Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

csb.txt created in local disk C:


  • Please log in to reply
7 replies to this topic

#1 puravida999

puravida999

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 17 May 2015 - 03:13 PM

So today I was browsing in my pc and I found that that in local disk C: there is a text document named : "csb" , when I openned it it says "finish!! " .

 

I scanned my pc and that document but no virus was found, it was created 15 days ago, not sure what it could be, can't find information anywhere. I run windows 8.1, antivirus and ccleaner, everything is updated. My other computer doesnt have this text document.

 

I thank any information.



BC AdBot (Login to Remove)

 


m

#2 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:00 PM

Posted 17 May 2015 - 04:00 PM

If you look at the file Properties, General tab, you see 3 dates: Created, Modified, Accessed. Are the Created and Modified dates the same?

 

And in the Security tab, Advanced button, you can see the owner of the file. Are you the owner?


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#3 puravida999

puravida999
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 17 May 2015 - 05:45 PM

If you look at the file Properties, General tab, you see 3 dates: Created, Modified, Accessed. Are the Created and Modified dates the same?

 

And in the Security tab, Advanced button, you can see the owner of the file. Are you the owner?

I just checked that and it was created, modified and accessed the same day (january 05) not may 01.

 

In january 05 I received my computer and used it for the very first time (brand new pc). The owner says is me (the administrator).

 

But, what is it?



#4 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:00 PM

Posted 18 May 2015 - 01:23 PM

I don't know what it is. I asked these questions because the answer might give us a clue.

 

And here we have a clue: the file has a time stamp that correspond with the first use of your PC, thus it is probably the result of a configuration or installation program.

 

Do you have other files on your machine that start with csb? For example an executable?


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#5 puravida999

puravida999
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 21 May 2015 - 09:23 PM

I don't know what it is. I asked these questions because the answer might give us a clue.

 

And here we have a clue: the file has a time stamp that correspond with the first use of your PC, thus it is probably the result of a configuration or installation program.

 

Do you have other files on your machine that start with csb? For example an executable?

no more files with that name



#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,582 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:00 AM

Posted 21 May 2015 - 09:36 PM

Then as Didier Stevens indicated...it is most likely the result of a configuration or installation program which created the file at that time.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 puravida999

puravida999
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 23 May 2015 - 09:25 PM

Then as Didier Stevens indicated...it is most likely the result of a configuration or installation program which created the file at that time.

can virus or malware modify the date a document is created? to trick me?



#8 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:00 PM

Posted 24 May 2015 - 12:55 PM

Yes. But your file is not malicious, it's just a text file with a word as content.

Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users