Is Phantom Folder a Virus?

Viruses and worms
1

I have an empty folder that pops up out of nowhere on my desktop every once in a while. It’s a folder I deleted long long time ago. And I would delete it and empty my recycle bin everyone it pops up…But sometimes it just shows up again after start up. I don’t understand why this is happening or it’s a sign of a virus. Please shed some light. Thanks.

2

What is the name of the folder? If there is no name, right click it and look at the properties.

Let us know what you find.

3

Ok guys,
I have read the forum and I have Heuvth on my computer along with that anoying pop up next to my avast sphere.

Snowhite prompted me to post the main file as well as the extra, so they are attached.

I have tried running spybot which recognized the Heuvth.dll and when I try to remove it my system crashes.

PLEASE HELP!!!

4

Hi eroder,

Manual removal instructions:

VirusHeat Manual Detection

If you’ve discovered that VirusHeat has infected your PC, you must act quickly and take the proper steps to eliminating the infection. Note: The manual removal of any parasite is difficult.

To manually remove VirusHeat, follow these removal steps:

Step #1: Remove VirusHeat with Windows Add/Remove Programs utility.

Sometimes all it takes to get rid of spyware like VirusHeat is to remove the program using the Add/Remove Programs control panel in Windows.

  1. In Windows XP Professional, click on Start > Control Panel > Add/Remove Programs
  2. In Windows 2000 Professional / Windows ME / Windows 98, click on Start > Settings > Control Panel > Add/Remove Programs.
  3. In the list of programs, search for the software you want to remove. If you see a program you don’t recognize or don’t recall installing, look it up in Google to learn what it is.
  4. Select the questionable program and remove it with the Remove button.

Step #2: Kill VirusHeat using the Windows Task Manager

To kill a VirusHeat process that has infected your computer, you will need to use the Windows Task Manager to check by process, highlight the process in question, and then end the task. To do this:

  1. Press CTRL+ALT+DEL or CTRL+SHIFT+ESC on the keyboard.
  2. Click on Processes Tab to see all active tasks. For easier detection, left click the process under the heading Image Name.
  3. Find and kill the following VirusHeat process:
    VirusHeat 3.9.exe
  4. Once you’ve identified the VirusHeat process, press DEL on your keyboard or click End Process to kill it from your system.

Step #3: Use PsKill to Kill a Process

Sometimes a parasite can disable your Windows Task Manager so you can use pslist and pskill (a third party application by Mark Russinovich) to list and kill the unwanted processes.

  1. Download PsKill or PsList.

  2. Extract the program from the .Zip archive.

  3. Move pskill.exe to your C: drive.

  4. Open a command window and click Start > Run.

  5. Type cmd and click the OK button.

  6. In the command window, type C:pskill.exe and the name of the process you wish to kill, then press Enter. For example, if you wanted to kill the process for VirusHeat, you would type: C:pskill.exe VirusHeat.exe.
    If the file was successfully removed, PsKill will say “process VirusHeat.exe killed”.

  7. Find and Remove these VirusHeat files:
    heuvth.dll
    xskmoqx.dll
    lruvqvw.dll
    wbchha.dll
    txdkfh.dll
    VirusHeat 4.3.lnk
    Uninstall VirusHeat 4.3.lnk
    VirusHeat 4.3.url
    VirusHeat 4.3 Website.lnk
    VirusHeat 4.3
    eeioq.dll
    VirusHeat 3.9.lnk
    Uninstall VirusHeat 3.9.lnk
    VirusHeat 3.9.url
    VirusHeat 3.9 Website.lnk
    wuuawkz.dll
    iinqyl.dll
    VirusHeat 3.9.exe
    ArrayVirusHeat 3.9

    heuvth.dll
    xskmoqx.dll
    lruvqvw.dll
    wbchha.dll
    txdkfh.dll
    eeioq.dll
    wuuawkz.dll
    Arrayiinqyl.dll

polonus

5

why did that guy post under my thread?

anyway, Charley, I made the folder long time ago, so i named it. the name is “digital”. it’s completely empty. property?..sorry i deleted the folder a while ago, and it hasn’t come back out. but next it shows up, i will look it up.

this is what happened: I made the folder for school, it contained image files like .psd, .jpg, etc. and i moved it onto my flash drive to carry it around. when school was over, i organized my files. i moved the folder back onto my pc and emptied that folder. so the folder is useless at that point, naturally i deleted it, off my pc and off my flash drive. but then it just poped up outta nowhere sometimes. even after i deleted it again and again. i’m not sure if it’s harmful, but it’s just extremely weird. i want to know if anyone has similar situations or has any explanation for this.

thanks for reading.

6

Hi xd,

Sorry for posting further in the thread you originally started, but I thought to grant eroder an answer for a general problem for which other might need the info one day,

pol

7

Oh, don’t worry about it. It was just unexpected.

So, THAT folder popped out few hours ago when I was downloading something to my desktop. I guess that’s the pattern, it appears when I download.

the property is like any normal empty file folder with the path directly to my desktop and 0 for everything & read-only.

8

Just a suggestion, empty the recycle bin in every user account. There is this silly thing called recycled folder, which is all recycle bins.

9

Thanks for the suggestion. But I only have one account on my PC and I empty my trash almost every time I delete something.