Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: My c:\windows folder has a couple of strange files: "D" and "@#"

28 Aug 2012   #1
terminal157

Windows 7 Home Premium x64
 
 
My c:\windows folder has a couple of strange files: "D" and "@#"

Without quotes, no extension. Anyone know what they are and if they're legit?

Thanks.


My System SpecsSystem Spec
.
29 Aug 2012   #2
willworrior

 
 

They dont see legit to me. Try to do a virus search. Otherwise i recommend factory reset
My System SpecsSystem Spec
29 Aug 2012   #3
Bumpkin

Windows 7 Home Premium 64bit
 
 

Windows install and updates sometimes leaves strange files behind.

If you are not having any problems, don't worry about them.
My System SpecsSystem Spec
.

29 Aug 2012   #4
tom982

Microsoft Community Contributor Award Recipient

Windows 8.1 Pro x64
 
 

Quote   Quote: Originally Posted by Bumpkin View Post
If you are not having any problems, don't worry about them.
That's exactly what malware writers want you to think. You can never be too careful when you're potentially dealing with malware.

Upload the files to VirusTotal and Mediafire:

http://www.virustotal.com

Free Cloud Storage - MediaFire

Post both links here please. Then hopefully an expert will be able to assist you Results dependent.

Tom
My System SpecsSystem Spec
29 Aug 2012   #5
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

Well if in question of those things run a complete updated scan with your anti virus.
My computers don't have such things.
My System SpecsSystem Spec
29 Aug 2012   #6
Bumpkin

Windows 7 Home Premium 64bit
 
 

I just assumed anyone with enough smarts to post on this forum would have already run several anti virus and malware scans!

I suppose it's better not to assume anything!
My System SpecsSystem Spec
29 Aug 2012   #7
karlsnooks

MS Windows 7 Ultimate SP1 64-bit
 
 

Quote   Quote: Originally Posted by terminal157 View Post
Without quotes, no extension. Anyone know what they are and if they're legit?

Thanks.
Welcome to SevenForums.

Follow this procedure to truly cleanse your computer:

HOW TO USE MICROSOFT'S OFFLINE MALWARE REMOVER
Windows Defender Offline
performs an offline scan of an infected PC to remove viruses, rootkits and other advanced malware.
is a free standalone, bootable malware and virus remover from Microsoft.

Download Windows Defender Offline (about 785 kB)
You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows

NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.

You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.

The 32 bit download file name is: mssstool32.exe
The 64 bit download file name is: mssstool64.exe

For the curious, this program was originally name Microsoft Standalone System Sweeper.


INSTALLATION:
Requires an Internet Connection.
Insert 512 mB or larger USB stick into a usb port.
Run the downloaded program--mssstool64.exe or mssstool32.exe
NEXT button
Choose the option On a USB flash drive that is not password protected
NEXT button
NEXT button
.
The install program will:
format the usb stick using the NTFS format.
download less than 230 mB.
name the USB stick WDO_Media32 or WDO_Media64
use less than 300 mB.

How to UPDATE the Windows Defender Offline USB stick:
reinsert the usb stick
run the installation program, mssstool64.exe or mssstool32.exe, again.
the update will download less than 65 mB.

Since the malware database is sometimes updated several times in a day, always update before running.

PERFORM AN OFFLINE SCAN
Bootup your computer from the USB stick
Windows Defender Offline will automatically perform a quick scan.
After the quick scan finishes, Choose Full Scan
Select all of your drives

The initial, full scan can easily take several hours, but
Remember, your computer is being very thoroughly checked for all types of malware.
My System SpecsSystem Spec
30 Aug 2012   #8
gladson1976

Windows 7 Ultimate x64 (XP, 98SE, 95, 3.11, DOS 7.10 on VM) + Ubuntu 10.04 LTS Lucid Lynx
 
 

It could also be a corrupted entry in the MFT (Master File Table)

Try running this in an elevated command prompt
Code:
chkdsk c: /f /v
(You may have to restart the system for the disk check to start)
My System SpecsSystem Spec
30 Aug 2012   #9
karlsnooks

MS Windows 7 Ultimate SP1 64-bit
 
 

gladson,
since to good ol' dos days, chkdsk has evolved:
CHKDSK [volume[[path]filename]]] [/F] [/V] [/R] [/X] [/I] [/C] [/L[:size]] [/B]


volume Specifies the drive letter (followed by a colon),
mount point, or volume name.
filename FAT/FAT32 only: Specifies the files to check for fragmentation.
/F Fixes errors on the disk.
/V On FAT/FAT32: Displays the full path and name of every file
on the disk.
On NTFS: Displays cleanup messages if any.
/R Locates bad sectors and recovers readable information
(implies /F).
/L:size NTFS only: Changes the log file size to the specified number
of kilobytes. If size is not specified, displays current
size.
/X Forces the volume to dismount first if necessary.
All opened handles to the volume would then be invalid
(implies /F).
/I NTFS only: Performs a less vigorous check of index entries.
/C NTFS only: Skips checking of cycles within the folder
structure.
/B NTFS only: Re-evaluates bad clusters on the volume
(implies /R)

The /I or /C switch reduces the amount of time required to run Chkdsk by
skipping certain checks of the volume.

==================================
His disk will be NTFS formatted and not FAT fomatted.

The /R includes /F. End result: CHKDSK C: /R to check the C: drive.
============================================

Let's await the results of the offline malware scan.

Then running chkdsk never hurts anything.

karl
My System SpecsSystem Spec
30 Aug 2012   #10
terminal157

Windows 7 Home Premium x64
 
 

Hey, thanks for the replies folks. I have run scans with no hits. I tried opening the files in notepad (should've tried this before posting, sorry) and to my surprise they both seem to be text files with only this inside:

Code:
[KeyList]
Count=0
Which gave me something to google, and it turns out I'm not alone. It's been posted about in this very forum. The file names are always different and no one seems to know where they come from. The files themselves appear harmless and I see no other signs of a compromised system, so I'm not sure what to think.
My System SpecsSystem Spec
Reply

 My c:\windows folder has a couple of strange files: "D" and "@#"




Thread Tools




Similar help and support threads
Thread Forum
Accidentally "Take Ownership" of the whole "Windows" folder.
I was trying to patch and install non legit Windows 7 themes and long story short, I have installed Take Ownership and had accidentally click "Take Ownership" of the C:/Windows folder and it took ownership or alot of files... So question is, would it affect anything? Good or bad? So far nothing...
General Discussion
File and Folder - Add "Hide" and "Unhide" to Context Menu
How to Add "Hide" and "Unhide" to File and Folder Context Menu in Vista, Windows 7, and Windows 8 This will add Hidden File Attributes and Hidden Folder Attributes to the context menu of files and folders for all users to be able to hide or unhide one or more selected file(s), folder(s), and/or...
Tutorials
Changing the "minimize" "maximize" and "close" buttons of a theme
Ok so I'm using a custom visual style made by another user however I don't really like the buttons used that I mentioned above. The creator states it is acceptable to change the theme to however you like as long as you don't redistribute it anywhere. Ok so I opened up the .msstyles file (using...
Customization
Folder for "Videos" library won't work on same drive as "Recorded TV"
Interesting discovery. W7 Pro x64. I was copying content from my desktop PC to my laptop in anticipation of an upcoming weekend trip. The content consists of both (a) entire recent copy-freely WTV recordings, and (b) MPEG videos (actually previously edited from copy-freely WTV recordings using...
Media Center
Need to add "TASKBARS" (MSese for "Launchpads", "Docks" NOT "Toolbars"
My office just upgraded, and I can no longer use Windows XP. On this system, I was able to add a separate taskbar to facilitate quick access to commonly-browsed folder locations on our vast network, and another one expedited the launching of useful programs and lists. Each task on each taskbar...
General Discussion
Hiding unused "removable storage" devices from "Computer" folder
Not a major issue, of course, purely cosmetic, but still a minor annoyance none-the-less: I have a number of card reader drives that I never use (haven't even removed that plastic cover tape from them to help keep the dust out) that show when viewing the "Computer" window that displays drives. ...
Customization


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:30.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App