+ Post New Thread
Results 1 to 15 of 15
Windows 7 Thread, Odd symbols for folder names in Technical; Hello, I have a user (win7) that keeps getting new folders created with odd symbols as the folder name. At ...
  1. #1

    Join Date
    Apr 2010
    Posts
    1,832
    Thank Post
    62
    Thanked 161 Times in 133 Posts
    Rep Power
    64

    Odd symbols for folder names

    Hello,

    I have a user (win7) that keeps getting new folders created with odd symbols as the folder name. At first I thought it was corrupted existing folders but the folders are new and empty and only appear in folders that contain excel documents.

    I have run ever virus / spyware scan I can find and found nothing.

    Any ideas?

  2. #2
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    862
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    35
    Have you tried removing the desktop.ini from the folder?

  3. #3

    Join Date
    Apr 2010
    Posts
    1,832
    Thank Post
    62
    Thanked 161 Times in 133 Posts
    Rep Power
    64
    Its more than one folder it seems to all the folders that have excel docs that this user has on the server. I will delete desktop.ini from these and see if they return.

    Currently I am just getting the user to delete these folders but they slowly return.

  4. #4

    Join Date
    Sep 2007
    Posts
    90
    Thank Post
    7
    Thanked 32 Times in 17 Posts
    Rep Power
    19
    Do his excel files contain macro's?

  5. #5

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,095
    Thank Post
    511
    Thanked 2,308 Times in 1,784 Posts
    Blog Entries
    24
    Rep Power
    803
    Quote Originally Posted by edutech4schools View Post
    Hello,

    I have a user (win7) that keeps getting new folders created with odd symbols as the folder name. At first I thought it was corrupted existing folders but the folders are new and empty and only appear in folders that contain excel documents.

    I have run ever virus / spyware scan I can find and found nothing.

    Any ideas?
    Can you elaborate on what you mean by 'odd symbols'?

  6. #6

    Join Date
    Apr 2010
    Posts
    1,832
    Thank Post
    62
    Thanked 161 Times in 133 Posts
    Rep Power
    64
    Sorry for the delay but only at school once or twice a week.

    a. Some contain macros some don't
    b. symbols can be ᴥ●■‼ or simply letters like ndy

  7. #7
    oxide54's Avatar
    Join Date
    Mar 2009
    Posts
    798
    Thank Post
    51
    Thanked 55 Times in 54 Posts
    Rep Power
    22
    corrupted NTFS???

    disk failure??

    have you run chkdsk?

  8. #8


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,113
    Thank Post
    203
    Thanked 2,385 Times in 1,765 Posts
    Rep Power
    703
    I've seen rootkit's which create files and folders with symbols in their names. It might explain why your anti-virus didn't detect anything.

  9. #9
    oxide54's Avatar
    Join Date
    Mar 2009
    Posts
    798
    Thank Post
    51
    Thanked 55 Times in 54 Posts
    Rep Power
    22
    Quote Originally Posted by Arthur View Post
    I've seen rootkit's which create files and folders with symbols in their names. It might explain why your anti-virus didn't detect anything.
    yes that sounds very likely.

    RootkitRevealer

  10. #10

    Join Date
    Mar 2008
    Location
    Bristol
    Posts
    49
    Thank Post
    0
    Thanked 8 Times in 8 Posts
    Rep Power
    14
    I've also seen it where a dodgy piece of memory can cause something similar.!

  11. #11
    oxide54's Avatar
    Join Date
    Mar 2009
    Posts
    798
    Thank Post
    51
    Thanked 55 Times in 54 Posts
    Rep Power
    22
    are the files folders local? or on a server?

  12. #12

    Join Date
    Apr 2010
    Posts
    1,832
    Thank Post
    62
    Thanked 161 Times in 133 Posts
    Rep Power
    64
    Files are on a server but sync to laptop. I am at the school on Wednesday and will check the rootkit software + chkdsk.

  13. #13

    Join Date
    Apr 2010
    Posts
    1,832
    Thank Post
    62
    Thanked 161 Times in 133 Posts
    Rep Power
    64
    Chkdsk = passed
    Memtest = passed

    rootkit from above thread = 50000+ potential rooted files. I tried to save the list but it crashed.

    How many false positives should something like this come back with?

    If I re-install OS any advice to stop this same rootkit finding its way back onto the laptop. Could it have come from an excel doc?

  14. #14


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,113
    Thank Post
    203
    Thanked 2,385 Times in 1,765 Posts
    Rep Power
    703
    Wow! That's a lot. It might be worth doing a scan using GMER and/or RootRepeal to see if they say the same?

  15. #15
    oxide54's Avatar
    Join Date
    Mar 2009
    Posts
    798
    Thank Post
    51
    Thanked 55 Times in 54 Posts
    Rep Power
    22
    try booting from a windows PE cd and run a virus/ malware checker from that

SHARE:
+ Post New Thread

Similar Threads

  1. Communicate in print symbols.
    By bladedanny in forum General Chat
    Replies: 0
    Last Post: 17th September 2010, 09:12 AM
  2. [MS Office - 2008 (Mac)] word showing the paragraph symbols etc
    By RabbieBurns in forum Office Software
    Replies: 2
    Last Post: 25th January 2010, 03:00 AM
  3. Makaton Signs and Symbols
    By danielson81 in forum Educational Software
    Replies: 3
    Last Post: 25th October 2009, 01:26 AM
  4. Home Folders, Offline Files and Folder Names
    By Nick_Parker in forum Windows
    Replies: 22
    Last Post: 1st October 2009, 11:42 AM
  5. Long File and Folder Names
    By karldenton in forum Windows
    Replies: 16
    Last Post: 22nd July 2009, 12:47 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •