"Ghost" folders, configuration setting documents, system files, etc. are being automatically created

[Ohayosan]

Hi.

 

Since yesterday, I have been deleting a number of configuration setting documents and translucent folders that had appeared right after my NIS detected a VBS Runauto virus on my computer; the source I believe is from an external hardrive. I, too, have noted that while rebooting my computer after the detection, the startup was slower than usual, and it was then I found several folders, jpegs, setting documents, etc. littered throughout my personal folders, i.e., My Music, My Pictures, C:\, etc. Furthermore, according to the task manager, I have 4 rundll32.exe processes running simultaneously, and after futilely searching the Internet for an explanation, I am only given a vague idea that it might be a virus.

 

So anyways, I have doing one full system scan after another with NIS, Malwarebytes, and Norton Power Eraser, however, no virus has been detected since the VBS Runauto. Hence, my question is: What could be the cause this, if not a virus? Anyhow, attached to this are screenshots of what I mean by translucent/"Ghost" folders, configuration settings, and system files after the "Thank you".

 

I am at a lost here; I haven't had a backup made (my mistake), and the only other way I think I have is to reformat my hard drive and other external hard disks, so any advice and help is extremely appreciated.

 

 

Thank you.

 

 

Screenshot 1: Note pagefile.sys, log files, and hiberfil.sys; I tried deleting them but apparently they are currently being used. In addition, note folders: Boot, Recycle Bin(encrytped), RR Backups, and System Volume information- these are the "Ghost"/translucent folders I was talking about. These folders and files just appeared after the VBS Runauto was detected.

 

Screenshot 2: Please note files ending with .dat, and the translucent AppData folder; again I can't delete the .dat files; they too appeared after the rebooting my computer for the first time after the VBS Runauto was detected.

 

Screenshot 3: Finally, there is a screenshot of my Program Files from my C:\, please note the Desktop configuration setting document, and the Uninstall Information translucent folder.

 

As mentioned, any help is truly appreciated. And again, thank you all very much.

[Ohayosan]

Thank you for posting a reply on my thread, and for trying, since I hadn't changed anything through the Folder options menu. As I had written before, the folders, configuration setting documents, files, etc., appeared when I turned on the computer in the instance following the VBS Runauto incidence; for the past 2 years I have been using this computer, nothing of this sort had occured before. So if I didn't change settings, is it caused by a virus, spyware, or malware?

 

Anyways, once again, thank you very much for trying.

[Ohayosan]

I'm not exactly if it does the trick, but after I used System Restore, I don't see 'em "Ghost" folders and what not, no more. DUH!

[user3]

The files and folders are still there after System Restore, as they are required for proper operation of the system. The "Protected Operating System Files" is hidden by default in a new system. You can unhide the same and you will be able to see the folders again.

[Ohayosan]

Hi.

 

Since yesterday, I have been deleting a number of configuration setting documents and translucent folders that had appeared right after my NIS detected a VBS Runauto virus on my computer; the source I believe is from an external hardrive. I, too, have noted that while rebooting my computer after the detection, the startup was slower than usual, and it was then I found several folders, jpegs, setting documents, etc. littered throughout my personal folders, i.e., My Music, My Pictures, C:\, etc. Furthermore, according to the task manager, I have 4 rundll32.exe processes running simultaneously, and after futilely searching the Internet for an explanation, I am only given a vague idea that it might be a virus.

 

So anyways, I have doing one full system scan after another with NIS, Malwarebytes, and Norton Power Eraser, however, no virus has been detected since the VBS Runauto. Hence, my question is: What could be the cause this, if not a virus? Anyhow, attached to this are screenshots of what I mean by translucent/"Ghost" folders, configuration settings, and system files after the "Thank you".

 

I am at a lost here; I haven't had a backup made (my mistake), and the only other way I think I have is to reformat my hard drive and other external hard disks, so any advice and help is extremely appreciated.

 

 

Thank you.

 

 

Screenshot 1: Note pagefile.sys, log files, and hiberfil.sys; I tried deleting them but apparently they are currently being used. In addition, note folders: Boot, Recycle Bin(encrytped), RR Backups, and System Volume information- these are the "Ghost"/translucent folders I was talking about. These folders and files just appeared after the VBS Runauto was detected.

 

Screenshot 2: Please note files ending with .dat, and the translucent AppData folder; again I can't delete the .dat files; they too appeared after the rebooting my computer for the first time after the VBS Runauto was detected.

 

Screenshot 3: Finally, there is a screenshot of my Program Files from my C:\, please note the Desktop configuration setting document, and the Uninstall Information translucent folder.

 

As mentioned, any help is truly appreciated. And again, thank you all very much.