BleepingComputer.com: What is this? c:\windows\CSC\d6

Hi,

I've been using Combofix for years and have been finding this file pop up a lot lately at different sites, different clients too. One computer had uploaded over 25gig to the internet

Ive found a lot of removal instructions but not any actual info on what it is/does etc. Is this actually a trojan??

c:\windows\CSC\d6

This post has been edited by Orange Blossom: 09 December 2011 - 03:59 PM
Reason for edit: Moved to AV forum. ~ OB

CSC stands for Client Side Caching and is the folder where Windows stores Offline Files (used with shares).

C:\Windows\CSC is not a trojan, this folder is part of the Windows OS.

d6 is one of the files or directories stored as an Offline File. What shares do you use?

oh ok many thanks, thought it was something more sinister.

Regular user shares and some database driven stuff

That folder was targeted by name and sUBs has corrected this in the latest version so it no longer should be detected.