What files are supposed to be in the SD directory?

[rsurfer]

I have a file called OIJUUKTLWPNZWYXTPS.scr in the spybot installed directory and merly the name is suspicious... Why sd would have a screensaver beats me? Do you have any tools that can verify an SD installation so it is not infected? Malware makers could try to target SD as a way of staying undetected.

 

[md usa spybot fan]

rsurfer:

I have three (3) what appear to be randomly named .scr files in my "C:\Program Files\Spybot - Search & Destroy" directory:

• 1/28/2008 12:43 1,404,240 TZCBGLVNU.scr
• 1/28/2008 12:43 5,146,448 NMBXHLPCHWMASR.scr
• 1/28/2008 12:43 2,097,488 BNKFJWLUI.scr

They seem to be exact copies of the following Spybot .exe files:

• 1/28/2008 12:43 1,404,240 SDUpdate.exe
• 1/28/2008 12:43 5,146,448 SpybotSD.exe
• 1/28/2008 12:43 2,097,488 TeaTimer.exe

In fact if I double click on NMBXHLPCHWMASR.scr it starts and functions just like SpybotSD.exe.

 

[rsurfer]

Sneaky backup copies then...

Mine is not an exact copy of any file in the SD folder but it's from 2007-08-31 so it probably a copy of an old version. I would like the SD team to confirm this and also how to go about if you want to verify you SD installation to make sure it is not infected... A tool you could download that checks the integrity of your installation would be perfect.

 

[md usa spybot fan]

rsurfer:

Mine are exact copies. Same Size, Version and Time stamp as well as the same CRC-32, MD5 and SHA1 hash values.