Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Strange Folder Appears Bringing Trouble


  • Please log in to reply
3 replies to this topic

#1 faroula

faroula

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:21 PM

Posted 12 May 2011 - 08:54 PM

Dell Vostro 1500 Laptop
Windows Vista
Seagate FreeAgent Go External 700 GB Hard Drive

Everything was running smoothly, until two day ago. I attached my external hard drive to my laptop's USB port to show someone some pictures. I noticed it was really slow, the photos took forever to load. I thought, "That's weird. I hope it is better tomorrow." I also tried to open a saved Word document with Open Office that also opened very slowly. The following day I tried to copy a file from my laptop to the external hard drive.
I got this error: error 0x8007045D disk I/O error
Then I remembered that I had noticed a strange folder appearing about a week ago on the drive.
This file is named: 0cd17547672ca2498fd1c8c35f It is marked read only, 0 bytes, I cannot open it or delete it.
Since it is my mother's drive, I thought that maybe it was something of hers or that I just hadn't noticed it before and made a mental note to ask her about it.
I ran:
Seagate Seatools for Windows Long Generic Test--FAIL
Chkdsk--gets stuck when the green bar is 1/5 of the way through (at the most) and says 14548 index entries processed
AVG (a few times)--always comes back clean
Malware Bytes AntiMalware--twice got stuck, once on the weird file, on the third try it came back clean
Ran Hijack This and Combo Fix--then all of a sudden I could see inside the weird file and it contains this: SP2GDR file, SP2QFE file, update file, spmsg.dll, spuninst
I could also save a random file to the external disk but not open it from the external drive
No problems to report with the laptop itself
Using the external disk with other computers also leads to various complications--files not loading, processes getting stuck, not being able to save, etc.

Any thoughts would be appreciated. Thank you.

Edited by faroula, 12 May 2011 - 08:58 PM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,726 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:21 PM

Posted 13 May 2011 - 07:14 AM

Randomly named alpha/numeric folders are commonly created and used temporarily when updating Windows components. They are also used by some software programs (i.e. Microsoft Office, Microsoft Visual Studio, etc) during update or installation to hold setup files (.inf, .cat, .gpd, .ppd and .dlls) and other information. These files and folders are usually automatically removed as part of the update process. However, its not uncommon for them not to be cleaned up and left behind after the update has been applied. When that occurs they usually can be manually deleted at any time.

For example, when you run the MS Malicious Software Removal Tool (MSRT), a temporary folder with random alpha/numeric characters (i.e. C\79f142e5e9e574d23954) will be created on your C:\ drive that contains mrt.exe, mrtstub.exe and a file named $shtdwn$.req. Since external drives can be a hiding place for malicious files, MSRT will scan them too and you may find a left over folder in that location. Most of the time after performing a scan and you click finish or cancel, the folder will automatically be removed right away or after the next restart of the computer. If not, the folder and its contents can be manually deleted without an adverse effect on the computer.

Installation of service packs, security updates from Microsoft for MSMXL packages and hotfixes also create temporary randomly alpha/numeric named folders. Sometimes these folders create sub-folders as described here or contain sub-folders like amd64 and i386. The creation date should match the installation date of the updates or show in the ReportingEvents.log located in the C:\Windows\SoftwareDistribution folder. spmsg.dll is a Microsoft Service Pack file commonly found in randomly named alpha/numeric folders as shown here. SP1QFE, SP2QFE, SP3QFE and SP2GDR are also Service Pack files from Microsoft which you may encounter.

Again, finding these leftover temporary files are not uncommon after applying an update. Please see Windows Updates Leftover Files and Folders for more examples of such files.

Other legitimate programs can also create randomly named folders in various areas of your hard drive. In many cases if you delete these folders, the program will recreate them after rebooting the computer.

[i]-- Note: In some cases, you may receive an "Access Denied" message when attempting to delete such file(s)/folder(s) so you may need to delete them in safe mode.

Edited by quietman7, 13 May 2011 - 07:16 AM.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 faroula

faroula
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:21 PM

Posted 14 May 2011 - 05:28 AM

Yes, the drive is probably physically failing. I think I really wanted a virus to be hidden in that folder so the fix would be easier. The drive is getting worse and worse. Luckily, I've gotten the data off of it, now figuring out warranties and returns!!??

Thank you for your time and advice.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,726 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:21 PM

Posted 14 May 2011 - 06:25 AM

You're welcome.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users