Obscure file - siae3123.exe

From: raconte (raconte_at_hotmail.com)
Date: 05/22/04 

Date: 22 May 2004 13:27:44 -0700

Hi there. A friend of mine encountered a new file on his Windows
computer (XP Home edition, v2002 Sp1 on a home brew system). The
filename is siae3123.exe, located in the windows/system32 folder. It
pops up every 15 seconds or so for 1-2 seconds and then goes away.

He can't delete it from the computer because it's in use. The big
startup list at sysinfo.org doesn't mention that particular file.
Adaware and virus scanners don't identify it. It isn't located in the
startup tab when MSCONFIG is run.

He opened the file in WORDPAD, and he says it appears to be some sort
of internet blocker/filter, and he hasn't installed anything like that
lately.

I can't find any mention of the filename using Google, either on the
web or in newsgroups. I've heard it mentioned that some new spyware
creates random names, and I'm wondering how to find out what this is
and where it came from.

Relevant Pages

  • Re: Transferring directory structure to Windows
    ... Transferring directory structure to Windows ... Filename collisions are a real threat but it should be ... whether FTP, tar, or whatever, you will only wind up ...
    (AIX-L)
  • Re: Characters allowed in short filenames
    ... fatgen103.doc seems to have a slightly below average proportion of bugs, but Windows doesn't completely agree with it. ... > My partial understanding is that short filenames are stored using the> OEM ... > As far as I can tell, code page 437 doesn't contain a ß character. ... > page is 850 then we are halfway towards allowing a short filename to ...
    (microsoft.public.development.device.drivers)
  • gnu grep in windows
    ... windows, it should not be. ... while also fixing this filename case sensitivity ... Fix this first by giving grep a directory to recurse into. ...
    (comp.windows.x.i386unix)
  • Media Centre Crashes on opening (Vista)
    ... I have windows vista ultimate. ... at MediaCenter.Store.SqlLite.ObjectStoreOpener.Open(String fileName) ... at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Objectparameters, CultureInfo culture, Boolean skipVisibilityChecks) ...
    (microsoft.public.windows.mediacenter)
  • Re: Characters allowed in short filenames
    ... fatgen103.doc is very clear in prohibiting lower-case letters from being stored in a short name. ... US Windows would be 437, ... the current default OEM code page is 437 and I create a new file then the ... page is 850 then we are halfway towards allowing a short filename to contain ...
    (microsoft.public.development.device.drivers)