Results 1 to 4 of 4

Thread: What files are supposed to be in the SD directory?

  1. #1
    Junior Member
    Join Date
    Apr 2008
    Posts
    4

    Default What files are supposed to be in the SD directory?

    I have a file called OIJUUKTLWPNZWYXTPS.scr in the spybot installed directory and merly the name is suspicious... Why sd would have a screensaver beats me? Do you have any tools that can verify an SD installation so it is not infected? Malware makers could try to target SD as a way of staying undetected.

  2. #2
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    rsurfer:

    I have three (3) what appear to be randomly named .scr files in my "C:\Program Files\Spybot - Search & Destroy" directory:
    • 1/28/2008 12:43 1,404,240 TZCBGLVNU.scr
    • 1/28/2008 12:43 5,146,448 NMBXHLPCHWMASR.scr
    • 1/28/2008 12:43 2,097,488 BNKFJWLUI.scr

    They seem to be exact copies of the following Spybot .exe files:
    • 1/28/2008 12:43 1,404,240 SDUpdate.exe
    • 1/28/2008 12:43 5,146,448 SpybotSD.exe
    • 1/28/2008 12:43 2,097,488 TeaTimer.exe

    In fact if I double click on NMBXHLPCHWMASR.scr it starts and functions just like SpybotSD.exe.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  3. #3
    Junior Member
    Join Date
    Apr 2008
    Posts
    4

    Default Sneaky backup copies then...

    Mine is not an exact copy of any file in the SD folder but it's from 2007-08-31 so it probably a copy of an old version. I would like the SD team to confirm this and also how to go about if you want to verify you SD installation to make sure it is not infected... A tool you could download that checks the integrity of your installation would be perfect.

  4. #4
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    rsurfer:

    Mine are exact copies. Same Size, Version and Time stamp as well as the same CRC-32, MD5 and SHA1 hash values.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •