?? random folder ??

H

HELP_ME

New Member
just found some suspicious folder located on my C drive. its labled as "187549af2b4ccb1011" and there is a text document inside it called "msxml4-KB927978-enu".

here is a sample of the text document: (its huge so i just took a part of it, if it helps)


=== Verbose logging started: 11/14/2006 15:27:47 Build type: SHIP UNICODE 3.01.4000.2435 Calling process: C:\WINDOWS\system32\msiexec.exe ===
MSI (c) (4C:48) [15:27:47:437]: Resetting cached policy values
MSI (c) (4C:48) [15:27:47:437]: Machine policy value 'Debug' is 0
MSI (c) (4C:48) [15:27:47:437]: ******* RunEngine:
******* Product: c:\187549af2b4ccb1011\msxml.msi
******* Action:
******* CommandLine: **********
MSI (c) (4C:48) [15:27:47:468]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (4C:48) [15:27:47:468]: Grabbed execution mutex.
MSI (c) (4C:48) [15:27:49:390]: Cloaking enabled.
MSI (c) (4C:48) [15:27:49:390]: Attempting to enable all disabled priveleges before calling Install on Server
MSI (c) (4C:48) [15:27:49:406]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (FC:F4) [15:27:49:671]: Grabbed execution mutex.
MSI (s) (FC:E4) [15:27:49:671]: Resetting cached policy values
MSI (s) (FC:E4) [15:27:49:671]: Machine policy value 'Debug' is 0
MSI (s) (FC:E4) [15:27:49:671]: ******* RunEngine:
******* Product: c:\187549af2b4ccb1011\msxml.msi
******* Action:
******* CommandLine: **********
MSI (s) (FC:E4) [15:27:49:937]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (FC:E4) [15:27:51:218]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'c:\187549af2b4ccb1011\msxml.msi' against software restriction policy
MSI (s) (FC:E4) [15:27:51:218]: SOFTWARE RESTRICTION POLICY: c:\187549af2b4ccb1011\msxml.msi has a digital signature
MSI (s) (FC:E4) [15:27:54:312]: SOFTWARE RESTRICTION POLICY: c:\187549af2b4ccb1011\msxml.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (FC:E4) [15:27:54:328]: End dialog not enabled
MSI (s) (FC:E4) [15:27:54:328]: Original package ==> c:\187549af2b4ccb1011\msxml.msi
MSI (s) (FC:E4) [15:27:54:328]: Package we're running from ==> c:\WINDOWS\Installer\206e7d.msi
MSI (s) (FC:E4) [15:27:54:421]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
MSI (s) (FC:E4) [15:27:54:421]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (FC:E4) [15:27:54:484]: MSCOREE not loaded loading copy from system32
MSI (s) (FC:E4) [15:27:54:484]: Machine policy value 'TransformsSecure' is 0
MSI (s) (FC:E4) [15:27:54:484]: User policy value 'TransformsAtSource' is 0
MSI (s) (FC:E4) [15:27:54:500]: Machine policy value 'DisablePatch' is 0
MSI (s) (FC:E4) [15:27:54:500]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (FC:E4) [15:27:54:500]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (FC:E4) [15:27:54:531]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (FC:E4) [15:27:54:546]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
MSI (s) (FC:E4) [15:27:54:546]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (FC:E4) [15:27:54:546]: Transforms are not secure.
MSI (s) (FC:E4) [15:27:54:546]: Command Line: REBOOT=ReallySuppress CURRENTDIRECTORY=c:\187549af2b4ccb1011 CLIENTUILEVEL=3 CLIENTPROCESSID=3660
MSI (s) (FC:E4) [15:27:54:546]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{2B27DCD9-53FA-4885-B6CD-698623819F4C}'.
MSI (s) (FC:E4) [15:27:54:546]: Product Code passed to Engine.Initialize: ''
MSI (s) (FC:E4) [15:27:54:546]: Product Code from property table before transforms: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'
MSI (s) (FC:E4) [15:27:54:546]: Product Code from property table after transforms: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'
MSI (s) (FC:E4) [15:27:54:546]: Product not registered: beginning first-time install
MSI (s) (FC:E4) [15:27:54:546]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (FC:E4) [15:27:54:546]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (FC:E4) [15:27:54:546]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (FC:E4) [15:27:54:593]: Adding new sources is allowed.
MSI (s) (FC:E4) [15:27:54:593]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (FC:E4) [15:27:54:593]: Package name extracted from package path: 'msxml.msi'
MSI (s) (FC:E4) [15:27:54:593]: Package to be registered: 'msxml.msi'
MSI (s) (FC:E4) [15:27:54:765]: Note: 1: 2729
MSI (s) (FC:E4) [15:27:54:937]: Note: 1: 2729




if anyone can tell wtf this is and if i should delete it it would be great thanks.
 
You must log in or register to reply here.
Top