First off, if this is in the wronge section, I apologize now.
Anyways, I’ve begun noticing a file that is spawned in my local settings temp folder, Fedpu16e.sys, although I don’t think it’s a virus/spyware/malware as it’s rather quite small (31kb from what I see). That and all my scans end up clean.
I’ve tried searching for this file online, but have had little luck. If anyone can provide some insight into what this file is/what might spawn it, it is appreciated.
I would suggest you scan it at this site http://virusscan.jotti.org/ and see what comes out.
If its just a temp file maybe dumping it would be the safe option anyway. It cant be a system file if its in a temp folder.
I’ve deleted the thing but it is respawned there. Strange thing is that the creation date reads 2002, and I haven’t seen it until recently. Or perhaps I just didn’t notice it.
edit: error in the scanning process, can’t upload.
“The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file”
Okay now the file doesn’t delete at all now.
Can I suggest you download this little program and let it generate a log of your system, this will allow a better insight for people to comment and help.
http://www.majorgeeks.com/download3155.html
paste the log into your next reply.
It may well be adware or spyware and not a VIRUS as such so maybe Spybot SSD may be more apropriate http://www.safer-networking.org/en/index.html
If it is in the chest, you have to extract/move the file out of the chest to be able to upload it to Jotti, etc. The virus chest is a protected area so nothing can access the virus.
The fact that there are no hits on google for the file name would also make me suspicious.
If avast hasn’t detected it, e.g.
If you are not getting a virus warning that you believe may be a new, undetected virus, then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces), or send from the chest.
Give a brief outline of the problem (possibly a link to this thread), the fact that you believe it to be a either a new or undetected virus and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.
If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode. Ewido Security Suite If using winXP. or a-Squared free if using win98/ME.
Update: the file has become deletable again and has been deleted.
Well here’s the thing, I don’t think it’s a virus as there haven’t been any problems, that and I’ve scanned with spybot, adaware, avast, ewido, and a2 and they show up negative.
I was just looking to see if anyone can give an insight into this particular file that shows up on the occassion in the temp.
We/I have come up empty also not hits on google is in itself suspicious.
Now that it is deletable, rather than delete it first add it to the avast chest so it can be send to Alwil or as I mentioned then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces) so they can examine it.
The fact that it doesn’t appear to be causing any problems doesn’t mean it isn’t a virus or other form of malware, the less attention a virus draws to itself the more likely it is to remain on your system. I can’t see there being any reason for a .sys file to you temp folder, especially repeatedly again that is suspicious.
Did you run those programs in safe mode as suggested ?
uh no and I kind of deleted the file already. I have some thoughts on what may spawn the thing, but if it shows up again I’ll have to sent. Thanks for the assisstance.
I have some thoughts on what may spawn the thing,
Care to share so we will know too.
Well it appears the file only spawns after I launch a game (temple of elemental evil). So, I’m going to say that the game spawns the file.
Thanks for letting us know, it may help someone in the future if they use the search function of the forums.