Bizarre - What is this???

Situation: XP sp3 running NOD32 v4, latest updates. Also using Online Armor 5.

In a folder within My Documents I noticed a .exe file that shouldn't be there. Tried to delete it, but got an "Error Deleting Folder or File" message: Access Denied. Make sure disk is not full...etc."

So I used "Erase", and it was gone but replaced by another .exe. This time it was the calc.exe file. Erased again. (Checked my calculator, worked fine.)

Now it is ping.exe. A new one just keeps showing up. Sometimes, they're .dll files. Now it's dmcompos.dll.

Erased the folder, but the folder remains with a new file in it.

Scanned with NOD32. Clean. Malwarebytes: clean.

Any ideas?

 

submit to eset
http://kb.eset.com/esetkb/index?page=content&id=SOLN141

and or create a sysinspector log
http://kb.eset.com/esetkb/index?page=content&id=SOLN2219

use more tools
https://www.wilderssecurity.com/showpost.php?p=1533481&postcount=3

 

Thanks, Cudni.

• Submitted to Eset.
• Did the Sysinspector and submitted to Customer Care.
• Ran an online BitDefender quickscan, clean.

I got to thinking (always trouble, yes?). Try rebooting and see what happens. So I rebooted and when I went to delete the rotating file, it deleted.

I'd like to think that is good news, but I'm concerned that maybe rebooting allowed whatever that was to dig in deeper. Your thoughts?

So...Advanced Cleaning or celebrate?