Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

Virus Thumbs.db

Created: 01 Jun 2009 • Updated: 25 Feb 2011 | 7 comments
This issue has been solved. See solution.

My computer contain file named THUMBS.DB in each folder
if ideleted tht file it again restored in tht folder
what can be done?

Comments 7 CommentsJump to latest comment

pete_4u2002's picture

hi,
isolate the machine by removing from network .

update the system with the latest AV definition and also ensure system is patched to the latest available.

scan the system in safe mode

Is SEP isnatlled on system?

upload any suspicious file to Security response for analysis.

Cheers
Pete!

Vikram Kumar-SAV to SEP's picture

Thumbs.db is not a virus its just that when you set your explorer as view as Thumbnails it creates a cache "Thumbs.db" for these thumb view images.This speeds up the display of images as the smaller images do not need to be recalculated every time the user views the folder.
 So even if you delete it it will be re created a it has to store a cache for thumbnail view.
Till now its only in Vista and later OS that it does not store thumbnail cache in Thumbs.db but in a centralised location
%homedrive%\Users\%username%\AppData\Local\Microsoft\Windows\Explorer 

It is a safe file and can be ignored.

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.

SOLUTION
Pravs's picture

it's not a virus. Vikram explained correctly and it can be ignored.

Just one person saying to me, “You’ve made my day!” makes my day.

riva11's picture

Based on the Microsoft Knowledge Base article ( http://support.microsoft.com/kb/955926/en-us) , Thumbs.DB is a thumbnail cache created by Windows when browsing files using Windows Explorer.

In case you need to disable the Thumbs.db restoration:

1. In Explorer, go to Tools -> Folder Options or open the Folder Options icon in the Control Panel.
2. Choose the View tab, and turn off the Do not cache thumbnails option.
3. Click Ok.

You can also change this setting in the Registry:

1. Open the Registry Editor (regedit.exe).

2. Navigate to

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced.

3. Double-click the DisableThumbnailCache value, or go to Edit -> New -> DWORD value to create a new value by that name.

4. Enter 1 for its value.

ShadowsPapa's picture

IF you choose to disable that, it takes a bit longer to open each folder in Exploder, depending on the view you choose and other settings.
On large folders, it can take several seconds more as Exploder goes and checks info on each and every file in that folder when you open it. The thumbs is a way to cache the image info for that file/files.
Choose wisely - performance vs being bugged by seeing a hidden file in each folder since you changed your view settings..............

mon_raralio's picture

Just leave it as it is. It is the folder.htt and desktop.ini that you should watch out for.

“Your most unhappy customers are your greatest source of learning.”