Posted 09 April 2007 - 11:29 AM
I was redirected here from the HiJackThis forum where I was getting help cleaning up an infection.
The infection is now clean, but I've found that a new file has appeared in my C:\documents and settings folder...
Up until a few days before my infection I used to find an "NTUSER.DAT" file and a "ntuser.LOG" file in my \docs and settings folders. Since this infection began, the "ntuser.LOG" file has disappeared and "ntuser.dat.LOG" has shown up in its place.
Does anyone here know what this is? Or have any thoughts on it? Apparently it's appearance doesn't have anything to do with the infection I just recovered from.
One other thing: whereas the old "ntuser.log" could be deleted, and disappeared after reboot, the new "ntuser.dat.LOG" file cannot be deleted (I know that you can never delete the "NTUSER.DAT" file). Moreover, the file size on this ".dat.LOG" file fluctuates (grows) as long as the machine is running... "ntuser.LOG" has disappeared entirely.
I'm confused, and would appreciate any insight anyone here has.
Thanks a million.