Strange folder created

From: Ho Chi Man Erio (erio@netvigator.com)
Date: 10/17/02 

From: "Ho Chi Man Erio" <erio@netvigator.com>
Date: Thu, 17 Oct 2002 07:00:06 -0700

Hi all,

Do anyone experienced such a strange situation. I run a
domain controller and Web server (w/ ASP.Net) on my Win
2000 server, recently I found that in the system root
(e.g. C:\Winnt), some strange folder was created. How
strange is that:

1. Located inside the system root, I just set the
premission for administrators and system (Full control),
aspnet_wp (R/W), Everyone (R).

2. The folders then auto-create after I log out the
machine (or unattend) silently.

2. The folde was stricly ordered: 0-9A-Z(capitalized),
totally 36 characters. the folder name are 16 character
each, like "0123456789ABCDEF" or "FGHIJKLMNOPQRSTU", and
the last is "UVWXYZ0123456789", totally 36.

3. The create time is not in order, usually complete
it's "cycle" within 7 hours, and the folder contain
nothing inside (0 byte).

4. I can delete these folders, and once I delete in the
middle (e.g. the 1st character is "D"), it's order then
was broken. Might be "EFGH...7890" (still in character
order)

5. No other folders like these were found in elsewhere. No
virus was detected (Using NAV with latest definition). No
strange service found in the "Service".

Could anyone answer me on it?

Relevant Pages

  • Re: Strange folder created
    ... > Do anyone experienced such a strange situation. ... > domain controller and Web server on my Win ... some strange folder was created. ... Located inside the system root, ...
    (microsoft.public.win2000.security)
  • RE: Word/Character Count for a Group of Documents
    ... and character count in a table ... Dim sPath As String ... Dim sActivePath As String ... ' Make sure that the active document is not in the folder ...
    (microsoft.public.word.vba.general)
  • Explorer disconnected shares
    ... I'm facing a strange issue when using explorer to create a file or a folder on a network share, it takes about 100 secs to complete. ... I ran a Wireshark and a Processmonitor and found that the ProcessExplorer displays a "DISCONNECTED" just after receiving the reply of the file creation, and waits a long time before trying to reconnect. ...
    (microsoft.public.windows.vista.networking_sharing)
  • Re: Error 1324
    ... I cannot find any reference to the "The Folder Path Contains an Invalid ... The Folder Path Contains an Invalid Character ... The Windows Installer CleanUp Utility does not: ...
    (microsoft.public.windowsxp.general)
  • IMPORTANT: Reliable requires Mixmaster 2.0.4b45 or later. There are problems i
    ... Move your Books folder to your encrypted drive. ... PGPInstallNT* Windows NT Users: Windows NT does not normally use ... The character or characters which precede each line of quoted text. ... To install PGP 5 or 6 for use with Reliable, ...
    (sci.crypt)