Hello everyone,
I am not sure if what I have is a virus, or malware, but ESET Antivirus business edition can not find it in deep scans.
What is most unfortunate is that I can not find information on exactly relevant symptoms out on the net. The OS is Win7 64bit
The problem that I face is that something is enabling the "hidden" attribute of the 1st level of folders (only) under a network share I have AND creates some .exe files (as many are there are folders) with the exact folder name. So basically the folders disappear from plane sight and some .exe files are put in place. There is a "recycleBin.dll" file also placed next to the .exe files.
The average user does not understand the difference. Windows 7 pop up a windows about whether they want to run the executable and only if you press "yes" you are taken to the folder. but god knows what else has been run.
manually I can easily delete these exe files and deselect the hidden attribute of the folder. Soon enough however, the problem will reappear. from other computers too.
I run deep scans in all the pcs (OS and c:), as well as on the network shares. ESET doesn't see anything wrong. I actually let ESET scan explicitly these .exe files and it didn't understand what was wrong.
Looking around on the net, I came across the porn.exe, sexy.exe etc etc file which seem to have a similar behaviour in some respect. But this is a 2008 virus and surely has been inserted in virus definition files already. Additionally, there is NOwhere any mention of the "recycleBin.dll" file.
I tried running ERARemover_x64.exe and ESETConfickerCleaner.exe but had no luck.
Do you know anything about this ?
Thank you very much for your help
