Question about a file on my PC

Discussion in 'other software & services' started by gracie123, Nov 6, 2005.

Thread Status:
Not open for further replies.
  1. gracie123

    gracie123 Registered Member

    Joined:
    Aug 4, 2005
    Posts:
    397
    Hello Everyone,

    This sounded like the right place to post this question of mine. There is a file in my Local Disk (C:) and it is just called "data". It's 6 KB in size. The screenshot shows what it looks like. I've scanned it with NOD32 antivirus and Kaspersky Antivirus Personal and neither find it as being a threat but I am concerned about this file because I don't know what it could belong to.

    Anyone know possibly what it could belong to?

    Thanks,

    Gracie
     

    Attached Files:

  2. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,097
    Hi Gracie,

    Here are two things you can do to find out more about the file.
    Upload the file here: http://virusscan.jotti.org/ and it will be scanned by about a dozen or so scanners and give you the full assessment.

    From Start->Run, type in the command: regedit.exe
    Pull-down Edit, select Find and type in: C:\data
    Use the Find-Next function to scan until it reaches the end of the registry file.

    That might give you information on what program may have written the file or not. Do you remember what you were doing when you first noticed the file on your computer? It pretty much looks like a program wrote the file to disk, but that is only a swag on my part.

    You could create a new folder, move the file there and see if when you execute the program that created it, creates a new version of it on C:\, then compare the two files with a hex editor. Also, moving or renaming the file may cause a hiccup with the program looking for the file, so you may be able to generate a message to your desktop that may tell you more about which program created the file.

    -- Tom
     
  3. gracie123

    gracie123 Registered Member

    Joined:
    Aug 4, 2005
    Posts:
    397
    Hi Tom,

    Thanks for replying to me. Okay, here is what I show on my screen...

    (See screenshot)
     

    Attached Files:

  4. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,097
    Hi gracie123,

    See http://www.spywareinfoforum.com/articles/comdlg32/ for an explanation of Comdlg32 - it appears to be beneign, however, it might be a history trace of every file you have opened/run on your computer.

    Also on that web page there is a link to MRU Blaster here:
    https://www.wilderssecurity.com/mrublaster.html which goes to here:
    http://www.javacoolsoftware.com/mrublaster.html where you can download MRU-Blaster (freeware).

    Download/install and run MRU Blaster from the javacoolsoftware.com URL.

    That should take care of your problem, and if you ever notice the C:\data file again, run MRU Blaster again.

    Scan to the registry location after you have run MRU Blaster and check to see if the entry is still there - probably not would be my guess. And then check to see if the file in C:\data has also been deleted.

    Let us know your status when done.

    -- Tom
     
  5. gracie123

    gracie123 Registered Member

    Joined:
    Aug 4, 2005
    Posts:
    397
    Hi Tom,

    Very nice program! :)

    OK, I ran the program about three times and I did the search "C:\data" in regedit window and it did NOT find anything this time. However, the file is still there.. :doubt: .. still 6 KB in size.
     
  6. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Change the file name to data.txt open it in notepad and post it's contents. If you feel uncomfortable doing that....still change it to data.txt and upload it to a post as an attachment. Someone can then take a look at the file. Can't be much at 6KB :doubt:
     
  7. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,873
    Location:
    SW. Oklahoma
    Have you right clicked the file and clicked properties to see if it reveals anything about the file yet?
     
  8. gracie123

    gracie123 Registered Member

    Joined:
    Aug 4, 2005
    Posts:
    397
    Hi Bubba :),

    Okay here is what Notepad shows it to be... I know its alot :doubt: but hopefully it will be useful to someone :)

    const char * vRNaVb = "GK6rariBuXakKcpSFF1eFHR8UeCsCnPLcFGppVtrOE";
    const char * vMAVBBWpyt6 = "E9FO3NmuO4vx4AetgbeVKuDt88P3JQSJFjFTMXFE3OVG2FcbZAZnfu0DPdSSMdC3waPdnsB6KJWorLk7mpkBDcDDXBLhfeAjEUZRhFZ";
    const char * vc0JLbDNpTu = "bcrcYtCBdJCm21Drf4eOf7fdwUKUdUdbnRPFbKD3SZceCIrT5CV06dwZee2iiFFuerJQkcn8wNEf";
    const char * vyd6C64 = "6PdUcFaB1EGwFIAyeXuCFDVUEPb3cd7nlQcBiRV1Kby4bEE7RCdoHRZebRqMs8JpVFNoyyAhT8rd8JKE9CFayRVujl3wkS";
    const char * v9RhFe2GBQfFbL = "8SuKSO893PEKiv2KtnydoUf5";
    const char * v6ILnjxbR8k0 = "dCoK3jbuCeXgpqriVniMODuddio2";
    const char * vgvACF = "ae4WbdyXW93kLGn6purQlNftye9ll46map0J4c1tdUJlAlGR3Ae3eV5aDQXbcp5JBGfZWo43VO";
    const char * vBBoeA0O = "TGmf37a2ddwKmJVKhBCx31DbeCG2MmaEF3xB5b5ECIU1AG1AFsL4S5DpeRfaDcUGBfI67HoNFTNVkTuoau8adL";
    const char * vcSaeLB = "n7yDF2HTAxoC1ibirwvHUZdjjGBDJxyay0qXOxCbdBCEnw5kbLhMY0gfbokXaHqFeXv";
    const char * vQLbKxaNuao = "A6QGLjb9pb1k72SBxp0BrIcCSW";
    const char * vcG9uI = "TAa5gqAdjwxnZBLeIoEYPAif19PfulUABpAcJYtd5uJxpJwWXBokFJarSRD";
    const char * vsnw3sTLnek = "GULDeL8dJqIADFRb3aYbq5BBFNTsYvOSbNjWuZEK6MgeBGuAMukWg5ffkqxDVd5TrqtkR";
    const char * vUEKHUq = "x6nthqtd9bfWdBWNc0LM5AbbCKwgfduT7i7t3B";
    const char * vN4OflvyZkuDC2 = "3e2LLQIy5CSViUfN5floboegIYEG8kedTP0AQVKTu57qmOnFFUdtegTqpLIP17WehESjuyNf9a";
    const char * vGY92cAm6OsKn = "sMChGCbIEvK1cOccaCcfACRL1cJARGC1yGJCdUpcuPWDHjxUGBwn9wHBoFLjmAKEUm";
    const char * vvQ6qLEfg = "fdg5b7JAIfABtfjfE4gb6FA18wvfkhWdAd1YAiYbbRxLbEjdI3Qjk792EWEQcEZLbWfAGflE";
    const char * vbmRphdlL1 = "AJDeJKcohiCl6vfC0rOeQrbm5wfbJbaCjDlvIeuCa0q2MWsLJEfCXbX4sJackG";
    const char * vDAuExsKHqRU = "7eVSrY7feNcCsNIl7aFdbViLCM77hZEEMfKA1n5Dtt1BheaAVxjBxbllJUEGuaOwdUdQEqiLCOr";
    const char * v739cvkDE = "0vPJfp0PSOQbPfMl6NsMEnfVfrrKK8E4r8Xs";
    const char * vh0EUEf = "bobOTAmnrZJjDq8AHhZ7faCqcBpkb8F95pofDUkDGfHOU9cNRdfuoGbFhCBB7cInMB02pih";
    const char * vNUYRA = "AQbLoAuFbTcvrnmVbBobFbdCVaV20aKofR8JQ1BUDKrTyFYA4PQgXFeslOJWWIXT9aL9aGfOZWd3RHADdy9JTcelADBpsYNBGox9ffbddxc";
    const char * vlJFFk = "PhYNJharFdBSWGsJew2iew4aoQNF116SJE2BZ3U2kN";
    const char * vQ0GPldvNdok1b = "hW5xo4dyjsdfeaj2dBtDpY1V0LclcFy2KGUdxkApoEr";
    const char * vETlK = "OTAcwrCCkuLgdR8c3hyFqBTMUatfeTgWbTCuDsiJhBXrsc7DEilyD8ilO9fJhfGyG0YIbqG7RC7G5nKXPAXbNQwYDE2UD0G57QvetHZw";
    const char * vN0cEo08B5Yb = "rxIdbUPTTuHowANGI8CccZQpxtBd4Mkd";
    const char * vPbo7 = "9xf1BhP2yWYb9D0xF5AQAaML9E5E9q";
    const char * vDKGFIwk = "JSmU8aPAgGxB3pUnAsCcqbMRO0NUJn8d3uX4Ac3YhneE";
    const char * v5oIb = "ke9OYHwXAKwoSvE";
    const char * vrTSq = "tvTvjvd0KkExctDobqSNdEvF5SWNANrhiaSQSJdltcBf2qdPXD";
    const char * vlGGIoREj4VQ = "hJIGfwo6EAMaA6xfucFeDIXDckbbY3YfGEEE7CSnws1cD6DS6RV6LdDK6ZQNnW8tLi5C28lp0ewamDmHdT4l3eXXeW7E1EQBQe9eyR";
    const char * v6ETrH2d = "KFCXTPSHEFdBxFge9PkDMMV4MFvlhW6tGndATlhN8TdONoAAfdqXnYDs2ECghD6DFeWFE9eh3bZ";
    const char * vLavsc = "l9hpGcvG05fvomqP4gkPveGbhB95pfALZxebddpT3DBUUWGqyBE1Bn0wIRtaTCLdR8BuptPe3fDisLFAab5YFpcSIoCYw7Fe";
    const char * vqMATjExk = "2FFeTGBGWETb7UFP5qYHrjZ3NXHl9SMqTcjxDBvBZ3ecQvr7weVsdgqVK01qmQW9XoUeVmYJ0TEvT4K2fGvDJaHPk0Cegeh5eL2BlOAAnjVJ";
    const char * vtao3FDn96e = "fZIvCG1aNafNe5kU1jcdHJUEE12QEAaAwddaMGbw0YuiQZq3jADpvCcGTQ55nijcJF4dMa6DZGRcYfAuLg2DhjGd79ismf9j";
    const char * vr9eBtm = "Dc5KfJkXuQHJGk1OfFdIdAhgdjdE8mUxhsbJILeBUXCetqFWyDDtFkEBIZZDAAfqbbuBmAmiKFYZl";
    const char * vECikCl2UGcx = "mPHcRNt82BplWQme";
    const char * veCaEoeHOgFa = "gfBVL3TMJX05NgUuyl4cfdZuVbxwBXDeb2pkCBwLhkOABFLW8uaDKB5S3yrbmbVBeGhE5CCu1lhc";
    const char * v1Pd8Dx9y = "bdWf5a0vGI6IUYVBO";
    const char * vTH327Gs = "CeW5ue64RTOtn5vcqLqpjFiAKV2TCQeEAkuaJ31aEIu0dc";
    const char * vBkvYCBYUi0 = "Yiaktkaxb7W";
    const char * vCB6DpBPqNc0r = "kWacw9rteBacpeAD8aa2fa3j1F2BcdG3b4IL3r3IvD0OEBtqZ1O58SahtpAkIhXEAL";
    const char * vae2yt = "aPNynJyp6txqtFUbx9dihtwBFGDf2dkPhtZ3EssD5wwDdYAfFg58dRdPYmaha1rm9BaoVf1gPbsGXPEBjG";
    const char * vdqlBBUy = "AMZHc62KQEKW2FEyi6bf5UDAdiQdoRWJLHnJgO8jcLkuKGuayED0FH4If1D0UrCdgmCUgFjLeg45ebWFiedGcOcIKUdvYieIeBry3qE";
    const char * v1VeNF = "VGgHBpyuvJ4AHiT8Ff3Bmd3cqDGeBgGxonk3Xj1cjFWfbEC7pqOOySCECdoGbeELTFmB";
    const char * vAaKdlqCS = "hF2cNDrBYiKJtad6YEFjlEdm6uAPZhSZLRGaEmMeXCkWdNirlgSbrlfQtkchBBB0pDibp9b";
    const char * vVnAbHLpD = "bv5Be1HjBKMAj572uq0";
    const char * vE90xGSfr = "cOxTg8D6M3mxkkJud8xqDkDehEIADtc0BpITmoAXF5GmGZPCUEDenMfAdNWvCZmJdxrYYd";
    const char * vAAhp4JxCTi = "AvDBZGAh4OORoQWAVJZD976i2dNeDuY";
    const char * v548AbrVA85 = "eSGtkaCXrB3AAGkyqeX30beCdNaa17Xqr6A4I44hTpKJZXYDwUK0hxxbu1S5Kbl6RZ9bxP6vBuSLeRKALFWb0FsVd74DCUrGKb4fAtF8RF9S";
    const char * vMAsAtF = "2IfEElNTGuCa5tcNvQVATsdn2jejrTsLMnRCw2hG5TEyrpyYcwB0ICvgRFFpeufRJ3IMFDNmAOe52RF";
    const char * vFoNfUsk3d = "l0mPuxlf9cIMAFeFWMcfugFF7JqlkCAWV5GxkFkrOdcEyGAbtfmxnfadxfTDefA6cxBABwni0FJjaNhDA0fTU9MfAfmaPE";
    const char * vCOV0QaC = "jPOgCqkGlCbd3O";
    const char * vaLyobZ6 = "014SXF6xsD3k0NeANGbSNkTqRt1cfkCA7RFpmkmH";
    const char * vJFPJwOU = "idDDlvtngfIX8Oyc49wBREpAn0DdnZGaxIrnHp3";
    const char * vmKxhP = "5b37t7OlPCSJpPsdauTKSUacGn7sY8pTe05wGswfHlbiGQDhHrDKvxWRPVew932bEWfDrIuhatiWadrpHvq";
    const char * vuJviXORxvB = "MUEHAJPKPkc5VQQFVQdXLqG7neP63svcQamdrn8Z2gFAZfeL1Wk6mDd45P6OdvcXlA8u1";
    const char * vwdQBaZhhruQ = "ctTMWDG6a5go1kot5gFJsuJbtGcCY7TFhniALvpjRbBmBhKxDKVseoOoAemvMvalkfGh7";
    const char * vyLHUHW = "ETtAiaq64TFx3AEAV0quRbcUL7W3MNGyvZe4ERZuCcgYEQlY";
    const char * vYrqlfP7 = "JvNDDa7ctB2wBBXuEbc7AWee5GlTuvSVeCb1VEHKbTwMvAm5ecGGauCrhDGxI7dQqZcFb1ExHxN8FDObxTDbWRZec05B";
    const char * v4wYxymSWKbmK = "hZwKmUjjGbhCoPPxG5X2rabTqb0Aqn5AtZqweblxwahdcIwPNSGb4emACwRmHb7gpqDtCaoC";
    const int vTPLtyeCVxU3Fs = 7066;
    const int vtJac59RbBQwBZ = 26703;
    const int vhcnW = 27880;
    const int vnOdFaNG = 25792;
    const int vtCdCMFGK9 = 17178;
    const int v214k = 11820;
    const int vY1GFaJ = 19613;
    const int vvBLE = 5190;
    const int vC1AIG6LL4i = 23758;
    const int v5E4dO2RCFa5C = 15906;
    const int vCQkmu = 22218;
    const int vnbpH = 30498;
    const int vAlfbeDLh7AFn = 21178;
    const int vPpIerfbQ = 20910;
    const int vckRfPfG9 = 11214;
    const int vBK90YTUqHyuUM = 25108;
    const int v10xCJraEH0DU4 = 25506;
     
  9. gracie123

    gracie123 Registered Member

    Joined:
    Aug 4, 2005
    Posts:
    397
    Bigc, yes I have and heres what it shows (this is after I renamed it to ".txt")

    (See Screenshot)
     

    Attached Files:

Loading...
Thread Status:
Not open for further replies.