Share via

Mysterious Chinese file appears in desktop, but only according to Quick Access

Anonymous
2017-02-10T01:23:31+00:00

So I had quick access open while |I was looking for why some of my music wasn't playing (turns out it was the latest windows 10 update), clicked back and that Chinese named file was there. However, it's not actually in desktop as you can see to the right of the image provided. Also it seems to have no actual properties other than being a file. There's no created or modified date, no security details, no file type other than "File" and it has no file size. I'm currently on Windows 10, I have McAfee Security and Malwarebytes (which I scanned it with and it found no threats). I also tried to open it with notepad and it said "there is no file called [Chinese letters]. Create one now?" I suspect this is a virus but I'm not at all tech savy. Thanks for any help. 

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

7 answers

Sort by: Most helpful
  1. Anonymous
    2017-02-12T21:38:11+00:00

    The desktop.ini will be generated is there are some changes on your desktop. But no worries, this shouldn't harm your computer. This could be hidden by following the steps below:

    • Open up Windows Explorer (Windows key + E).
    • Go to View > Options.
    • Click the View tab.
    • make sure Hide protected operating system files is ticked.
    • Click Ok.

    As for that possible malware, do you have any Chinese made programs installed on your PC like a browser maybe? Such as Baidu Browser or UC browser? They are both Chinese as are some programs floating around. Like one of a community member that has the same issue, they have checked on their recent files folder through Quick Access and then ran each program that they remember running when the issue started. When they tried to fire up VLC media player and found the source of the issue. They were able to reach it by running the Microsoft Safety Scanner using Internet Explorer while in In Private Browsing. You can access In private browsing by pressing Ctrl + Shift + P, or from the New tab page. Internet Explorer will launch a new browser session that won;t keep any information about web pages you visit or searches you perform.

    If you would like to access the Microsoft Saftey Scanner, you can refer to the post of Hetti Arachchige V Aravinda through this link.

    As for the thread from the community members that experienced the same issue, you can use this link as a reference for your issue.

    Let us know how it goes.

    Regards.

    6 people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2017-02-10T15:29:09+00:00

    Update: I've ran a quick scan and found nothing. Currently doing a deep scan.

    4 people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2017-02-12T01:28:59+00:00

    Hi.

    Firstly, it does not appear elsewhere, only in quick access.

    Secondly, I can't actually delete it as I can't delete stuff accessed from Quick Access. The only think I can do is remove something from Quick Access, though that doesn't actually delete a file itself.

    Thirdly, prior to the issue I was just on forums which McAfee had deemed safe looking for answers about why I couldn't play some music. Earlier in the say I had downloaded a few MP3 files.

    EDIT: I have found them elsewhere by doing a search of the C: drive.

    There are two files which are internet shortcuts with the properties only showing they are shortcuts to the web address with the same title as the shortcut:

    file:///C:/Users/chris/Desktop/㩃啜敳獲捜牨獩䵜獵捩䑜晡⁴畐歮剜湡潤捁散獳䴠浥牯敩屳㄰䜠癩⁥楌敦䈠捡潴䴠獵捩眮慭

    Apparently I last visited this shortcut on the 10th of February, the same day I posted this on the forum, though this doesn't appear in my internet history. I will try deleting them and see what occurs.Edit 2: I have deleted them and the file still appears in quick access. However the 2 internet shortcuts appear to have disappeared from the C: drive search. However, two desktop.ini files have actually appeared on my desktop.See the image below for property details:I'm going to see what happens when I delete them

    2 people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2017-02-12T04:25:10+00:00

    OK I think my laptop may have a serious infection.

    Also, in Recent, I found a file dated modified on the 3rd of Febuary with the title ?LinkID=219472&clcid=0x409

    In properties it had:

    A size of 0 bytes

    It was a Shortcut (.lnk) File type

    And it was modified on the 10th of February and was created on the 9th of February.

    It had a target type and target of:

    http--go.microsoft.com-fwlink-LinkID=219472&clcid=0x409

    I also found a shortcut to the Quick Access from Recent called ::{679F85CB-0220-4080-B29B-5540CC05AAB6}, which stated in properties that it has a target location of the desktop

    Additionally, the music folder appears to have gone haywire.

    In addition to the normal music files, I have a bunch of files that are faded out somewhat with the Album art as separate files. Additionally this "desktop.ini" file appears to be in my main music folder along with another file called Thumbs.db. They also appear on my desktop, in my video folder, in documents, in dropbox and so on, though not all of my folders are affected by any means.

    In addition to this, There are also shaded out folders called My Music, My Videos and My Pictures in Document which I can't get to (I.e. access denied). However, if I go on My PC I can get to the usual Pictures, Videos, Documents and Music can be accessed as normal.

    A similar story occurs if I go My PC then C: drive. There are a bunch of folders I can't go into including Documents and Settings, Recovery and program Data (along with many others with titles I don't understand like  found.000 and Config.MSi).

    Similar stories are found in Users and in Users>Chris. Except that not all of the faded symbols are inaccessible. Users>All Users is accessible despite being a faded symbol. However, any faded folders within this are inaccessible.

    Strangely enough, all the folders I can't access seem to have the same modified date, 10/2/2016 (US dates).

    I'm going to reboot and see what occurs.

    1 person found this answer helpful.
    0 comments No comments
  5. Anonymous
    2017-02-11T05:43:58+00:00

    Hi,

    For us to effectively assist you, kindly provide us the information below:

    • Aside from Quick access, does that file shows in other folders such as My Documents, or any folders in the C: drive?
    • Have you tried deleting the file and see if it will return?
    • Have you made any changes, downloaded any files, or accessed any sites from the internet prior to this issue?

    Meanwhile, try to run your computer in safe mode andy see if it helps. You can see the steps in running your PC in safe mode through this link.

    Regards.

    1 person found this answer helpful.
    0 comments No comments