Programming C, C++, Java, PHP, Ruby, Turing, VB
Computer Science Canada 
Programming C, C++, Java, PHP, Ruby, Turing, VB  

Username:   Password: 
 RegisterRegister   
 Is This Normal?
Index -> General Discussion
View previous topic Printable versionDownload TopicSubscribe to this topicPrivate MessagesRefresh page View next topic
Author Message
Analysis Mode




PostPosted: Thu Mar 25, 2010 6:02 pm   Post subject: Is This Normal?

My Windows computer suddenly started accessing random files from my folder and my dad's folder on my computer yesterday. I found this out in the C:\Documents and Settings\*Insert Computer_User's name here*\RECENT. I turned off my modem and ran an avast antivirus scan, revealing a rootkit gen which has been deleted. Just curious, is it normal for windows to access different files like this? Even today, after the antivirus scan, windows has been accessing one or two random files. I am about to start a boot-time scan as well.
Sponsor
Sponsor
Sponsor
sponsor
Analysis Mode




PostPosted: Thu Mar 25, 2010 6:06 pm   Post subject: RE:Is This Normal?

oh and the rootkit i found was called

C:\WINDOWS\Temp\sig35A.tmp
DtY




PostPosted: Thu Mar 25, 2010 6:15 pm   Post subject: RE:Is This Normal?

What do you mean by 'accessing files', windows doesn't keep track of file access time, there's no way to know that a file was accessed.
Euphoracle




PostPosted: Thu Mar 25, 2010 6:19 pm   Post subject: RE:Is This Normal?

Uh, yeah it does. If you go to the file's properties, it'll tell you when it was last accessed.
USEC_OFFICER




PostPosted: Thu Mar 25, 2010 8:19 pm   Post subject: RE:Is This Normal?

Judging from experience, I'll say that it is not normal. Perhaps you should check with avast about that or search the internet.
andrew.




PostPosted: Thu Mar 25, 2010 8:23 pm   Post subject: RE:Is This Normal?

Depends what you mean. I notice my laptop always seems to be loading files when it's in Windows, and I know it doesn't have a virus. So it may be normal for Windows.

Also, if you have Vista or 7, you can open the Resource Monitor from Task Manager to monitor which programs are accessing the disk.
USEC_OFFICER




PostPosted: Thu Mar 25, 2010 8:26 pm   Post subject: RE:Is This Normal?

Just thought of something. Could Avast be auto-checking?
Turing_Gamer




PostPosted: Fri Mar 26, 2010 7:24 am   Post subject: RE:Is This Normal?

Not to mention the latest files opened would go under Recent Documents section of the start menu, if you are using xp. And I think it might be possible to access files through that hidden program. It's purpose is probably to find private information. Either that or your computer is starting to have a nervous breckdown...
Sponsor
Sponsor
Sponsor
sponsor
Display posts from previous:   
   Index -> General Discussion
View previous topic Tell A FriendPrintable versionDownload TopicSubscribe to this topicPrivate MessagesRefresh page View next topic

Page 1 of 1  [ 8 Posts ]
Jump to:   


Style:  
Search: