What is 'xerox' folder, 'nwwia' subfolder

M

McMahon

Found a folder named 'xerox' in my program files. Ther's a sub called
'nwwia'.

Does my new, XP Pro laptop ALREADY have a virus?

Yeeesh!
 
J

Jeff Conrad

Hi Steve,

You'll probably have better luck posting in the following newsgroup:

microsoft.public.security.virus

This newsgroup deals with using Microsoft Access, the database product.
Having said that, see if this link sounds like your system:

http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
l

(Watch out for possible line wrapping on that link)
Could be nothing actually, but worth looking.

Good luck,
Jeff Conrad
Bend, Oregon
 
M

McMahon

This newsgroup deals with using Microsoft Access, the database product.
Having said that, see if this link sounds like your system:

http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
l

(Watch out for possible line wrapping on that link)
Could be nothing actually, but worth looking.

On that site, I found:


When W32.Enemany.D@mm runs, it does the following:

It sends email to all contacts in the Microsoft Outlook Address Book. The
email message is as follows:

Subject: The New Xerox Update for our WinXP
Message:
Dear, Microsoft WinXP User, here are the last Update from Xerox Security
System, please install this file and going to www.microsoft.com and finished
this Update too.
Attachment: Xerox-Update.exe

It then copies itself as:

C:\Windows\Start Menu\Programs\StartUp\WinUpdate.exe
C:\Windows\System\Ati.scr
C:\Windows\Xerox-Update.exe

My anti-virus program support answered:

You are correct. You did not download anything that would create the
xerox\nwwia folder. The directory Program Files\xerox\nwwia is NOT created
by a virus. It is a default directory that is created when you install your
Windows XP operating system.

The virus name and information that was mentioned in your previous email is
not associated with the above directory.

So, don't worry about the empty 'xerox' and 'nwwia' folders. They're
supposed to be in Program Files.
 
J

Jeff Conrad

Good to hear it wasn't a virus, but you are wise to be cautious anyway!
Practice safe computing!

Jeff Conrad
Bend, Oregon
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top