Re: Suspicious Files

From: Nepatsfan (nepatsfan_at_SBXXXIX.com)
Date: 08/15/05 

Date: Mon, 15 Aug 2005 10:36:50 -0400

Kayman wrote:
> I just discovered some files which I never noticed before. I
> submitted them to VirusTotal but the scans did not find
> anything.
> I also performed a scan with HijackThis v1.99.1 and had the
> log file submitted and analyzed. The result of the log file
> was okay.
> Anyway, since I am pretty sure for not having downloaded
> these files I am worried that they may be anything but
> harmless.
> I kindly request your request your expert opinion as how to
> handle these files viz "SecTaskMan" in Documents and
> Settings, "XoftSpy" and "InstallShieldInformation" both in
> Program Files.

#1. Security Task Manager is a third party program that creates
a folder in the following location:

C:\Documents and Settings\All Users\Application Data\SecTaskMan

If it doesn't sound familiar, here's more info on that program:

Security Task Manger
http://www.neuber.com/taskmanager/index.html

Check in Control Panel -> Add/Remove Programs to see if you can
uninstall it from there. If not, simply delete the folder.

#3. The following is a legitimate hidden folder:
C:\Program Files\InstallShield Installation Information
It contains files related to many of the applications installed
on your computer.

I'd be suspicious if you found a folder with a similar name
such as
"InstallShieldInformation".

Make sure your antivirus program is up-to-date and run a scan.
You should also run a scan with AdAware and Spybot S & D.

AdAware
http://www.spychecker.com/program/adaware.html

Spybot S & D
http://www.spychecker.com/program/spybot.html

You might also consider running some of the online virus
scanners:

http://housecall.trendmicro.com/

http://www.pandasoftware.com/products/activescan/com/activescan_principal.htm

http://us.mcafee.com/root/mfs/default.asp?WWW_URL=www.mcafee.com/myapps/mfs/default.asp

Good luck

Nepatsfan

Quantcast