DIGIT-ARC read-only archive · snapshot: July 23, 2026

DIGIT-ARC / Software / Software Q&A

Redloft and desktop.ini Virus

3 posts · originally from https://geek.digit.in/community/threads/redloft-and-desktop-ini-virus.97198/

U
Udaya Maurya Original post #1
Sep 5, 2008 at 11:01 PM
I have just come to know that desktop.ini may be a virus-infected file if it has it's end-parameters all "negative". Is it true? For e.g. this is the content of my desktop.ini file:
[.ShellClassInfo]
InfoTip=@Shell32.dll,-12690

has an end parameter -ve, i.e. -12690. This happens when it is infected by some Redloft virus, otherwise by default it is a positive value. Is it true, because I'm a lot sure that my comp is not infected.

OS: Windows XP/Vista.
Ecko
Ecko #2
Sep 6, 2008 at 6:47 AM
Dude make a scan after updating ur AV
If there gonna be such VIrus they can't do much :D
U
Udaya Maurya #3
Sep 6, 2008 at 10:36 AM
Ecko said:
Dude make a scan after updating ur AV
If there gonna be such VIrus they can't do much :D
Click to expand...
Well that's not the case. My updated Kaspersky Antivirus couldn't detect it. That's not a virus-removal query, but an info-query. I want to know whether Redloft does so or not as I stated in my question.