extension of the file

[bach]

Hello everyone.
My English is not good, the following contents, from program translation, such as grammar, please forgive me


When using the 9.3.1 version, I saw many with the extension of the file, what is this?

..\wsusoffline\client\w61\glb\
X86 and x64 directory, totaling about 20，Like this

Windows6.1-KB2882822-x86.msu@ich_u_r_i=2ecd2b21db0fb0db5952193369e5b71e&ich_s_t_a_r_t=0&ich_e_n_d=0&ich_k_e_y=1445088904750663242450&ich_t_y_p_e=7785&ich_d_i_s_k_i_d=4&ich_s_e_q=186754805&ich_u_n_i_t=1

Windows6.1-KB2533623-x86.msu@ich_u_r_i=3b0782c755f7c3196a84b4981daaac51&ich_s_t_a_r_t=0&ich_e_n_d=0&ich_k_e_y=1445088904750663212429&ich_t_y_p_e=7785&ich_d_i_s_k_i_d=9&ich_s_e_q=186747871&ich_u_n_i_t=1

[aker]

Are you behind a proxy server?

[bach]

Hello aker，Thank you for your reply

Network layout, PC> Router> Internet, no proxy server
I run Wsusoffline in the virtual machine, , virtual machine NIC work in bridge mode
In addition, I found that when deleting extensions (@ich_u_r_i ...), then the file will be able to run
I intend to manual processing of these files, delete them extension, then install the patch to see if it can be identified and installed

[aker]

Please post the content of .\log\download.log in [code]-tags too.

[bach]

There is a large amount of information, I see (@ich_u_r_i) field, mark (No such file or directory), to give you trouble, thank you

Excerpt：

Code: Select all

2014/08/04 周一 14:18:04.67 - Info: Downloaded/validated 4 statically defined updates for win glb
../client/win/glb/capicom-kb931906-v2102_5891b5de8ce331dc998656e20f1ce0b795e88786.exe@ich_u_r_i=031b62ce23711180d195817de34b7941&ich_s_t_a_r_t=0&ich_e_n_d=0&ich_k_e_y=1445088904750663172469&ich_t_y_p_e=7164&ich_d_i_s_k_i_d=5&ich_s_e_q=168220686&ich_u_n_i_t=1: No such file or directory
Cannot write to `../client/win/glb/capicom-kb931906-v2102_5891b5de8ce331dc998656e20f1ce0b795e88786.exe@ich_u_r_i=031b62ce23711180d195817de34b7941&ich_s_t_a_r_t=0&ich_e_n_d=0&ich_k_e_y=1445088904750663172469&ich_t_y_p_e=7164&ich_d_i_s_k_i_d=5&ich_s_e_q=168220686&ich_u_n_i_t=1' (No such file or directory).
2014/08/04 周一 14:18:04.69 - Warning: Download of http://www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/capicom-kb931906-v2102_5891b5de8ce331dc998656e20f1ce0b795e88786.exe failed

[boco]

From a little web searching, it be a malware infection. Some Trojan DownloaderAgent manipulates links.