Trying to Make Sense of Strange Folder in C:WINDOWS

I have a very strange looking folder under my C:\WINDOWS folder, which if it
is not a trojan then it must be some kind of device driver install that went
very bad. I would like help identifying what it might be.

The folder is named:

C:\WINDOWS\EFUZEJYDIXC1AZ4D

and it contains copies of many Windows system files. The contents of this
folder are posted here:

http://pages.uschw.com/usenet/EFUZEJ-folder/folder-contents.txt

Of special note is a logfile in that folder whose name and contents are
linked here:

http://pages.uschw.com/usenet/EFUZEJ-folder/sthdae.log

You may want to open that logfile in an editor other than NOTEPAD that can
hand LF only at the end of each line. Word 2003 opened it fine here.

In that logfile I see attempts to add device drivers, that are failing with
various messages about an invalid pin. That almost looks like Bluetooth?

What I find most suspicious about this folder is that it copies over so many
critical Windows system files. Why would any device installation need its
own private copies of those files?

--
Will

Will wrote:

> I have a very strange looking folder under my C:\WINDOWS folder, which if
> it is not a trojan then it must be some kind of device driver install that
> went
> very bad. I would like help identifying what it might be.
>
> The folder is named:
>
> C:\WINDOWS\EFUZEJYDIXC1AZ4D
>
> and it contains copies of many Windows system files. The contents of
> this folder are posted here:
>
> http://pages.uschw.com/usenet/EFUZEJ-folder/folder-contents.txt
>
> Of special note is a logfile in that folder whose name and contents are
> linked here:
>
> http://pages.uschw.com/usenet/EFUZEJ-folder/sthdae.log
>
> You may want to open that logfile in an editor other than NOTEPAD that can
> hand LF only at the end of each line. Word 2003 opened it fine here.
>
> In that logfile I see attempts to add device drivers, that are failing
> with
> various messages about an invalid pin. That almost looks like Bluetooth?
>
> What I find most suspicious about this folder is that it copies over so
> many
> critical Windows system files. Why would any device installation need
> its own private copies of those files?
>

And what results do you get when you do virus/malware removal scanning?
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ