Virus Thumbs.db

[Migration User]

My computer contain file named THUMBS.DB in each folder
if ideleted tht file it again restored in tht folder
what can be done?

[pete]

hi,
isolate the machine by removing from network .

update the system with the latest AV definition and also ensure system is patched to the latest available.

scan the system in safe mode

Is SEP isnatlled on system?

upload any suspicious file to Security response for analysis.

Cheers
Pete!

[Migration User]

Thumbs.db is not a virus its just that when you set your explorer as view as Thumbnails it creates a cache "Thumbs.db" for these thumb view images.This speeds up the display of images as the smaller images do not need to be recalculated every time the user views the folder.
 So even if you delete it it will be re created a it has to store a cache for thumbnail view.
Till now its only in Vista and later OS that it does not store thumbnail cache in Thumbs.db but in a centralised location
%homedrive%\Users\%username%\AppData\Local\Microsoft\Windows\Explorer 

It is a safe file and can be ignored.

[Migration User]

it's not a virus. Vikram explained correctly and it can be ignored.

[riva11]

Based on the Microsoft Knowledge Base article ( http://support.microsoft.com/kb/955926/en-us) , Thumbs.DB is a thumbnail cache created by Windows when browsing files using Windows Explorer.

In case you need to disable the Thumbs.db restoration:

1. In Explorer, go to Tools -> Folder Options or open the Folder Options icon in the Control Panel.
2. Choose the View tab, and turn off the Do not cache thumbnails option.
3. Click Ok.

You can also change this setting in the Registry:

1. Open the Registry Editor (regedit.exe).

2. Navigate to

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced.

3. Double-click the DisableThumbnailCache value, or go to Edit -> New -> DWORD value to create a new value by that name.

4. Enter 1 for its value.

[Migration User]

IF you choose to disable that, it takes a bit longer to open each folder in Exploder, depending on the view you choose and other settings.
On large folders, it can take several seconds more as Exploder goes and checks info on each and every file in that folder when you open it. The thumbs is a way to cache the image info for that file/files.
Choose wisely - performance vs being bugged by seeing a hidden file in each folder since you changed your view settings..............

[Migration User]

Just leave it as it is. It is the folder.htt and desktop.ini that you should watch out for.

[Migration User]

Thx all
for ur suggestions