EZStickyNotes folder appears out of nowhere in Documents folder!

A folder appeared in my documents folder named "EZStickyNotes" created on 4-8-09 and was just wondering what the heck is going on with that folder just appearing out of the blue!It is empty and seems harmless,but i just want to be extra sure!Any help will be appreciated regarding what this mysterious folder is and it's purpose.Seems pretty suspicious to me to say the least!Thank you.


In the meantime while i wait for any replies,I'll go run scans with my antivirus and antispyware programs and see if they detect anything.

DSmith148 said:

A folder appeared in my documents folder named "EZStickyNotes" created on 4-8-09 and was just wondering what the heck is going on with that folder just appearing out of the blue!It is empty and seems harmless,but i just want to be extra sure!Any help will be appreciated regarding what this mysterious folder is and it's purpose.Seems pretty suspicious to me to say the least!Thank you.


In the meantime while i wait for any replies,I'll go run scans with my antivirus and antispyware programs and see if they detect anything.

Click to expand...

You downloaded it through shareware. it was probably bundled.
http://www.soft32.com/download_7612.html

Windows Vista already has sidebar sticky notes.

Don't remember downloading that particular program.Must have been installed under the radar by another program i installed.Well at least i know it's not malicious.Just unwanted.How do i remove it?

DSmith148 said:

Don't remember downloading that particular program.Must have been installed under the radar by another program i installed.Well at least i know it's not malicious.Just unwanted.How do i remove it?

Click to expand...

try uninstall programs
start>control panel>Programs-Uninstall

I would also scan your pc here:Free ESET Online Antivirus Scanner

Can't find the ezstickynotes in the programs list.Can't remove it that way.I've run scans with avast antivirus,superantispyware,spybot s&d,and ad-aware with no problems found except a tracking cookie from "real"(realplayer).I'll try the eset online scan and see what that turns up.

As of now i have no clue what is going on.It doesn't seem serious,but who knows.Hopefully,it's nothing.If it is serious,none of my security software can detect it.

Also,i just tried as i typed the above reply to run the the eset online scan in firefox 3,but it uses active x so i tried it on IE 8,but the active x control didn't install.I tried again in compatibility view,but no dice.Don't know why.I'm using vista home premium 64bit,so that may be a problem or it only works on IE 7.Who knows.

DSmith148 said:

Can't find the ezstickynotes in the programs list.Can't remove it that way.I've run scans with avast antivirus,superantispyware,spybot s&d,and ad-aware with no problems found except a tracking cookie from "real"(realplayer).I'll try the eset online scan and see what that turns up.

As of now i have no clue what is going on.It doesn't seem serious,but who knows.Hopefully,it's nothing.If it is serious,none of my security software can detect it.

Also,i just tried as i typed the above reply to run the the eset online scan in firefox 3,but it uses active x so i tried it on IE 8,but the active x control didn't install.I tried again in compatibility view,but no dice.Don't know why.I'm using vista home premium 64bit,so that may be a problem or it only works on IE 7.Who knows.

Click to expand...

Yeah there is an IE8 issue with the online scanner.

Try a system restore to a point before the issues occured.
Also try this free program:
ESET SysInspector

ESET SysInspector is a free, state of the art diagnostic tool for Windows systems. It is also an integral part of ESET Smart Security 4 and ESET NOD32 Antivirus 4. It peers into your operating system and captures details such as running processes, registry content, startup items and network connections. Once a snapshot of the system is made, ESET SysInspector applies heuristics to assign a risk level for each object logged. Its intuitive graphical user interface enables the user to easily slice through the large volume of data using a slider to select objects of a particular color coded risk level for closer examination. ESET SysInspector is a convenient utility for the tool box of every IT expert and first responder.
Key Features:

• Ability to generate and save a detailed log to be used by an IT expert or uploaded to an online forum for diagnosis
• Option to exclude private, personal information from being saved in logs
• Integrated Anti-Stealth technology allows discovering hidden objects (e.g. rootkits) in MBR, registry entries, drivers, services and processes
• Ability to compare two existing logs for differences makes it easy to detect changes over time
• Log entries are assigned a color code risk level for easy filtering
• Intuitive hierarchical navigation of logs
• Fast and compact single file executable, ideal for first responders to run from a USB drive without lengthy installation

Don't have a restore point before the issue occurred.I cleared the restore points recently because too much HDD space was taken and i turned it off.

I've downloaded the eset sysinspector and will try that and see what happens.Right now i'm running the most recent mcafee stinger to see what it finds and will wait for it to finish before using the sysinspector.

ummm
You know these antivirus antimalware programs you are using arent very good right? Download NOD32 4 , or Avira free edition, and use Windows Defender (NOD32 is free for 30 days-If you suspect viruses/malware use it to check/clean your system and then remove it if you choose), Also Try Malwarebytes (for polymorphic malware),
http://www.vistax64.com/system-security/220286-nod32-avast-home-edition.html
http://www.vistax64.com/system-secu...-antimalware-program-currently-available.html
http://www.vistax64.com/system-security/172321-vista-sp1-antivirus-performance.html
http://www.vistax64.com/system-security/162362-antivirus-scanners-internet-security-tools.html

Don't know what's good or not being a noob at computer security.Everybody has an opinion as i've discovered from surfing various security website forums both independent and by interested parties with something to sell.If i switch someone will say i should of got this or that instead.I switch again someone will say that wasn't a great move go back or try this instead.Can't win at all....

Oh well....Ran eset sysinspector.Don't see anything wrong in most of the sections.Nothing related to ezstickynotes anyway.Or i don't recognize it.The hosts section has a bunch of red website addresses listed though.Could that be my problem?Stuff like www.007guard.com,www.008k.com,www.aliotalia.it,intervidd.com,etc. just to name a few.Must be 100+ listed.
What's hosts anyway?What do i do with these anyway?
Are they infecting my computer?I haven't noticed any problems at all.Thanks for your help.

DSmith148 said:

Don't know what's good or not being a noob at computer security.Everybody has an opinion as i've discovered from surfing various security website forums both independent and by interested parties with something to sell.If i switch someone will say i should of got this or that instead.I switch again someone will say that wasn't a great move go back or try this instead.Can't win at all....

Oh well....Ran eset sysinspector.Don't see anything wrong in most of the sections.Nothing related to ezstickynotes anyway.Or i don't recognize it.The hosts section has a bunch of red website addresses listed though.Could that be my problem?Stuff like www.007guard.com,www.008k.com,www.aliotalia.it,intervidd.com,etc. just to name a few.Must be 100+ listed.
What's hosts anyway?What do i do with these anyway?
Are they infecting my computer?I haven't noticed any problems at all.Thanks for your help.

Click to expand...

www.007guard.com is adware/spyware.

007guard - Google Search

Chances are you downloaded some malware in your shareware/torrents.

Updated: February 13, 2007 11:46:03 AM
Type: Adware
Risk Impact: High
File Names: getst.exe main.exe plugin.dll svchost.exe the007guard.ocx the007installer.exe 007guard.exe
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

Behavior
Adware.2Search monitors URLs visited by Internet Explorer and displays similar URLs to the user.

Note: Virus definitions dated December 6, 2006 or earlier may detect this threat as Adware.IMNames.

Symptoms
Files are detected as Adware.2Search

Transmission

This adware component must be manually installed or installed as a component of another program.

Do this:

Download and Install NOD32 4
Free Antivirus Download from ESET

Run Windows Defender (full scan)
Start> in search bar type defender>click program

run Malwarebytes (this will detect polymorphic malware)
Malwarebytes.org

note-Malwarebytes
This is a On demand Scanner only (real time detection mode disabled in free version)
This is a specialized tool specifically targeted at polymorphic Malware, and as such is not very effective against other malware threats. It is also meant to be run in conjuction with installed Antivirus- not as a standalone app

I've never downloaded any shareware on this computer which is brand new(got it about 2 weeks ago).I don't download torrents.I've only installed legitimate programs from known sources.So,what do i do to clear this junk listed by sysinspector under hosts from my computer?Is there a program that does this that i need to know of?Thanks you for your help.I'll check your reply in the morning as i'm on the verge of falling asleep at my computer right now,so i'm off to bed.

Just saw this before going to bed.Looks familiar.Yes possibly the exact list.I'll need to check the log i saved,but yes that looks like the list i got.I check your reply in the morning though as i'm really tired and need to get some rest.Thanks for your help!Look forward to finding out how to get rid of all this crap!

rive0108 said:

those sites you posted appear to be malware/Trojan infector/adware sites. I suspect You may have viruses. Does this list look familiar? these were on a system loaded with Viruses.
Spybot cant remove Smitfraud-c - Page 2 - Safer Networking Forums

Click to expand...

DSmith148 said:

I've never downloaded any shareware on this computer which is brand new(got it about 2 weeks ago).I don't download torrents.I've only installed legitimate programs from known sources.So,what do i do to clear this junk listed by sysinspector under hosts from my computer?Is there a program that does this that i need to know of?Thanks you for your help.I'll check your reply in the morning as i'm on the verge of falling asleep at my computer right now,so i'm off to bed.

Click to expand...

That list came from a system loaded with viruses and malware.

Do this:
Update all scanners upon Install and run scans.

Download and Install NOD32 4 (check and turn on all components at Install-run Smartscan)
Free Antivirus Download from ESET


Run Windows Defender (full scan-click Arrow next to "Scan")
Start> in search bar type defender>click program

Run Malwarebytes (this will detect polymorphic malware)
Malwarebytes.org

note-Malwarebytes
This is a On demand Scanner only (real time detection mode disabled in free version)
This is a specialized tool specifically targeted at polymorphic Malware, and as such is not very effective against other malware threats. It is also meant to be run in conjuction with installed Antivirus- not as a standalone app

I'll go do what you say to get rid of this junk.I'll come back if something goes wrong or i need additional help.Thanks for your help.Been most helpful.

replaced my hosts file with one from mvps hosts and eset sysinspector shows under critical files the hosts is green.So that bit is fixed.

Ran malwarebytes and it found Hijack.Display Properties and i removed it and rebooted.Ran malwarebytes again and it's gone.

I deleted ezstickynotes folder.Better not come back.I'm going to run some more scans with other programs i have installed as well as nod32 and see what else i find.This is taking a bit of time since i need to do a few other things as well and need time to install nod32.

Hello DSmith148,

Have you gat a copy of spybot search and destroy loaded by any chance and if so have you used the "Immunize" option.

Spybot immunizes a system by re-writing the hosts file - adding the URL's of known malware sites, and mapping them to hthe Localhost (127.0.0.1).

This works by redirecting any call "home" by malware back to the local PC thus stopping any outward calls.

The list you show looks very like this method of protection.

More details here .....

Using Spybot - Search & Destroy to remove Spyware from Your Computer

As for the EZStickyNotes Application details of this may be found here ....



Easy Sticky Note - Have you ever placed little sticky notes on your monitor to remind yourself of upcoming events or things you need to do? Easy Sticky Note lets you stick notes on your monitor electronically.

Hope this sheds some light

I did use spybot s & d immunize option.Might have been why i saw the list like rive0108's.My computer seems fine.There isn't any obvious problems.Just ezstickynotes folder that i removed and hasn't returned yet.Of course only a few hours have passed.I'd hate to do a complete reinstall until i'm sure there's a problem.Otherwise i'm wasting time and it might be unnecessary.

Since i used spybot s & d's immunize option,i think that's what i saw in the hosts file now that you mention it.Especially since i had zero computer issues such as slowdowns,restarting comp,bsod,unauthorized charges,etc.The ezstickynotes folder is something that looks to me to be a nuisance,but no threat that i'm aware of yet.I just wish i knew what program i installed that included it as part of it's install.Especially since it didn't mention it was going to be installed.

For now i'll hold off reinstalling windows.Something tells me that would be overkill under the circumstances.I need to backup files though and be prepared for a possible reinstall of windows if symptoms appear.Right now i'm chasing a phantom program that was surrepticiously installed,but that seems to be all.Don't want to become paranoid just yet.System restore is off,so no problem there.I use FX 3.0.8.I hear the opposite from lots of people regarding IE 7 or 8 regarding security.So for now i'll stick to good 'ol firefox.Not gonna get tossed around between the various camps.

I'm gonna check the spybot s&d immunization again and try it and see if hosts file is modified.Be right back!

Ran spybot s&d and use immunize option.It did create the list in the hosts file.Winpatrol asked me about the change and i accepted it after viewing the new hosts file.That "problem" is out of the way.So my only issue,if it is one,is ezstickynotes folder in my documents folder.If it returns that is since i deleted it.Even then i'm not sure if there is an issue or not.Maybe just paranoia because i'm a noob at computer security.I'll go backup my important files,but i think there isn't a problem other than the one thing found by malwarebytes assuming it wasn't a false positive.Being new at this i don't want to go over the top until i've made absolutely sure of a problem.I'm going to read up on computer security topics to ensure i'm informed enough to make the right decisions.As informed as a non-techie can ever be anyway.

I'll keep note of what rive0108 advices for future use.Thank you all that have replied.You've all been most helpful.

Hi DSmith148,

Glad to see you've sorted the one part anyway ,

You may want to have a read of this as it gives a lot of good ideas for surfing in the modern climate ....

Safe Hex - safe computing tips to defend against viruses, worms, trojans, and other malware.