Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

weird symbol named files on my C: drive


  • Please log in to reply
5 replies to this topic

#1 Arcane_Savage

Arcane_Savage

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:06 AM

Posted 11 May 2016 - 04:26 AM

can anyone help me identify what this is on my C: drive at the end of all my files not in a folder just floating there suddenly sometime last week, none of my scans on them find anything
  http://img.prntscr.com/img?url=http://i.imgur.com/Re0TkNr.png  

 

or http://prnt.sc/b2p7bx


Edited by hamluis, 11 May 2016 - 01:14 PM.
Moved from Win 7 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 Havachat

Havachat

  • Members
  • 1,050 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Sleepy Hollow - Geelong - Go Cats.
  • Local time:07:06 PM

Posted 11 May 2016 - 04:49 AM

Not something i have seen before , possibly Malware or some corruption.

 

Can you Delete the one that show 0 for file size..... eg "G4?10?"

 

Apart from that  you may need to have some scans done by one of the experts within BC , im not allowed to do that.

 

You could try Malwarebytes in the interim.



#3 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,472 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:06 AM

Posted 11 May 2016 - 11:43 AM

Not something i have seen before , possibly Malware or some corruption.

 

Can you Delete the one that show 0 for file size..... eg "G4?10?"

 

Apart from that  you may need to have some scans done by one of the experts within BC , im not allowed to do that.

 

You could try Malwarebytes in the interim.

Malwarebytes cannot be run in the Windows forums.  This topic would need to be moved to the Am I Infected forum to run this scan and post the log.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#4 Arcane_Savage

Arcane_Savage
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:06 AM

Posted 11 May 2016 - 03:05 PM

ive ran that and it showed nothing infected



#5 Fascist Nation

Fascist Nation

  • Members
  • 110 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Phoenix, AZ
  • Local time:02:06 AM

Posted 12 May 2016 - 05:56 PM

Those are all zero files.  Did you install anything (especially a driver) 5/6 at around 4:11AM?  You sure?

dmdlgs.dll Disk Management Snap-in Dialogs



#6 Arcane_Savage

Arcane_Savage
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:06 AM

Posted 13 May 2016 - 02:10 PM

i didnt notice them until after i had installed a windows stand alone installer for a windows update readiness tool package, i think one of the .cab files it installed wasnt for windows 7 so it dont know how to read it?  idk but here is some of them in the winRAR viewer

 

WirelessDiagLog.csv

#Event,Source,Time,Error Severity,Domain,User,Description
1,Manual Diagnostic,04/12/2016 20:57:06,Warning,Unknown,Ryan,Hardware Test - Result : Failed, Summary : Wireless Hardware is not bound to transport driver
 
x86_wpf-reachframework_31bf3856ad364e35_6.1.7601.23392_none_02627eb0a05c21e0.manifest
<?xml version="1.0" encoding="UTF-8"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" description="Windows Presentation Foundation component" displayName="Windows Presentation Foundation WPF-ReachFramework" copyright="Copyright © Microsoft Corporation. All Rights Reserved." isolated="false">
  <assemblyIdentity name="WPF-ReachFramework" version="6.1.7601.23392" processorArchitecture="x86" language="neutral" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <file name="ReachFramework.dll" destinationPath="$(runtime.programFiles)\Reference Assemblies\Microsoft\Framework\v3.0\" sourceName="ReachFramework.dll" sourcePath="Program_Files\Reference_Assemblies\Microsoft\Framework\v3.0\" importPath="$(build.nttree)\wpf\Program_Files\Reference_Assemblies\Microsoft\Framework\v3.0\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
    </asmv2:hash>
  </file>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <runtime xmlns="urn:schemas-microsoft-com:asm.v2" imageVersion="v2.0.50727" />
</assembly>

 

and the rest of them that let me view them just look like this crap

PA30Þ?nxw?Ñø m??B Þ?v\??v+?|ò"lèL ÀwÃ??Ñ?p\`WÁeD?5èj?Õ??:Põ= ÓAàÍ
än (O? ?^!BÈ?Ø7D8
Hí0?1?0Z@???i??â%p?)ðwø?Ó?p ^Þ?!âºÿ ?|JØc1Øa?Ääd?ÇR
???0A?x?gUUe?5TTf??Sf??H?À?aÁ?0
KÄP???P
3HÒD5?â0Ê(Æ(Âh??É???ãÌPf?aÔ0Ca,aIf8?IFYrÃ8ã,)KngÉg?qfxRf8ãx?3Îg?ÆS0ÃYòd?Æ)g?q?<YRNgcÉñXòd?%74Á??  ??eÔÀ(?%O
v???È?dL?Òd( M?â(G?2?qF
??Q$?aII?,)?1?$E(31,iÂ??C?&3?H2Cj??0$)B
B
3ô???ç?a?ñ#Ô0*N
K.N?83Ü?sf?Ì&N?%?èYr!98d@À??@A?A?H2$aeØ??GÎÎÎH(AÁ??
ôÌPA???ínF^?Å{KÖ??µ-YkMq^Óó??[AUÒÚfä???ÓïÅé>ÛÛ?fÆö?%ÛgJà?#->Ñ???%éGlf??ü???h_?:?à?Â<?D_???Á?$m?}É>bm?a5/ÖÙ???lí(^?G`Á?Õ??í
??X?v{??-%?_Ì<>l??04Âbqú=?}?<b(?y?????Pà OÆ?YÎ?3?P&*çPÔ<köÖ>VVÊx????rË?p#Òò?Ès2q~qá?U <è*éÌqnö?l?ïk
pL%Å???º%)ÑÚîmqú?/QCÖá??8g?èk?K2RSP?7ã?õ#Ý??]ûÞP+9ãì
À|Ø??à?@7èÛ?M?{?ß???Ä?~Ñ??íìÈÖ?Ø??ýú?ã-ÉDÉ??Ø'Ú??íg?ë|m; KRÛ~%?õ{m
?ñî%JÔÔØÚËJZ?]ý???8<b[Îh2ÊÉ?$Å?ÛÂ???S??8eå,1??????äÂ(?æ??ç?Â





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users