ZZZZZ* and !!!!!* - thousands of that kind of files on HDD

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

ZZZZZ* and !!!!!* - thousands of that kind of files on HDD

I have found thousands of files starting with ZZZZZ* and !!!!!* on my HDD. It seams to be related to Traps activity.

I'm unable to delete this files because Traps don't allow for that.

 

I checked my system with few antiviruses and nothing was found.

 

Google sugest that this is related with Traps Bug.

12 REPLIES 12

Cyber Elite
Cyber Elite

 

hi @Pawel_Kaczanowski

 

I recommend reaching out to support as they will be able to confirm the issue and help resolve it if it is related to an issue with Traps, and probably also help you troubleshoot if it is not related to traps

 

please keep us posted on your situation as it may help other people if they encounter this issue

Tom Piens
PANgurus - (co)managed services and consultancy

L7 Applicator

Yes, this is a Traps issue.  The files you see are dummy/decoy files related to the anti-Ransomware capabilities introduced in Traps v4.1.0.  Under normal conditions, you're not supposed to see these files.  TAC should be able to help you figure out what's not working properly.  

Hello,

 

I found those files in my computer when I perform on-demand scan with my AV, using CMD I couldn't find them, but using Power Shell that was possible, then I asked to support for that, the answer:

 

"those files are a tramp injected by paloalto traps, that works when is a new ransomware, the ransomware try to encrypt the files and traps catch it and block the ransomware."

 

So I put that concept on the run in effect, traps stop the action. Please look at the picture attached.

traps.PNG

Regards,

wtobar

L2 Linker

Files and folders with ZZZZZ* or !!!!!* may be displayed not only in PowerShell but also in programs that use file/folder dialog boxes.

I am experiencing it with some text editors.

In order not to display it, you need to add a rule to disable Anti-Ransomware Protection for the program in which it appears.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!