Odd Files.Possible HiJack??

February 24, 2009 at 13:31:09
Specs: Windows XP Home SP3
Hi Everyone.
I noticed something quite odd yesterday & am hoping for some assistance.
I ran a SyncBack Backup & I noticed that it had skipped over 3 files, so I went to go look at them & first off, I have no clue what they are & dont recall seeing them before but the extremely odd thing is that they show a creation date of October 10, 1618 ????????? What is that????
The Files in Question are:
MF_C420.lfa
MR_C421.lfa
MF_C425.lfa
in C:\WINDOWS
I always run numurous Virus & Spyware scans & they nerver show anything although Malwarebytes,..yesterday,...came up with an Infected Registry key...
Name: Rogue.SpywareCease
Found In: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RkHit
Ref#15007

I dont know if this has anything to do with it...Im thinking not, but Im not much of a computer person, so Im hoping someone knows something out there.
I dont even recognize that lfa extention??
My system seems to be running fine other then a random IE flashplayer error occasionally.

Any Info would be so very appreciated.
Thanks All!!
Corey....LadyCore


See More: Odd Files.Possible HiJack??

Report •


#1
February 24, 2009 at 15:11:38
The lfa extension is used by animation programs such as incredimail.

The SpywareCease application has been declared as a rogue program by a lot of anti-spyware applications although that may be missleading as there are mixed reviews on this matter.

Because it is relatively new may be the reasons for the detections as rogue. I for one believe it is rogue as legitimate designers would not use sneaky methods to get one to look at their software.

Use malwarebytes to remove/disable the program and see if it does the job. If not there is a free version of superantispyware that should work.

Change Is Good
http://www.citizenlink.org/Stopligh...


Report •
Related Solutions


Ask Question