Topic: Strange Visitors

[joudi]

Hi all,

     I have a USB external Hard disk in which I Store my archives and other personal things. Everything stored there I select it and put it there manually. Some weeks ago I noticed a file which I didn't put there. I was surprised and I removed it. Today I see it again with another new file.

     Here is the first file:    2c63373a0412d5957ca18ec876
   
     And here is the second file:          msdownld.tmp

The first contains two other files with the names: SP1  &   SP2
If I try to open them I get the message:  "Access refused", and they refuse to be removed.

The second file is empty, no other files inside, and I can remove it.

When the first file visited me the other time it contained a program with something and then " .EXE " inside "SP1" or "SP2". I started to install it to see, but before it continued I stopped it by fear of virus. This time it contains nothing.

All those files have zero byte in them now. Here is there photo:

                 Any idea?          Thanks


P.S.    Often I put on that HDD things which I take from P2P.

[joudi]

here is all what my HDD contains:

[Sandra]

I think its a temporary file that XP uses to help the download Joudi, usually it should remove it by itself when you shut down your PC.
Do you often disconnect that drive before rebooting ?
If so that may be why it doesnt delete it by itself :doggie:

[joudi]

Do you often disconnect that drive before rebooting ?

Thanks Sandra,

     Well, sometimes I do. But now I tried to disconnect and connect and reboot in each case. It doesn't want to be removed.

     But it's true that one of the files which is:   "msdownld.tmp" Is temporary one and I can remove it, while the other: "2c63373a0412d5957ca18ec876" is not temporary. Sorry, the photo is not clear but it has an ordinary colour, not like the other (temporary) which has light colour.

     Anyway i hope not to be a "Virus" attaking my new HDD.  

[Sandra]

The MSdown one is a "Hidden" file Joudi thats why its a paler colour.
The picture is perfectly clear Joudi its just that to see it fully you need to click on the name of the picture where the paper clip is and it opens another window.
Its the software on Pals that only allows it to be seen the way it is at the moment, the picture itself is fine