in last couple of weeks started getting strange stuff in c:\windows\temp\. more specifically:
i running win 10 latest updates
in c:\windows\temp\ folder there folder named nc5pbb
there bunch of "suspicious files in folder, seem change ever time shutdown computer. example, on 2 feb shutdown computer , when booted on 3 feb had following list of files, 2 feb creation date:
18xtf.doc
8gvhxuvns1s.pem
tmpc
busutopiafalling.docx
defer-manufacturers-slept-respond.txt
elect-saucer-cost.jpg
factory-verbal-missed-morning.xls
innate_stationary_mark.xlsx
momentaryfindspreparingprovoke.sql
realized.consciousness.mdb
slept-beyond-coal.rtf
on 4 feb booted computer , following files in folder, 3feb date:
1mphyhqseno.pem
dirty-negotiations.rtf
drastic.lewis.doc
elements innate.xls
jackson.scratch.xlsx
k7rwddnggc
league.philadelphia.sql folder
ought-radius-medium.docx
pm5.mdb
roberts-bright-marriages.jpg
soup gin.txt
i can delete files, not have permission (even admin) delete nc5pbb folder!
i run number of scanners, including:
- microsoft safety scanner
- norton power eraser
- avira pc cleaner
- mcafee getsusp
- dr web cureit
none found issues, nor did windows defender , bitdefender.
even though tools claim these files clean , and not suspicious programs on system, not open of them , not have sandbox open , see happens.
any suggestions on else do, can find out creating these files, why , rid of it.
thank you!
i found useful information. the nc5pbb folder , files in there related cybereason , had not realised in past.
thank other suggestions, since steps helped @ clearing out permission issues.
Windows / Windows 10 / Security & privacy / PC
Comments
Post a Comment