Weird folders and Tasks, What is this?

[Ordan]

What are those things? Note: i find it only on Win8 and they are in ´´program data´´ folder
I recently found in my computer weird folders and tasks that was named absolutely randomly and it was like this: 1A24S-151DE-4G568-DA4W8-485A0 (there was like 20+ of them) and i did some research and i found, it do not interact with network , it appears randomly. Those tasks have usage like 0.2MB memory so its not perfrormance breaking. I also tried disconnect computer from network completely and its still appearing and when i click open in folder of that weird task it open same named empty folder with no files. I dont find any hidden files. And when end all those tasks, i need re-boot pc to get them again. I also try multiple antivirus programs and it seems all fine for them.

 

[Colif]

can you show a screen shot of what you are seeing?

 

[Ordan]

Colif i know im realy late (sorry) but there is screenshot http://imgur.com/a/NH34d

 

[Colif]

it reminds me of internet history files, as they can look like that does the type say application?

most programs in programdata at least make a folder so you can tell what they are, not just dump the application on the top level. This is a bad program for not doing that.

Try doing a clean boot and see if they are created. If they are, its a windows process of some kind, if they aren't then its one of your start up programs

 

[Ordan]

i did it and they arent in that clean boot they are just only while normal using and they dont have any startup option and its just weird because they are 2 days on and from random they shut down, week nothing and after it again whole new proces with random name (#randomness).Also i cleaned my pc from tons of random trash that is useless and it was just cleaning time. I don't think it doing something but i like to know what is going on in my computer.
Edit1: I dont find anything with internet history files and type is just written as just .exe

 

[Colif]

Download Process explorer and run it as admin (it comes from Microsoft so its safe). It will show more info than task manager and since you say they run randomly, you can perhaps wait for them to appear and see who owns them, and what process is actually using them

I normally use this for finding memory leaks but it might help here too.

the default view is tree structure meaning like your task manager screen, it shows what process is running each service & it just shows a lot more info than task manager does.
This page shows what all the colours and headings mean, link at bottom of it shows how to use it to find problems. You can right click headers and run an av scan from within the program.

 

[Ordan]

(i already have this thingy in pc btw but never actualy used it) I rather give you pick of it http://imgur.com/a/vZ67D tell if anything else is needed. weirdly even my father (freaking smart in computers) even dot find out what it is

 

[Colif]

right click it and select properties, does it tell you anything useful? even if it just tells you what user is running it. Have a look on the different tabs.

click on the processes header (just under the toolbar) and it swaps the view, is it under any services?

the PID doesn't lead me anywhere since most are assigned randomly

 

[Ordan]

No i don't find anything usefull and it is not under any services, it is process on its own.
I messed around with that litlle bit and i find out i can manualy enable or disable it

 

[Colif]

helpful unless it - whatever it is - randomly creates another one.

on task manager, go to details tab and sort by PID. Find 6312 and see if it helps identify whats going on... bet it just shows same description (I hope I am wrong). Can look on services tab and do same thing if its not there.

 

[Ordan]

file is called 3DD40743-8A7F-B0E8-D18D-8A46F42352DB.exe and yea it just show description 3DD40743-8A7F-B0E8-D18D-8A46F42352DB.exe and its not in services tab so i don't know, i propably let it exist and ignore

 

[Colif]

I would think if its innocent it would be labelled and yet you have run AV tests., Did you try malwarebyes?

Its made me curious now - i just don't know how to identify it. Seems odd it is running by itself in process explorer, with tree view running on mine, the only top lvl processes are windows itself (idle process, system, csrss (user services), winlogin, explorer, Nvidia. everything else is undser one of these.

 

[Ordan]

I now runed malwarebytes and it says Adware.DNSUnlocker WTF is this?

 

[Colif]

DNS Unlocker is an adware program, that displays pop-up ads and advertisements on web pages that you visit. The “Ads by DNS Unlocker” advertisements will be shown as boxes containing various coupons that are available, as underlined keywords, pop-up ads or advertising banners.

Advertising spam