Strange folder on my Computer (Windows)

Discussion in 'Computer Games and General Discussion' started by Flashed, Jun 19, 2017.

  1. Flashed
    OP

    Flashed GBAtemp Regular

    Member
    217
    62
    Feb 3, 2016
    Madrid
    This week I'm formating my PC due to a new PC because I bought a new PC which is coming this week, and I want to carry it to my village. When I was backing up my data. I saw an strange folder on my USRDIR:
    [​IMG]
    And here the content:
    [​IMG]

    What do you think this could be? What type of virus?
     
  2. leon315

    leon315 POWERLIFTER

    Member
    468
    244
    Nov 27, 2013
    Italy
    if u can't access nor alt+canc delete it, it could be a virus
     
  3. Flashed
    OP

    Flashed GBAtemp Regular

    Member
    217
    62
    Feb 3, 2016
    Madrid
    up!
     
  4. duwen

    duwen Old Man Yoshi

    Member
    1,161
    644
    Sep 6, 2013
    Bullet Hell
    pdf's and excel files?
    Have you got any means of opening them sandboxed? They could just be temp or recovered files.
     
    Tomato Hentai and migles like this.
  5. migles

    migles Mei the sexiest bae

    Member
    GBAtemp Patron
    migles is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    6,629
    4,348
    Sep 19, 2013
    Saint Kitts and Nevis
    my dad works for nintendo.
    bumping is not allowed.
    anyway. did you try to open one file? no harm in doing it..

    — Posts automatically merged - Please don't double post! —

    if it's a virus he is already affected, there can't be much more harm now...
     
  6. duwen

    duwen Old Man Yoshi

    Member
    1,161
    644
    Sep 6, 2013
    Bullet Hell
    Yeah... it does kind of look like it's the product of some kind of malware/virus - don't think I've ever come across a valid pdf that's as small as 3Kb.
     
  7. migles

    migles Mei the sexiest bae

    Member
    GBAtemp Patron
    migles is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    6,629
    4,348
    Sep 19, 2013
    Saint Kitts and Nevis
    my dad works for nintendo.
    nah, i believe these are either temp files or recovered files.. or trash from some software...
    actually really seems like recovered files from using recuva or other recovery software

    if it was a virus it would have screenshots or pictures of the camera or executables... not xlsx and pdf files
     
  8. Flashed
    OP

    Flashed GBAtemp Regular

    Member
    217
    62
    Feb 3, 2016
    Madrid
    All of them are excel or pdf files. Inside them I can see some random numbers/leters. That's all. Now I have deleted it with any issue, but i wanted to know what was that
     
  9. migles

    migles Mei the sexiest bae

    Member
    GBAtemp Patron
    migles is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    6,629
    4,348
    Sep 19, 2013
    Saint Kitts and Nevis
    my dad works for nintendo.
    had you used recuva? or some software to recover deleted files?
     
  10. Flashed
    OP

    Flashed GBAtemp Regular

    Member
    217
    62
    Feb 3, 2016
    Madrid
    I don't remember well, but if I used Recuva on this PC it was a long time ago
     
  11. duwen

    duwen Old Man Yoshi

    Member
    1,161
    644
    Sep 6, 2013
    Bullet Hell
    Do you remember what you were doing on your computer around the time those files were modified (14/05/2017 20:3X)?
     
  12. Flashed
    OP

    Flashed GBAtemp Regular

    Member
    217
    62
    Feb 3, 2016
    Madrid
    I don't remember well, but I'm almost sure I was on hard week of exams, so nothing more than read the newspaper

    — Posts automatically merged - Please don't double post! —

    Can this be related with anti-ransomware I installed?
     
  13. duwen

    duwen Old Man Yoshi

    Member
    1,161
    644
    Sep 6, 2013
    Bullet Hell
    Could be. I don't know how anti-ransomware might work, but it's possible that it may clone certain system files and mask them as 'harmless' pdf and excel files.
     
  14. tech3475

    tech3475 GBAtemp Advanced Fan

    Member
    550
    240
    Jun 12, 2009
    Run something like malwarebytes and see what it picks up and chkdsk.

    Last time I encountered anything like this it was due to either file recovery gone wrong or corruption.
     
  15. Flashed
    OP

    Flashed GBAtemp Regular

    Member
    217
    62
    Feb 3, 2016
    Madrid
    Solved. It was related with an anti-ransomware software. Same dates
    Thanks all!
     
  16. Sathya

    Sathya never thinking to be smart!

    Member
    223
    38
    Nov 9, 2016
    Indonesia
    NURANI'S HOME
    same like me every 1 week i must clean my program files folder on data c. deleted again again and again. very alot of junk files. i think your problem same like me:glare:
     
    Last edited by Sathya, Jun 21, 2017