+ Post New Thread
Results 1 to 15 of 15
Windows 7 Thread, Odd symbols for folder names in Technical; Hello, I have a user (win7) that keeps getting new folders created with odd symbols as the folder name. At ...
  1. #1

    Join Date
    Apr 2010
    Posts
    2,038
    Thank Post
    83
    Thanked 187 Times in 154 Posts
    Rep Power
    83

    Odd symbols for folder names

    Hello,

    I have a user (win7) that keeps getting new folders created with odd symbols as the folder name. At first I thought it was corrupted existing folders but the folders are new and empty and only appear in folders that contain excel documents.

    I have run ever virus / spyware scan I can find and found nothing.

    Any ideas?

  2. #2
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    877
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    36
    Have you tried removing the desktop.ini from the folder?

  3. #3

    Join Date
    Apr 2010
    Posts
    2,038
    Thank Post
    83
    Thanked 187 Times in 154 Posts
    Rep Power
    83
    Its more than one folder it seems to all the folders that have excel docs that this user has on the server. I will delete desktop.ini from these and see if they return.

    Currently I am just getting the user to delete these folders but they slowly return.

  4. #4

    Join Date
    Sep 2007
    Posts
    90
    Thank Post
    7
    Thanked 32 Times in 17 Posts
    Rep Power
    20
    Do his excel files contain macro's?

  5. #5

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,694
    Thank Post
    516
    Thanked 2,455 Times in 1,899 Posts
    Blog Entries
    24
    Rep Power
    833
    Quote Originally Posted by edutech4schools View Post
    Hello,

    I have a user (win7) that keeps getting new folders created with odd symbols as the folder name. At first I thought it was corrupted existing folders but the folders are new and empty and only appear in folders that contain excel documents.

    I have run ever virus / spyware scan I can find and found nothing.

    Any ideas?
    Can you elaborate on what you mean by 'odd symbols'?

  6. #6

    Join Date
    Apr 2010
    Posts
    2,038
    Thank Post
    83
    Thanked 187 Times in 154 Posts
    Rep Power
    83
    Sorry for the delay but only at school once or twice a week.

    a. Some contain macros some don't
    b. symbols can be ᴥ●■‼ or simply letters like ndy

  7. #7
    oxide54's Avatar
    Join Date
    Mar 2009
    Posts
    798
    Thank Post
    51
    Thanked 55 Times in 54 Posts
    Rep Power
    23
    corrupted NTFS???

    disk failure??

    have you run chkdsk?

  8. #8


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    8,919
    Thank Post
    226
    Thanked 2,676 Times in 1,973 Posts
    Rep Power
    787
    I've seen rootkit's which create files and folders with symbols in their names. It might explain why your anti-virus didn't detect anything.

  9. #9
    oxide54's Avatar
    Join Date
    Mar 2009
    Posts
    798
    Thank Post
    51
    Thanked 55 Times in 54 Posts
    Rep Power
    23
    Quote Originally Posted by Arthur View Post
    I've seen rootkit's which create files and folders with symbols in their names. It might explain why your anti-virus didn't detect anything.
    yes that sounds very likely.

    RootkitRevealer

  10. #10

    Join Date
    Mar 2008
    Location
    Bristol
    Posts
    55
    Thank Post
    0
    Thanked 8 Times in 8 Posts
    Rep Power
    15
    I've also seen it where a dodgy piece of memory can cause something similar.!

  11. #11
    oxide54's Avatar
    Join Date
    Mar 2009
    Posts
    798
    Thank Post
    51
    Thanked 55 Times in 54 Posts
    Rep Power
    23
    are the files folders local? or on a server?

  12. #12

    Join Date
    Apr 2010
    Posts
    2,038
    Thank Post
    83
    Thanked 187 Times in 154 Posts
    Rep Power
    83
    Files are on a server but sync to laptop. I am at the school on Wednesday and will check the rootkit software + chkdsk.

  13. #13

    Join Date
    Apr 2010
    Posts
    2,038
    Thank Post
    83
    Thanked 187 Times in 154 Posts
    Rep Power
    83
    Chkdsk = passed
    Memtest = passed

    rootkit from above thread = 50000+ potential rooted files. I tried to save the list but it crashed.

    How many false positives should something like this come back with?

    If I re-install OS any advice to stop this same rootkit finding its way back onto the laptop. Could it have come from an excel doc?

  14. #14


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    8,919
    Thank Post
    226
    Thanked 2,676 Times in 1,973 Posts
    Rep Power
    787
    Wow! That's a lot. It might be worth doing a scan using GMER and/or RootRepeal to see if they say the same?

  15. #15
    oxide54's Avatar
    Join Date
    Mar 2009
    Posts
    798
    Thank Post
    51
    Thanked 55 Times in 54 Posts
    Rep Power
    23
    try booting from a windows PE cd and run a virus/ malware checker from that

SHARE:
+ Post New Thread

Similar Threads

  1. Communicate in print symbols.
    By bladedanny in forum General Chat
    Replies: 0
    Last Post: 17th September 2010, 09:12 AM
  2. [MS Office - 2008 (Mac)] word showing the paragraph symbols etc
    By RabbieBurns in forum Office Software
    Replies: 2
    Last Post: 25th January 2010, 03:00 AM
  3. Makaton Signs and Symbols
    By danielson81 in forum Educational Software
    Replies: 3
    Last Post: 25th October 2009, 01:26 AM
  4. Home Folders, Offline Files and Folder Names
    By Nick_Parker in forum Windows
    Replies: 22
    Last Post: 1st October 2009, 11:42 AM
  5. Long File and Folder Names
    By karldenton in forum Windows
    Replies: 16
    Last Post: 22nd July 2009, 12:47 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •