results and/or link.

 

Did run MBAM a couple of times and f-secure online scan + Eset.

MBAM found and finally deleted xxx.xxx uuu.uuu files, and i dont see them replicating again every minute. Hope that helped.

 

Good

Well i as rather hoping it all helped you more than me