Unknown User Folder in "Documents and Settings"

JayV

I recently noticed that there is an unknown user folder in my documents and settings folder. The name of the folder is: cwmoaOyym

I'm running Win XP SP2

When I try to delete it I get an access denied message. If I reboot in safe mode I can delete it. But once I restart it reappears. I can delete the contents of the folder, but then it reappears with this name: cwmoaOyym.JOHNSLAPTOP

JOHNSLAPTOP is the name of my computer. I've scanned with NAV & AVG, but haven't found any viruses.

Any ideas??

aidan_walsh

It might be a randomly named user account for a background service.

Right click on My Computer, enter Management and check the Users sub-branch under the Local Users and Groups branch to see if there is a similarily named user registered, and what (if any) the users discription is.

Automatically installed user accounts should leave a discription so that Sys Admins will know what program they are related to.

Of course, you should also run the usual virus scans just in case, but I have yet to hear of a virus that leaves such footprints.

seamus

You can get a full list of user accounts on the machine by going to Start > Run > "compmgmt.msc"

expand System Tools > Local Users and Groups > Users

If the account was installed by a service (e.g. AV), then it should have a description beside it.

JayV

Thanks Aidan & Seamus. Checked Computer Management, but there is no description beside this user.

I was infected with gromozon/linkoptimizer about a month ago, but used the Prevx fixgrom tool to remove it. Its only since then that I've noticed this folder, but TBH I never took much notice of user folders before that. Don't know if they're related.

Stephen

You can have a look at the contents of that folder if you take ownership of it and then change its permissions so that your account has access to it (security tab in properties on XP pro, you'll probably have to reboot into safe mode for XP home).