|
Answer» I was doing some general cleanup on my computer and happened to come across some unusual files. I'm HOPING someone here can maybe help me find out what they are and if I should DELETE them. I'm on WinXP, by the way. The files are:
ÝÃÄ›Ò3113›.sys (located in C:\Documents and Settings\All Users\Application Data)
PFP120JCM.{PB PFP120JPR.{PB (both located in C:\Documents and Settings\[my name]\Application Data)
Any help at all would be appreciated. Thanks!I'm having trouble find any actual info on the .{PB files. Most people who have them are infected, but it doesn't mean that they are malicious. Could just a coincidence. All I know is that I don't have any such files. In fact, although I have plenty of folders in Application Data, I don't have any stray files. The first file...well, I can find nothing at all about it.
Unless anyone can give some insight, I would suggest uploading/scanning them (individually) at VirusTotal. Post back with the results.I know of only ONE other instance of that first file coming up and no idea about the other two.
I don't like the look of any.
CBMatt ... I suggest you get the OP to d/l AVG AS, unhide HIDDEN Files & Folders, run a scan in safe mode then post a HJT v1.99 log from normal mode.
OJYou could also make a temporary directory and MOVE, not copy the files there for the time being. If they are needed by any programs you are running the error message will tell you which program uses/needs these files. After a few weeks or so if it is running fine with no hiccups i would say they are safe to delete...The only page I could find about that first file was this: http://forums.spybot.info/showthread.php?t=11301&page=2
Even then, no one who replied to that user seems to have noticed it or thought it unusual. It seems very strange to me though, especially with a filename like that. It was marked as hidden, too--it wasn't until I turned on "show hidden files and folders" that I came across it.DLoad all the updates for your current protection apps and re-boot into safemode and run all your scans just to be safe...Have you tried uploading them to VirusTotal? And go ahead and follow along with the suggestions of oddjob and patio. Download AVG Anti-Spyware and update it to the latest definitions. Reboot in Safe Mode and unhide all of your hidden folders (click here if you don't know how). Then go ahead and run a complete system-wide scan. It's time-consuming, but it's worth the effort.I know that this is a really really old thread;
but since no one actually answered it with any info on the files and I was directed here from a Google search for the files
I thought I would answer, just in case anyone else ever was looking for info on these files as I was in the past 24 hours:
the two files: - PFP120JCM.{PB - PFP120JPR.{PB
Located in - C:\Documents and Settings\User Name\Application Data\
are files wholly related to WordPerfect12 and nothing else*
it's easy to test it:
a> open windows exploder and navigate to the profile that is currently logged on, - ie. Administrator - C:\Documents and Settings\Administrator\Application Data b> delete the two files c> open Word Perfect d> switch back to Windows Exploder e> the two files will be there again with the current date & time
* if the system has never had Word Perfect 12 installed then there may be a problem with the file names being hi-jacked by malware
|