a reply to: Flyingclaydisk
Win7? OK, should be able to figure that one out easily enough.
It sounds like you did have some background process running, probably a Trojan. The file names appear to be time-stamped in the filename, and were
likely tucked safely away somewhere in a hidden folder. In other words, someone was listening to you remotely.
The time stamp looks like it uses a simple algorithm: yymmdd_hhmm. Hours are in 24-hour format.
It's not Windows.
Usually, these things hit the C://Users/[your name]/App Data/ folders. That's the biggest security hole Win7 seems to have. Permissions are
necessarily lax on these folders, as it serves as a kind of pseudo-quarantine zone for apps to access. Unfortunately, that means an app like the
browser can access it too and a website can send an app into it.
In Windows Exploder, go to the advanced view options (don't remember the exact buttons to push, but you should be able to find it... it's the long
list of checkboxes) and make sure it is set to show all files, even when hidden and including system files. Win7 automatically hides these by default.
There is probably a small executable hiding in the App Data folder (or a subfolder of it) that is running in the background and was hidden.
Another trick is to type "msconfig.exe," run it in administrative mode, and go to the start-up tab. That hidden app is likely running in there, but it
won't advertise itself. The name (if there even is a name; not all processes have names) will be something cryptic and likely innocent-sounding. Power
up the old Google and just start searching for any app that is listed. Sometimes a virus can use the same name as a Windows process, but it'll be in a
different folder. So watch for that. Of course, this one is for future reference; it only works when you are running the infected machine.
And of course, unless you transferred .exe or other executable files over, it's gone. All that is left are those mp3s. If you can get your old drive
to ping, you can use the first trick on it to maybe find the little devil. Just be ready to do a lot of searching... there's a lot of folders under
App Data and it likely won't be conspicuous.
I do want to know, since it is likely a virus that somehow got through, what antivirus do you normally use? Also, do you run regular scans with
MalWareBytes? If you do, this is the first time I have seen a virus squeak past them.