Expert: Brian Benosky - 1/30/2009

Question
Our network drive at work has strange files appearing and our IT person says that she has no idea what they are and just isn't investigating the issue.  We have forefront that constantly scans all the PCs on the network, but I think someone may have gotten a virus.  In several of the folders on our network drive, new, empty folders keep appearing.  They usually have the name "15" but we have also seen "12" "13" and "14" too.  If we delete them, they will usually come back.  It's very strange.  Only a few of the folders on the network have them - they aren't everywhere.  But no one is creating them.  They're just appearing.  What can be causing this?  Is it a virus?  Thanks so much.

Answer
Hi Stephanie

It doesn't sound like a virus to me.  What could be the purpose of a virus that creates empty, numbered folders?  The fact that they come back after being deleted means a program is generating them, but I don't think it's a malicious one.  More likely, they are created by the server.  For what purpose, you would need to ask a network tech.  I'm more surprised your IT person isn't investigating this, just to be sure.  Forefront is not as secure as other client security systems, so it is entirely possible something has gotten through.  But malware is made to do harm.  The empty folder aren't playing havoc with the network, so chances are they are from a harmless source.  If you have any further questions, just let me know.

Brian