I have a very strange looking folder under my C:\WINDOWS folder, which if it
is not a trojan then it must be some kind of device driver install that went
very bad. I would like help identifying what it might be.
The folder is named:
C:\WINDOWS\EFUZEJYDIXC1AZ4D
and it contains copies of many Windows system files. The contents of this
folder are posted here:
http://pages.uschw.com/usenet/EFUZEJ-folder/folder-contents.txt
Of special note is a logfile in that folder whose name and contents are
linked here:
http://pages.uschw.com/usenet/EFUZEJ-folder/sthdae.log
You may want to open that logfile in an editor other than NOTEPAD that can
hand LF only at the end of each line. Word 2003 opened it fine here.
In that logfile I see attempts to add device drivers, that are failing with
various messages about an invalid pin. That almost looks like Bluetooth?
What I find most suspicious about this folder is that it copies over so many
critical Windows system files. Why would any device installation need its
own private copies of those files?

Signature
Will
Malke - 30 Jun 2008 12:30 GMT
> I have a very strange looking folder under my C:\WINDOWS folder, which if
> it is not a trojan then it must be some kind of device driver install that
[quoted text clipped - 26 lines]
> critical Windows system files. Why would any device installation need
> its own private copies of those files?
And what results do you get when you do virus/malware removal scanning?
http://www.elephantboycomputers.com/page2.html#Removing_Malware
Malke

Signature
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ
MARK TURNER - 02 Jul 2008 05:08 GMT
i have vista ultimate 64 bit and have trouble with CA INTERNET SECURITY
SUITE,it is a virus and spyware program from road runner you get free.it is
32 bit and i cannot get the virus protector to work right.i chatted online
with a ca helper and he said i have to upgrade to vista 32 bit.is there
another way to get it to work without upgrading?
mark0325
>I have a very strange looking folder under my C:\WINDOWS folder, which if
>it
[quoted text clipped - 29 lines]
> its
> own private copies of those files?
David H. Lipman - 02 Jul 2008 11:33 GMT
From: "MARK TURNER" <rturner011@woh.rr.com>
| i have vista ultimate 64 bit and have trouble with CA INTERNET SECURITY
| SUITE,it is a virus and spyware program from road runner you get free.it is
| 32 bit and i cannot get the virus protector to work right.i chatted online
| with a ca helper and he said i have to upgrade to vista 32 bit.is there
| another way to get it to work without upgrading?
| mark0325
Remove it and replace it with a Win64 compliant AV solution.

Signature
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp