-----------------------------------

Analysis Mode

Thu Mar 25, 2010 6:02 pm


Is This Normal?

-----------------------------------

My Windows computer suddenly started accessing random files from my folder and my dad's folder on my computer yesterday. I found this out in the C:\Documents and Settings\*Insert Computer_User's name here*\RECENT.  I turned off my modem and ran an avast antivirus scan, revealing a rootkit gen which has been deleted.  Just curious, is it normal for windows to access different files like this?  Even today, after the antivirus scan, windows has been accessing one or two random files.  I am about to start a boot-time scan as well.


-----------------------------------

Analysis Mode

Thu Mar 25, 2010 6:06 pm


RE:Is This Normal?

-----------------------------------

oh and the rootkit i found was called

C:\WINDOWS\Temp\sig35A.tmp


-----------------------------------

DtY

Thu Mar 25, 2010 6:15 pm


RE:Is This Normal?

-----------------------------------

What do you mean by 'accessing files', windows doesn't keep track of file access time, there's no way to know that a file was accessed.


-----------------------------------

Euphoracle

Thu Mar 25, 2010 6:19 pm


RE:Is This Normal?

-----------------------------------

Uh, yeah it does.  If you go to the file's properties, it'll tell you when it was last accessed.


-----------------------------------

USEC_OFFICER

Thu Mar 25, 2010 8:19 pm


RE:Is This Normal?

-----------------------------------

Judging from experience, I'll say that it is not normal. Perhaps you should check with avast about that or search the internet.


-----------------------------------

andrew.

Thu Mar 25, 2010 8:23 pm


RE:Is This Normal?

-----------------------------------

Depends what you mean. I notice my laptop always seems to be loading files when it's in Windows, and I know it doesn't have a virus. So it may be normal for Windows. 

Also, if you have Vista or 7, you can open the Resource Monitor from Task Manager to monitor which programs are accessing the disk.


-----------------------------------

USEC_OFFICER

Thu Mar 25, 2010 8:26 pm


RE:Is This Normal?

-----------------------------------

Just thought of something. Could Avast be auto-checking?


-----------------------------------

Turing_Gamer

Fri Mar 26, 2010 7:24 am


RE:Is This Normal?

-----------------------------------

Not to mention the latest files opened would go under Recent Documents section of the start menu, if you are using xp. And I think it might be possible to access files through that hidden program. It's purpose is probably to find private information. Either that or your computer is starting to have a nervous breckdown...