Wilders Security Forums  

Go Back   Wilders Security Forums > Software, Hardware and General Services > other software & services
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old April 23rd, 2012, 04:00 PM
syncmaster913n syncmaster913n is offline
Regular Poster
 
Join Date: Mar 2012
Posts: 153
Default C:\0pwrhPgWDO7...... windows 7. What's this?

I've noticed something which I'm completely unable to find any information on anywhere online.

I left my computer on for a few hours today with Moo0 FileMonitor enabled (I forgot to turn it off). For those who don't know, this software monitors all changes happening on your hard drive - new files created/deleted/written to etc., in every possible location on the hard drive.

When I got back and looked into the Moo0 log, I saw entries as shown in the picture below:

http://postimage.org/image/e2ukc7gyl/

Does anyone know what this is? These rename/delete/write operations were taking place at a rate of approximately 60 operations per second for the entire duration of my absence from my computer. Once I moved the mouse in my computer, these operations halted and there was no trace of these files on my HDD anymore.

I do not have hibernation or any other power management services turned on.

I'm running Windows 7 x64.
__________________
My setup
  #2  
Old April 24th, 2012, 05:39 AM
treehouse786's Avatar
treehouse786 treehouse786 is offline
Very Frequent Poster
 
Join Date: Jun 2010
Location: Lancashire
Posts: 1,047
Default Re: C:\0pwrhPgWDO7...... windows 7. What's this?

maybe the indexing service running?
__________________
Active@ Disk Image | 10 On-Demand Scanners

  #3  
Old April 24th, 2012, 07:20 AM
syncmaster913n syncmaster913n is offline
Regular Poster
 
Join Date: Mar 2012
Posts: 153
Default Re: C:\0pwrhPgWDO7...... windows 7. What's this?

No it's not that, I have the indexing service disabled (and almost every other service as well).
__________________
My setup
  #4  
Old April 25th, 2012, 05:58 PM
m00nbl00d m00nbl00d is offline
Incredibly Massive Poster
 
Join Date: Jan 2009
Posts: 6,454
Default Re: C:\0pwrhPgWDO7...... windows 7. What's this?

Can't you find out the process tied to those files? You could see Process Monitor/similar (I don't know if Moo0 FileMonitor works in a similar way.).

Keep it running for quite a while and see if you can spot anything.

-edit-

Have you tried verifying it with Event Viewer? Who knows if it may reveal something.
  #5  
Old April 25th, 2012, 06:37 PM
syncmaster913n syncmaster913n is offline
Regular Poster
 
Join Date: Mar 2012
Posts: 153
Default Re: C:\0pwrhPgWDO7...... windows 7. What's this?

Yes that's something I was going to attempt if no one over here knew the answer; I don't usually leave my computer on unattended, that was an extreme situation and I'd like to avoid having to do it for testing purposes; I had just DBANed and reinstalled my system afresh when this took place, so I wasn't worried about leaving it on. I will leave the computer on tonight with Moo0 and process monitor running.

I have event logging disabled.

It was interesting to me that google drew a complete blank when I searched for "0pwrhPgWDO7* windows"
__________________
My setup

Last edited by syncmaster913n : April 25th, 2012 at 06:43 PM.
 

Wilders Security Forums > Software, Hardware and General Services > other software & services « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 01:51 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums