Odd AC and X folders keep appearing in C: Drive

posted in General
Friday, July 07 2017, 01:24 AM
0
It seems my computer has yet another issue. Earlier today, I was going through my computer just to delete older files and free up some space and look for anything that shouldn't be there and I cam across these strange folders in my C drive. They are called Actransfer147 and Xresources107 and they contain odd files that are all corrupted besides the .txt files which just contain nonsense. I've attached a screenshot of the folders and inside the folders. When I try to delete these folders, they come back in less than a minute and change their entire name except for the AC and X in the beginnings of their name. The files inside all change too but again, they are all corrupted except the .txt files. This isnt causing any apparent issues with my computer but this seems like some program or virus is generating these documents. Also, it doesn't appear to spread or make new folders; it just sticks to the two folders. I have ran various malware scanners and have even ran Wireshark to see if any unusual connections were happening from the period I delete the files to the period they reappear again and everything comes back as clean. The first files were created about 5 hours ago but I did not download anything at that time nor did I click anything unusual. Thanks for any help you can give me.http://i.imgur.com/abfXZax.jpghttp://i.imgur.com/x1XIv9p.jpghttp://i.imgur.com/Yf81umy.jpg
Responses (1)
  • Accepted Answer

    Friday, July 07 2017, 06:54 AM - #permalink
    0
    Hi Logan, you could try using Process Monitor (https://technet.microsoft.com/en-us/sysinternals/bb896645). You could add a filter to these folders and then Process Monitor would should you when they were accessed.
    • Logan Fox
      more than a month ago
      I found out that it was just files that RansomFree made to protect my pc against ransomware, which explains why they were all corrupted and unopenable. Thanks for the reply.
    The reply is currently minimized Show
Your Reply