Desktop Ini Trojan On Windows 10

Desktop Ini Trojan On Windows 10 Average ratng: 4,4/5 802 reviews
Active3 years, 4 months ago

Desktop.ini is not a virus.It is a Windows XP system file that stores information about customized folders. If you have customized the display of a folder in any way, such as changing its icon. This sets the read-only bit on the folder to indicate that the special behavior reserved for Desktop.ini should be enabled. You can also make a folder a system folder from the command line by using attrib +s FolderName. Create a Desktop.ini file for the folder. You should mark it as hidden and system to ensure that it is hidden from normal users. Since, desktop.ini is a hidden file by default, you have to enable visibility of hidden files. To do that, open File Explorer options straight from the search menu. Uncheck the “Hide protected operating system files” option. Is desktop.ini A Virus? By now, you must be knowing that it is not a virus. Desktop.ini is a native file. But sometimes, virus files are camouflaged as important utility files for Windows, so that novice users get confused with the actual file. The desktop.ini file is a hidden file used to store information about the arrangement of a Windows folder. Essentially, if the layout or settings for a folder are changed, a desktop.ini file is.

Re the Desktop.ini file. That is a System protected file and belongs to the Windows OS. To hide it open File Explorer then in the top ribbon select the View tab. Now on the right side click Options then Change Folder & Search Options; In the Folder Options dialog that opens select the View tab.

I did some reaches, and I know 'Desktop.ini' and 'Thumbs.db' files are hidden files for view customizations, and I know they should be safe files and I can delete them. Also, I know if I turn off 'show hidden files' they will be gone (but we know they are not really gone, they are just invisible).

However, I never saw it before, until I installed a fake application. After that, almost every single file (even the subfiles) in my computer contains these two files, especially 'Desktop.ini'. Worse, these two files try to copy themselves to any plugin device and media. For example, when I insert a CD into my CD-ROM the system says 'desktop.ini is ready to write into the CD,' and almost every flash drives contain these two files after plugged into my computer.

I tried to use anti-virus software to kill and remove these two files such as Kaspersky and Mcafee, but both of them reported that my computer was good after I did a whole drive scan. But I was sure that these two files were the virus, otherwise, it would not copy them self to other file and I should see them before I installed that fake application. So, decided to reinstall my entire OS system (format the internal hard drive and reinstall again).

Now, these files are gone even I turn on 'show hidden files.' However, few days ago I insert a CD again, and the system still says 'desktop.ini is ready to write into the CD,' (but flash drives have not contained these files again after I plugged in) . So, after I turn on 'show hidden files' and 'Hide protected operating system files', 'Desktop.ini' is showing up again (the 'Thumbs.db' is in some of the files but not every file). This time, they are not in my every single file but the majority files such as 'Desktop', 'Downloads,' and 'My Documents'

Sorry, I write too much description, but it is really driving me crazy and I really want to make sure these two files are the virus or not now? If they are, how can I get rid of them? My computer is Windows 10.

Mine is compatible with Windows 10.15063 (Creators Update)I hope you feature my theme. I also have many more themes just like this (win7tbar.deviantart.com/gallery). Mine also has a guide to get Windows 7 features for Windows 10, lots like Windows 7 Games from you. Best windows 7 themes.

Mr. 111Mr. 111

3 Answers

Are these two files virusses? No. They're a byproduct of whatever you installed.

Desktop.ini is a file that contains extra information for that specific folder, such as its view settings and sort etc.

Thumbs.db is a small database containing all the thumbnails generated when you use one of the thumbnail views (thumbnails, extra large icons, large icons, medium icons, etc)

It is my conclusion that the program you installed alters explorer to show this info. You need to specify more about this fake application that you installed, but it could be a toolbar that nests itself into your explorer.

LPChipLPChip
39.2k5 gold badges57 silver badges93 bronze badges

Look inside the files if you suspect a virus. Open them with a hexreader or the notepad (only) .
So far nothing you have indicated, as hard as it is to read, is abnormal.

Thumbs databases will be recreated as a cache for picture and video files thumbnails, and can be turned off computer wide , and cleaned out if desired, to assist your discovery.

Desktop.ini should contain only simple couple of lines of textlike data , defines special folders, could be found in roots of disks but not nessisarily.

If your into controlling and seeing everything, make sure your seeing all the extentions of files, so things like Desktop.ini.exe or Thumbs.db.exe would show up in a confusing way.

PsycogeekPsycogeek
7,5276 gold badges41 silver badges70 bronze badges

I suggest turning off Microsoft's useless Hide extensions of known file types. in Folder Options under View tab.

this way you'll be able to determine if the files are malicious or not, as follows :

Yandere simulator game free pc. if the file name is Desktop.ini.exe , or anything else except Desktop.ini , then it is not the System-supplied folder configurations file , but it's indeed a virus. same goes for thumbs.db ,

showing file extensions and hidden system files if you know what you're doing is really useful because most viruses are known to hide your actual folders on a system-level(ie: mark the folders as system files) and replace them with a folder-looking application that would open your desired folder AND perform its malicious code at the same time.

Desktop Ini Trojan On Windows 10 Free

Abood SyrAbood Syr

Not the answer you're looking for? Browse other questions tagged windows-10virusthumbs.dbdesktop.ini or ask your own question.

In Windows operatingsystems, there are several utility files which are created at the operatingsystem level. Usually these folders are hidden by default, because users are notexpected to fidget with those files. One such file is the desktop.ini file. Youmay have seen the file in every folder as well as on the desktop. Sometimes,users confuse them to be virus if they do not know about its utility. In thisarticle we shall talk about the desktop.ini file in Windows.

What is desktop.inifile?

Desktop.ini file is ahidden file, which is created by default in every folder of Windows OS as wellas on the desktop. The file stores information about the folder in which it isresting. For example, it keeps information on how the folder is displayed,which icon is being used, the localized name, how the folder is shared, etc. Aswe know, that in Windows OS, we can customize a folder in many ways. We canchange the folder icon, change the permissions of sharing, impose controls,etc. All these changes are reflected in the desktop.ini file. It is the defaultinitialization file format.

How to view thedesktop.ini file?

Desktop Ini Trojan On Windows 10 1

Since, desktop.ini is ahidden file by default, you have to enable visibility of hidden files. To dothat, open File Explorer options straight from the search menu. Uncheck the “Hideprotected operating system files” option.

Is desktop.ini A Virus?

By now, you must be knowingthat it is not a virus. Desktop.ini is a native file. But sometimes, virusfiles are camouflaged as important utility files for Windows, so that noviceusers get confused with the actual file. If you see that the file is visible,even when visibility of hidden files is turned off, then it can be a malware orvirus.

Mcafee On Windows 10

What If We Delete Thedesktop File?

Desktop Ini Trojan On Windows 10 Mac

If you delete adesktop.ini file, then the folder will be regenerated the next time youcustomize the folder. So, you cannot delete the desktop.ini file permanently.It will be automatically regenerated. Again, if you make any change to thefolder settings, the desktop.ini file will be recreated. So, always hide thefile, so that it is not accessed or changed by any other user.