unexpected directories created

Posted: 07-10-2008, 04:35 AM
I've been assigned an issue on a customer PC where strange directories
are being created in the user's Documents folder in Vista Home
Premium. The mystery directories are in the form of (a few Chinese
chars)/Microsoft/Office. There are no files, just the top level
directory with the two underneath it. The top directory name has
different Chinese characters in each folder name. Anti-virus doesn't
flag anything. Any ideas? I've never seen anything like this before.

unexpected directories created


Responses to "unexpected directories created"

Daniel Petri
Guest
Posts: n/a
 
Re: unexpected directories created
Posted: 07-10-2008, 08:06 AM
I'd check to see if the customer didn't download and install any software
lately, especially from P2P sources.

--
Sincerely,

Daniel Petri
MVP, Senior IT consultant, trainer
www.petri.co.il

<posted.gigs@gmail.com> wrote in message
news:9970d5f6-e508-4202-8fb1-a7bd108576b4@e53g2000hsa.googlegroups.com...
> I've been assigned an issue on a customer PC where strange directories
> are being created in the user's Documents folder in Vista Home
> Premium. The mystery directories are in the form of (a few Chinese
> chars)/Microsoft/Office. There are no files, just the top level
> directory with the two underneath it. The top directory name has
> different Chinese characters in each folder name. Anti-virus doesn't
> flag anything. Any ideas? I've never seen anything like this before.
GTS
Guest
Posts: n/a
 
Re: unexpected directories created
Posted: 07-10-2008, 03:59 PM
I strongly suspect a root kit infection. I have seen some very similar
items created by root kits. There are probably files and subdirectories
being hidden under those directories. I would thoroughly check that machine
for malware, but it may be very difficult to clean.
--

<posted.gigs@gmail.com> wrote in message
news:9970d5f6-e508-4202-8fb1-a7bd108576b4@e53g2000hsa.googlegroups.com...
> I've been assigned an issue on a customer PC where strange directories
> are being created in the user's Documents folder in Vista Home
> Premium. The mystery directories are in the form of (a few Chinese
> chars)/Microsoft/Office. There are no files, just the top level
> directory with the two underneath it. The top directory name has
> different Chinese characters in each folder name. Anti-virus doesn't
> flag anything. Any ideas? I've never seen anything like this before.

FromTheRafters
Guest
Posts: n/a
 
Re: unexpected directories created
Posted: 07-10-2008, 08:31 PM
Do a backup if the client hasn't already done so. This could be
almost anything - I wouldn't even rule out a failing harddrive.

<posted.gigs@gmail.com> wrote in message
news:9970d5f6-e508-4202-8fb1-a7bd108576b4@e53g2000hsa.googlegroups.com...
> I've been assigned an issue on a customer PC where strange directories
> are being created in the user's Documents folder in Vista Home
> Premium. The mystery directories are in the form of (a few Chinese
> chars)/Microsoft/Office. There are no files, just the top level
> directory with the two underneath it. The top directory name has
> different Chinese characters in each folder name. Anti-virus doesn't
> flag anything. Any ideas? I've never seen anything like this before.
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Directories and files created offline fail to sync David Jones Windows Vista Networking & Sharing 0 12-04-2007 11:20 AM
Two Directories Jack Black Windows XP Video 1 05-18-2005 12:45 AM
slow opening directories w/nested directories Steven Shapiro Windows XP Help & Support 0 11-29-2003 05:19 PM
Directories on C:\ Jan Windows XP Basics 5 10-04-2003 09:56 AM
3 New Directories? Ron Patterson Windows XP Help & Support 2 08-25-2003 11:42 AM