Odd .txt file showed up...

[supersamio]

Ok, so i got on the PC today, went to my c drive to look for something and i found this odd .txt file

It was called 'rapid.txt' and in it, had like, all the usernames and passwords of the sites i had logged into today... I didnt make this, so who/what did?

Im doing scans etc now, but any advice / info would be cool

 

[dk70]

Seems like Google end up with some strange things like USDownloader, Rapidshare captchas tricks by using OCR and what not. Rapid.txt could be a result of a program used to find premium accounts?

Would the file be located here C:\WINDOWS\system32\ocr\Rapid.txt ?

Have no idea really. Probably a very good idea to scan if you are ????

 

[supersamio]

The file was found in C directory, literally just right there C/rapid.txt

Whats this about rapidshare captchas by the way? I do have a rapidshare premium account etc... So this might be it.

 

[dk70]

I dont know, just my translation of bad Google searching.

Try "universal share downloader" or "C:\WINDOWS\system32\ocr\Rapid.txt"

You see a malware-removal process using Combofix here Forum > Dziwne rzeczy

Notice "C:\WINDOWS\system32\ocr\Rapid.txt" is among "deletions". You have a ocr folder under system32?

I would scan with Malwarebytes Anti-Malware, SuperAntispyware and even Spybot&Destroy. If you install S&D untick the resident stuff, teatimer and scriptblocking. Besides of course your AV - may be try an online scanner, like Microsofts or ESETs - anything else than what you have installed.

If nothing comes up I think you should contact a malware-removal forum - or post some more info here. Hijackthis, RSIT logs - the more the better.

Cryptload ring a bell? Check this google search http://www.google.dk/search?num=30&hl=en&client=firefox-a&rls=org.mozilla%3Aen-US%3Aofficial&hs=LFQ&q=cryptload+%22rapid.txt%22&btnG=Search