Random folders appearing to my new hard drive

[nemo_fin]

So this kind of files appear daily onto my hard drive.

Inside the files there are file of random words, for example:

I have tried removing them, which didnt work because they kept appearing. Anyone has a solution how to stop these files from appearing onto my hard drive?

 

[eidairaman1]

So this kind of files appear daily onto my hard drive.

Inside the files there are file of random words, for example:

I have tried removing them, which didnt work because they kept appearing. Anyone has a solution how to stop these files from appearing onto my hard drive?

You need to find out what is creating them exactly, right click the folders and see what they are tied to.

 

[P4-630]

You need to find out what is creating them exactly, right click the folders and see what they are tied to.

Not sure if you can see that with a right-click.

 

[eidairaman1]

Not sure if you can see that with a right-click.

Not in 10?

I know Windows updates sometimes creates stuff...

 

[P4-630]

Not in 10?

I know Windows updates sometimes creates stuff...

Ok sorry, maybe that will work in W10 then, not sure, on windows 8.1 I'm on , it doesn't show that info.

 

[eidairaman1]

Ok sorry, maybe that will work in W10 then, not sure, on windows 8.1 I'm on , it doesn't show that info.

Charms menus, ugh, w8 i always would hit ctrl D lol

 

[nemo_fin]

Not really sure how to see i by right clicking..

 

[P4-630]

Charms menus, ugh, w8 i always would hit ctrl D lol

Ok I guess I misunderstood what you were trying to say.

 

[Solaris17]

right click > properties > security tab > list of owners

 

[nemo_fin]

Well this is what I see.
..

 

[kruk]

Download ProcessExplorer, https://technet.microsoft.com/en-us/sysinternals/processexplorer.aspx and run it.
Press Ctrl+F and enter your drive letter D:\. It will show you which processes are accessing the drive. Try to find the one that is accessing these strange folders.

 

[Jetster]

Back up software. Is it a Seagate drive and your using the backup software that comes with it ?

But if not any continuous back up software will create folders daily

 

[FordGT90Concept]

Download ProcessExplorer, https://technet.microsoft.com/en-us/sysinternals/processexplorer.aspx and run it.
Press Ctrl+F and enter your drive letter D:\. It will show you which processes are accessing the drive. Try to find the one that is accessing these strange folders.

This, I don't think what is happening here is good. Process Explorer Process Monitor will lead you straight to the culprit.

 

[nemo_fin]

I downloaded ProcessExplorer and I was unable to find those files/processes on my D: drive. There was all other things from my hard drive, but not those files.

 

[FordGT90Concept]

You're looking for file system reads/writes to D:

I would get Process Monitor monitoring the file system then delete the folders. Whatever is making them will then be forced to remake them and Process Monitor will catch that. Whatever process is creating the folders is the culprit.

Edit: You need Process Monitor, not Process Explorer:
https://technet.microsoft.com/en-US/sysinternals/processmonitor.aspx

 

[P4-630]

 

[BiggieShady]

I downloaded ProcessExplorer and I was unable to find those files/processes on my D: drive. There was all other things from my hard drive, but not those files.

In process explorer right click on columns > select columns > process disk tab > enable disk delta write bytes
Order the process list by disk delta write bytes columns and monitor which process springs on top when files and folders are being created.
If it's one of the svchost.exe instances then look at it's modules and threads in the lower pane to detect the culprit.

 

[FordGT90Concept]

1. Start Process Monitor
2. A window should pop up asking what to filter. Change the following:

Architecture -> Path
is -> begins with
[blank] -> D:​

3. Click Add, you should now have a green rule that says "Path begins with D: Include"
4. Click Apply.
5. Click OK.

You'll now see processes that are accessing the D: drive. Take note of them and post them here.

You can click the magnify lens to stop capturing.

That rule on my computer has a lot of Discord.exe and Origin.exe accesses. I think Discord is interfacing with Steam which is installed on that drive and Origin is also installed on that drive.


Edit: You'll probably have to delete the folders to invoke whatever process is creating them to create them again. The folder deletion will likely be carried out by explorer.exe and that is totally normal. It's what happens after that which is of interest.

 

[nemo_fin]

FordGT90Concept yes I did this. How do I take note of them?

BiggieShady I was unable to find the "colums"

 

[FordGT90Concept]

Just scroll through the list and look at the Process Name column (there will be a lot of repeats). Type the ones that stand out in your reply. You can right click on it to copy it if you would rather do that.

 

[JayCan73]

I got infected with adware that did something similar once, malwarebytes didn't catch it or get rid of it completely, it took adaware and spybot search and destroy to get rid of it, both have free versions, I had to delete the leftover folders manualy. It couldn't hurt to run them and see what they find.

 

[BiggieShady]

BiggieShady I was unable to find the "colums"

Ah, disregard, I was talking about different software from the same company

it took adaware and spybot search and destroy to get rid of it

also this ^^^ malwarebytes anti-malware + these two are the common cure

 

[nemo_fin]

Not sure how to copy etc but here is screenshot:

Properties:

 

[sneekypeet]

Not sure how to copy etc but here is screenshot:

Properties:

Images appear broken, can you host them here ( http://www.techpowerup.org/ ) and use the bottom link pasted into your post?

 

[nemo_fin]

I updated photos.