Hi there folks,
I've noticed some weird files suddenly started to pop out in the WindowsXP's C:/WINDOWS/Temp folder. They are named sig[number].tmp so it's like sig9.tmp sig10.tmp sig11.tmp ... sig1A.tmp sig2B.tmp sig2C.tmp and so on... most is 0 bytes but some have some data.
I've opened the ones with data with a text editor, the parts that are not encoded say something of this kind:
"This program cannot be run in DOS mode." " S _ V E R S I O N _ I N F O S t r i n g F i l e I n f o C o m p a n y N a m e M i c r o s o f t C o r p o r a
t i o n F i l e D e s c r i p t i o n I M A P I K e r n e l D r i v e r b ! F i l eV e r s i o n I n t e r n a l N a m e I M A P I . s y s .
L e g a l C o p y r i g h t © M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d .
O r i g i n a l F i l e n a m e I M
A P I . s y s P r o d u c t N a m e M i c r o s o f t ® W i n d o w s ® O p e r a t i n g S y s t e m P r o d u c t V e r s i o n D V a r F i l
e I n f o T r a n s l a t i o n "
They often mention the name " I M A P I ".
Any idea from where these files come from? I haven't installed any new software on my laptop. And the only software with autoupdate is Avast. I don't browse the web on this laptop so I don't get viruses here as well.
I suspect it might be Avast having some influence on WindowsXP. And they might be created by some part of WindowsXP but I'm not sure.
I haven't found any info about such files on the web.
Help me to find out what they are and why suddenly they are getting created.
Thanks in advance.
