• AppleCentral Network:
  • Tech Support
  • |
  • Open Source
  • |
  • Apple News
  • |
  • Register Domains
  • |
  • SSL Certificates
  • |
  • iPod Deals
  • |
  • Mac Deals
  • |
  • Mac Book Shelf
  • AppleCentral Home
  • MacTech Magazine
    • About MacTech in Print
    • Issue Table of Contents
    • Subscribe
    • Risk Free Sample
    • Back Issues
    • MacTech DVD
    • MacTech Archives
    • MacTech Print Archives
    • MacMod
    • MacTutor
    • FrameWorks
    • develop
  • MacNews.com
    • MacNews News
    • Blog
    • MacTech Reviews and KoolTools
    • Whitepapers, Screencasts, Videos and Books
    • News Scanner
    • Rumors Scanner
    • Documentation Scanner
  • Apple Expo
    • by Category
    • by Company
    • by Product
  • MacForge.net
  • Job Board
  • Advertising
    • Benefits of MacTech
    • Mechanicals and Submission
    • Dates and Deadlines
    • Submit Apple Expo Entry
  • User
    • Register for Ongoing Raffles
    • Register new user
    • Edit User Settings
    • Logout
  • Contact
    • Customer Service
    • Webmaster Feedback
    • Submit News or PR
    • Suggest an article
  • Connect Tools
    • MacTech Live Podcast
    • RSS Feeds
    • Twitter
You are not logged in. [Log In] AppleCentral » Forums » Mac » Windows and Virtualization » Trying to figure out what these files are ...
Register User    Forum List        Active Topics    FAQ
Topic Options
Hop to:
#499790 - 03/17/10 04:56 PM Trying to figure out what these files are ...
six_of_one Offline
Pool Bar

Registered: 04/19/02
Posts: 4474
Loc: Alexandria, VA
Hey hey!

So for work I run two MacBook Pros -- sometimes in Windows under BootCamp and sometimes in OSX. When I transfer stuff from the Windows environment using a jump drive, I keep getting these files showing up when I read the drive in OSX:



At first I thought it might be a virus, so I downloaded and ran AVG on the Windows side, and that found nothing. So I downloaded Kaspersky for the Mac and scanned the jump drive, and again, nothing. I did erase the jump drive a couple times with Disk Utility on the Mac, but the files show up again when I've used the stick in Windows -- so it's acting very virus-y in that it seems to replicate, but neither anti-virus package flagged the files ...

So does anybody have any idea what these files are for and if they're something I should worry about?

Thanks =)

Top
#499792 - 03/17/10 05:18 PM Re: Trying to figure out what these files are ... [Re: six_of_one]
John Rougeux Offline
Member # -1

Registered: 11/06/08
Posts: 6095
Loc: Louisville, KY
I wonder if they make the jump drive appear on your desktop in windows?

Otherwise, yeah, they would seem like a virus.

Top
#499805 - 03/17/10 06:22 PM Re: Trying to figure out what these files are ... [Re: six_of_one]
Reboot Online   content

Muhahahaha

Registered: 04/22/02
Posts: 15046
Loc: Columbus OH
It's a virus/trojan or whatever, Google y6cqb2is.exe.
_________________________
AppleCentral Trivia

MM-MCF Trivia

Call the Doctor

Top
#499808 - 03/17/10 06:32 PM Re: Trying to figure out what these files are ... [Re: Reboot]
MacBozo Offline
Nut Dood

Registered: 04/21/02
Posts: 17704
Loc: Pinellas Park, Florida
Do they make a condom for jump drives? laugh
_________________________

Top
#499809 - 03/17/10 06:44 PM Re: Trying to figure out what these files are ... [Re: MacBozo]
kjbrown88 Offline
n00b

Registered: 03/17/10
Posts: 1
Hi,
The autorun.inf is for when you use the jumpdrive in windows it auto starts the y2cqb2is.exe file, which is Malware and if you want to know how to get rid of it go here: http://hotzone-it.blogspot.com/2010/03/how-to-remove-y6cqb2isexe.html
Hope this helps!
kjbrown88

Top
#499827 - 03/17/10 08:02 PM Re: Trying to figure out what these files are ... [Re: kjbrown88]
Reboot Online   content

Muhahahaha

Registered: 04/22/02
Posts: 15046
Loc: Columbus OH
I saw that page, I questioned its usefulness though.

After having time to check I see it seems to be part of a brand new trojan actually, Troj/Taterf-G.

http://www.sophos.com/security/analyses/viruses-and-spyware/trojtaterfg.html
_________________________
AppleCentral Trivia

MM-MCF Trivia

Call the Doctor

Top
#499844 - 03/18/10 12:30 AM Re: Trying to figure out what these files are ... [Re: Reboot]
six_of_one Offline
Pool Bar

Registered: 04/19/02
Posts: 4474
Loc: Alexandria, VA
Oddly, I did google that and got no hits at all -- maybe it's *really* new ;-)

Thanks for the links though -- I'll take a gander =)

Top
#499848 - 03/18/10 12:59 AM Re: Trying to figure out what these files are ... [Re: six_of_one]
Reboot Online   content

Muhahahaha

Registered: 04/22/02
Posts: 15046
Loc: Columbus OH
I don't see any removal tool yet unless you know the geekery of Windows.

I'm sure there will be a fix shortly. How long has that been happening? If not long ago it has to something done recently. Damn Windows only pr0n viewers.

Another Windows formatted flash drive or HD from a different machine maybe?
_________________________
AppleCentral Trivia

MM-MCF Trivia

Call the Doctor

Top
#499850 - 03/18/10 01:02 AM Re: Trying to figure out what these files are ... [Re: Reboot]
six_of_one Offline
Pool Bar

Registered: 04/19/02
Posts: 4474
Loc: Alexandria, VA
Well, these are show machines, so exceedingly rarely are they connected to an internet connection lest something decide to update during a presentation. Most likely the bug came from a client's flash drive or something.

I tend to be a bit snobbish with my pr0n and only indulge using OSX ;-)

Top
#499851 - 03/18/10 01:03 AM Re: Trying to figure out what these files are ... [Re: six_of_one]
Reboot Online   content

Muhahahaha

Registered: 04/22/02
Posts: 15046
Loc: Columbus OH
Quote:
I tend to be a bit snobbish with my pr0n and only indulge using OSX ;-)
It plays much smoother.
_________________________
AppleCentral Trivia

MM-MCF Trivia

Call the Doctor

Top
Previous Topic
View All Topics Index
Next Topic

Tweet

Preview

Moderator:  Acumowchek, MacGizmo, Reboot 
Print Topic
Switch to Threaded Mode
Publications, Articles and Industry Discussion
   »MacTech/MacNews Article Discussions
   »Apple World
Marketplace
   »Deals and Special Offers
      »Expired Offers
   »Trading Warehouse
Mac
   »Hardware
   »Software
   »Servers, Security, and Networking
   »Programming, Web Dev & Scripting
   »Windows and Virtualization
   »Cloud and Online Services
Mobile Technologies
   »iPhone Apps, AppStore, and iTunes
   »iPad, iPhone, iPod and Apple TV Hardware
Mods and Hacks
   »General Mods
      »Techniques
      »Miscellaneous
      »Mod Logs
   »Laptop Mods
      »Case Mods
      »Hardware Mods
      »Misc. Mods
   »Desktop Mods
      »Case Mods
      »Hardware Mods
      »Misc. Mods
   »Peripheral Mods
      »iPod Mods
      »Misc Mods
   »Software Hacks & Mods
General Discussion
   »Site Feedback & Issues
   »Stan's Lounge
   »Soapbox
Now Software Support
   »Announcements
   »Now X
      »FAQs
      »Discussion
   »Now Up-to-Date & Contact
      »Community Help
      »Tips and tricks
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
Board Rules · Mark all read
Contact Us · AppleCentral · Top

MacTech Only Search:
Community Search:

 
 
 

 
 
 
 
 
  • SPREAD THE WORD:
  • Slashdot
  • Digg
  • Del.icio.us
  • Reddit
  • Newsvine
  • Generate a short URL for this page:



AppleCentral. www.applecentral.com
Main office: 805-494-9797
Xplain's use of MacNews, AppleCentral and AppleExpo are not affiliated with Apple, Inc. MacTech is a registered trademark of Xplain Corporation. AppleCentral, MacNews, Xplain, "The journal of Apple technology", Apple Expo, Explain It, MacDev, MacDev-1, THINK Reference, NetProfessional, MacTech Central, MacTech Domains, MacForge, and the MacTutorMan are trademarks or service marks of Xplain Corp. Sprocket is a registered trademark of eSprocket Corp. Other trademarks and copyrights appearing in this printing or software remain the property of their respective holders.
All contents are Copyright 1984-2010 by Xplain Corporation. All rights reserved. Theme designed by Icreon.
Generated in 0.080 seconds in which 0.046 seconds were spent on a total of 13 queries. Zlib compression enabled.
Powered by UBB.threads™ PHP Forum Software 7.5.8