Anime Icon appears in Devices and Printers - Malware? !

[heat84]

When I plug in my flash drive this shows up in Devices and Printers:


When I Google what's written below it, I only get a few Asian pages.
So what is it and which language is that?

Why would Windows 7 use an Asian driver as its default flash drive driver? Also my flash drive is 8GB. I'm guessing drive capacity doesn't matter for the driver and it just happens to say 4GB.

Edit: Well, apparently its Chinese.

 

[rsvr85]

Worryingly, after trying to find a solution for you, i've happened across the same image here;
"C:\Users\USERNAME\AppData\Local\Microsoft\Device Metadata\dmrccache\en-US\d42472c3-a173-455f-8fc5-640e344597b1\DeviceInformation\open.ico"

Anyone know what this is?

 

[heat84]

I created a shortcut the and went into Change Icon and saw that file path.

I also translated a couple of pages that I Googled and not surprisingly it was gibberish since the translation engine Google uses was designed to translate only single words. But they were forum threads made just today.The date on my copies of those file is 2 days ago. I'm trying to remember what I was doing at 1:52 AM.

OPEN???????? 4GB-Windows 7????? - Google Search

I noticed in your picture, the icon file and the 2 other files were created today.

Here's the flash drive I have:http://www.newegg.com/Product/Product.aspx?Item=N82E16820220252
I don't see how that would help though since this is (I believe) a generic flash drive driver.

 

[heat84]

When I check the event log, in the system section there's 3 entries at the time the 3 files were created. The Window Experience service stopping and starting, and The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.

 

[torrentg]

Time for Malwarebytes?

 

[heat84]

Oh, yeah. Good idea. when I first saw that I was thinking malware.

 

[rsvr85]

I've scanned with Malwarebytes & MSE. MSE came up with nothing, but MWB found one entry. I don't think it's relevant though.
View attachment mbam-log-2009-10-25 (12-07-14).txt

 

[rsvr85]

The XML that was created this morning is very weird.

Google translated as;
Model Name - OPEN teenager can not afford to build Flash Disk 4GB-Windows 7 public Commemorative Edition

Device Description1 - OPEN teenager body shape, not afraid of magic designed to cover loss

Device Description2 - Nano anti-fouling Department mile, anti-static, two-tone green silicone can be washed

ModelNumber - Memorial version of Windows 7 launch

Manufacturer - Fruit Shop Creative Co., Ltd.

What the hell is this?


@ heat84 - have you found any enlightening information? What did MWB say about it?

I can find nothing in the event viewer at 10:22 today specifically. And at 10:22 this morning i was viewing a NVIDIA thread here on SF.
So this, whatever it is, has clearly been on my PC longer than a day

 

[heat84]

MWB didn't find anything other than 3 false positives that were there before this started. Including the one that that thread you linked to is about. My PC isn't acting strange so I don't think its malware or a virus. I'll ask about this somewhere else. I know some people there know about Anime. Maybe that will be a clue. Or that could be just some random character.

I just put in a different flash drive and a different driver is loaded and that icon doesn't appear. Its 1Gb and made by Ativa.:huh:

 

[swarfega]

I've scanned with Malwarebytes & MSE. MSE came up with nothing, but MWB found one entry. I don't think it's relevant though.
View attachment 32988

Thats a false positive and you can safely ignore that.

 

[swarfega]

btw my chinese friend says the lettering says something like special or limited edition.

 

[hacku]

Open up your flash drive and make sure you can see hidden files. Do you have a file in there with a .ico extension and a autorun.inf file?

 

[rsvr85]

MWB didn't find anything other than 3 false positives that were there before this started. Including the one that that thread you linked to is about. My PC isn't acting strange so I don't think its malware or a virus. I'll ask about this somewhere else. I know some people there know about Anime. Maybe that will be a clue. Or that could be just some random character.

I just put in a different flash drive and a different driver is loaded and that icon doesn't appear. Its 1Gb and made by Ativa.:huh:

Mine isn't acting up either and i'm pretty sure it's unlikely i'd get infected in the first place.

Let us know what those people say about anime

So, Is this something i can safely ignore or do i need to get my finger out?

Nice avatar btw swarfega

 

[swarfega]

Ive changed my avatar

 

[rsvr85]

It's still the same

 

[heat84]

A couple people at the other forum seem to think it was caused by using a Windows 7 activation crack. I don't believe them.
Here's the thread.

 

[rsvr85]

I haven't used an activation crack on my system so it can't be that (see my sig ). I used an unfamiliar USB drive around a week ago, maybe hacku is on to something with that?????

 

[heat84]

Here's another thread at a Microsoft.com forum.

I used 7loader 1.5 for activation. I don't think that could've caused this though as its been months since I've used it.

 

[rsvr85]

http://social.answers.microsoft.com...e/thread/9325555e-c9fd-415a-b162-0c551b3f4902Here's another thread at a Microsoft.com forum.

That looks a little better, good find Heat84

It just seems to be a metadata hardware ID mixup. When you plug in a device to W7 or Vista, it checks the device info against a database and downloads the appropriate metadata which is supposed to be submitted by the manufacturer. In our flash drive case, Windows thinks our flash drives are something else.

Seems plausible. I went ahead and deleted C:\Users\USERNAME\AppData\Local\Microsoft\Device Metadata\dmrccache\en-US\d42472c3-a173-455f-8fc5-640e344597b1\ anyway and so far i've not had any problems or seen it again. I'll try and get my hands on that USB drive again to see if it is indeed the explanation above.

 

[heat84]

I just re-ran the search I linked too in one of my previous posts and there it was. I think you should leave the icon though. Its better than the boring default OS icons. I haven't tried the fix yet myself.