I have Norton Internet Security, which keeps a record of the files downloaded to my computer. This one, $R3OBKCI.exe, appears to have downloaded after I downloaded ccleaner. By mistake I downloaded twice the ccleaner, so I put one of the two copies of ccleaner on the recycling bin. $R3OBKCI.exe appeared afterwards.
The path of the$R3OBKCI.exe file is c:\$RECYCLE.BIN\S-1-5-21-28636295-2780579325-3835481906-1001\$R3OBKCI.exe, but the file seems to disappear immediately after being downloaded, because when I search it in the computer (or the recycling bin) its’ gone (so I can’t test it in https://www.virustotal.com/)
This (I believe) is the url where I downloaded ccleaner from:
http://pcsupport.about.com/gi/o.htm?zi=1/XJ&zTi=1&sdn=pcsupport&cdn=compute&tm=6091&f=00&su=p284.13.342.ip_&tt=65&bt=5&bts=3&zu=http%3A//www.piriform.com/ccleaner/builds
When I compare the ccleaner downloaded from this url to the ccleaner file downloaded from piriform.com, they are exactly the same size (down to the bytes), same dates, and same identical Digital Signature information.
I have also run Malwarebytes and Norton Internet Security, without finding any threat.
I am at truly at a loss about this file and would welcome any comment.
Thank you.