Strange files in Windows directory

Discussion in 'malware problems & news' started by Gren, Mar 14, 2010.

Thread Status:
Not open for further replies.
  1. Gren

    Gren Registered Member

    Joined:
    May 31, 2007
    Posts:
    93
    Hoping this is all nothing but some strange files have started appearing in my Windows directory.

    They all come in pairs : a DAT file and an application file - both with the same filename. At least 1 pair of these files appear each day. They all have a 6 to 8 numerical digit file name (e.g. 3422037 or 44715657). All files are small (8k applications and the DAT files simply contain '<<<<') and show no signs of being accessed after creation. All are unhidden and can be deleted normally.

    Looks very dodgy and after one MBAM scan several were picked up as rootkit agents. Many more though were left behind and scans since (with MBAM, SAS and A-Squared) reveal nothing. A HijackThis log revealed nothing.....although I'm not sure what I really should be looking for.

    Lastly OA and A-Squared guard (Mamatu) show no signs of anything untoward happening.

    Any thoughts of what this might be and what can be done if it is a rootkit?
     
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,794
    Location:
    Texas
    You might want to post this at the MBAM forums if you haven't done so.
     
  3. Gren

    Gren Registered Member

    Joined:
    May 31, 2007
    Posts:
    93
    Thanks, have just done so.
     
Loading...
Thread Status:
Not open for further replies.