Suspicious Directory in Win XP

  • drdupuis
  • Newbie
  • Newbie
  • drdupuis
  • Posts: 9

Post 3+ Months Ago

Anyone encountered this problem? The other day I notice a strange directory on my e:/ drive called d49ad7f10e0428be834d80b7ea. In this dir there are 3 folders, common, sp1 and sp2.
Thanks
DRD
  • Anonymous
  • Bot
  • No Avatar
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post 3+ Months Ago

  • JrzyCrim
  • Mastermind
  • Mastermind
  • User avatar
  • Posts: 2062

Post 3+ Months Ago

Looks like leftovers from a windows Update file. Did you recently install any hotfixes or updates?
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

Looks almost like a directory for storing service pack files. Is this at the root of E drive or in a subfolder? What is your E drive anyway? An alternate OS, or just a logical drive for data storage?
  • drdupuis
  • Newbie
  • Newbie
  • drdupuis
  • Posts: 9

Post 3+ Months Ago

E:\ is a logical drive and I presume that any updates would be set on the c:\ with the rest of the updates. In spi one there is a folder called ara and in the foler there are two files hsc.system.errors.connection.htm.cab and hsc.system.scripts.common.js.cab then folder chs with
hsc.system.errors.connection.htm.cab andhsc.system.scripts.common.js.cab and so on.......
Thanks
drd
  • JrzyCrim
  • Mastermind
  • Mastermind
  • User avatar
  • Posts: 2062

Post 3+ Months Ago

Not sure why those files would end up on your E: drive but it looks like they are from windows update 840374 (Vulnerability in Help and Support Center Could Allow Remote Code Execution).

I have that update here and found the same files you listed above.

Here's the directory structure of sp1:

Code: [ Select ]
ara     <DIR>   6/21/04 19:23 nld     <DIR>   6/21/04 19:23
chs     <DIR>   6/21/04 19:23 nor     <DIR>   6/21/04 19:23
cht     <DIR>   6/21/04 19:23 plk     <DIR>   6/21/04 19:23
csy     <DIR>   6/21/04 19:23 ptb     <DIR>   6/21/04 19:23
dan     <DIR>   6/21/04 19:23 ptg     <DIR>   6/21/04 19:23
deu     <DIR>   6/21/04 19:23 rus     <DIR>   6/21/04 19:23
ell     <DIR>   6/21/04 19:23 sve     <DIR>   6/21/04 19:23
esn     <DIR>   6/21/04 19:23 trk     <DIR>   6/21/04 19:23
fin     <DIR>   6/21/04 19:23 update    <DIR>   6/21/04 19:23
fra     <DIR>   6/21/04 19:23 hscsys~1 cab  26172  4/15/04 14:36
heb     <DIR>   6/21/04 19:23 hscxpsp1 cab  70111  2/26/04 21:36
hun     <DIR>   6/21/04 19:23 helpctr exe  726528  4/09/04 12:56
ita     <DIR>   6/21/04 19:23 hscupd  exe  16896  2/26/04 21:30
jpn     <DIR>   6/21/04 19:23 
kor     <DIR>   6/21/04 19:23
  1. ara     <DIR>   6/21/04 19:23 nld     <DIR>   6/21/04 19:23
  2. chs     <DIR>   6/21/04 19:23 nor     <DIR>   6/21/04 19:23
  3. cht     <DIR>   6/21/04 19:23 plk     <DIR>   6/21/04 19:23
  4. csy     <DIR>   6/21/04 19:23 ptb     <DIR>   6/21/04 19:23
  5. dan     <DIR>   6/21/04 19:23 ptg     <DIR>   6/21/04 19:23
  6. deu     <DIR>   6/21/04 19:23 rus     <DIR>   6/21/04 19:23
  7. ell     <DIR>   6/21/04 19:23 sve     <DIR>   6/21/04 19:23
  8. esn     <DIR>   6/21/04 19:23 trk     <DIR>   6/21/04 19:23
  9. fin     <DIR>   6/21/04 19:23 update    <DIR>   6/21/04 19:23
  10. fra     <DIR>   6/21/04 19:23 hscsys~1 cab  26172  4/15/04 14:36
  11. heb     <DIR>   6/21/04 19:23 hscxpsp1 cab  70111  2/26/04 21:36
  12. hun     <DIR>   6/21/04 19:23 helpctr exe  726528  4/09/04 12:56
  13. ita     <DIR>   6/21/04 19:23 hscupd  exe  16896  2/26/04 21:30
  14. jpn     <DIR>   6/21/04 19:23 
  15. kor     <DIR>   6/21/04 19:23
  • drdupuis
  • Newbie
  • Newbie
  • drdupuis
  • Posts: 9

Post 3+ Months Ago

Yes, E:\ is a logical drive to store files. My question is is it safe to delete this directory. Thanks
  • LAbrego
  • brego from LA
  • Web Master
  • User avatar
  • Posts: 2852

Post 3+ Months Ago

Seems to be related with this document from Microsoft, check it up:

http://support.microsoft.com/default.aspx?scid=kb;en-us;841996
  • JrzyCrim
  • Mastermind
  • Mastermind
  • User avatar
  • Posts: 2062

Post 3+ Months Ago

Yes, it is safe to delete that directory.

Post Information

  • Total Posts in this topic: 8 posts
  • Users browsing this forum: No registered users and 46 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.