Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

AndyMoore

macrumors 6502
Original poster
Feb 8, 2008
307
4
Hi,

I ran ClamXav last night and it reported 3 files had been infected with HTML.Crypt-3 which I can't find any information about.

Anyway, I'm less worried about this then the fact that all 3 were in the ~/Documents/KeywordAnalysis folder which I've never paid much attention to before.
I've no idea what created it and all the files were created / modified on the same day and time.

There are 3 folders in the KeywordAnalysis folder -

Code:
drwxr-xr-x   5 andy  staff  170  7 Dec 17:04 c0591e95b79e0091c80ae2ca56627390
drwxr-xr-x   5 andy  staff  170  7 Dec 17:04 ab72f034f2043a3a1d60519e54a0903e
drwxr-xr-x  10 andy  staff  340  7 Dec 17:04 3846718d4dad490164823179494e4006

And 3 or more files in each folder -

Code:
-rw-r--r--  1 andy  staff  104585  7 Dec 17:04 2454431
-rw-r--r--  1 andy  staff  104586  7 Dec 17:04 2454429
-rw-r--r--  1 andy  staff  104585  7 Dec 17:04 2454411

The files them selves are just text HTML files, like whole webpages have been downloaded from sites like CNN and the BBC.
If I Get Info on one of the files, it contains a lot of news related keywords.

Does anyone know what has created it?
 

Attachments

  • Screen shot 2010-06-05 at 08.13.48.png
    Screen shot 2010-06-05 at 08.13.48.png
    61 KB · Views: 80
Thanks for that. You confirmed what I was getting from Google, I couldn't find any infection with that name so I wasn't sure.

Any ideas where the folder came from or what application created it?
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.