Twice now I have had a program attempt to connect to the internet C:\users\[name]\appdata\local\temp\rarsfx0\installer.exe. I have opened the file location but as soon as I've blocked it via the firewall the temp folders files change. Unfortunately I hadn't thought to get a screenshot before these changes and that file disappears. No new software added and I don't have WinRar.
Unrelated to the above program...When doing a file cleanup with Bitdefender I found two curious files that were deleted from the recycle bin (recycle bin was empty prior to cleanup and I have hidden files showing) c:\$recycle.bin\s-1-5-21[more numbers]\$rsnopy8.lnk.
I have searched online and can't find any answers for the $rsnopy8.lnk and have found very little on rarsfx0\installer.exe. I'm running Malwarebytes Pro and Bitdefender can anyone help explain what either of these might be? Thanks
Edited by hamluis, 12 November 2017 - 07:07 PM.
Moved from Win 7 to Am I Infected - Hamluis.