Drazonware

[chrisrob]

I keep finding an empty folder entitled "Drazonware" has been created in my Documents library. I delete it and it comes back after a few days.

Googling it, I'm worried it may be created by C:\76555123.exe program which I assume is a virus.

However, all my protection is up to dat and working and I have completed full scans (and searches for 76555123.exe and Drazonware files hiding anywhere in the system - with negative results).

I am running Windows 7 Home Premium (64 bit) and use AVG anti-virus, Comodo firewall, Zemana antilogger and IObit malware fighter.

Does anyone know what this is or where it comes from or how to prevent it?

[AlBags]

OK
Do this ...

Download and install HijackThis ...
http://download.cnet....-8022_4-10227353.html

Start it and Do A Scan and Save Logfile.
Check ALL processes through and in the section below Processes.
Important to check Service and RUN entries through thoroughly!

Look for entries ... 'no file'
I think a program you are using might be creating the folder ..
Look at folder properties and time created .. what program(s) is the time linked to? or Startup?

[AlBags]

Another possibility is a Browser malware object .. What browser do you use?

If IE, open the add-ons and look through.

[chrisrob]

Thanks Al,

Since my last deletion of the folder, it hasn't recurred but I'll follow your advice if it does.

I'm using Chrome 14 Browser generally and Firefox Aurora 8, but I also do have IE 9 for the odd occasion my wife uses my machine (as it's the browser she's used to).

[chrisrob]

Have just used the program and scanned my machine. A great little prog. Nothing sinister that I can see.

Thanks for your help.