Over 1 million tech questions and answers.

Many new .dll files being created

Q: Many new .dll files being created

I found a similar problem reported on your site. I have deleted thousands of dll that were 93,184 bytes or 0 bytes in size. However, I need to get rid of what's creating them. This is my son's computer and it hasn't bee used in a few weeks but this worm filled up the C: drive. I ran Hijack This and I'll put the log in this post.

Thanks,

Al

Logfile of HijackThis v1.98.2
Scan saved at 4:44:50 PM, on 10/8/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE
C:\WINDOWS\SYSTEM\NETIS.EXE
C:\WINDOWS\ATLWJ32.EXE
C:\WINDOWS\SYSTEM\SYSOL.EXE
C:\WINDOWS\SYSTEM\APISQ32.EXE
C:\WINDOWS\SYSTEM\D3OS.EXE
C:\WINDOWS\SYSTEM\MSBL.EXE
C:\WINDOWS\ATLRM.EXE
C:\WINDOWS\SYSTEM\CRKH.EXE
C:\WINDOWS\SYSTEM\CROE.EXE
C:\WINDOWS\D3AD.EXE
C:\WINDOWS\CRMV32.EXE
C:\WINDOWS\APPLC32.EXE
C:\WINDOWS\SYSTEM\PTUDFAPP.EXE
C:\WINDOWS\SYSTEM\D3LI.EXE
C:\WINDOWS\JAVAUZ.EXE
C:\WINDOWS\IPUF32.EXE
C:\WINDOWS\ADDRS32.EXE
C:\WINDOWS\SYSTEM\IPQB32.EXE
C:\WINDOWS\SYSTEM\CRQZ.EXE
C:\WINDOWS\NTNB32.EXE
C:\WINDOWS\SYSTEM\MFCCI.EXE
C:\WINDOWS\SYSTEM\ATLWI.EXE
C:\WINDOWS\MSGI32.EXE
C:\WINDOWS\SYSTEM\MSPO.EXE
C:\WINDOWS\JAVAGN.EXE
C:\WINDOWS\SYSTEM\D3RO32.EXE
C:\WINDOWS\SYSTEM\APIDK32.EXE
C:\WINDOWS\ATLEN32.EXE
C:\WINDOWS\MFCOY.EXE
C:\WINDOWS\SYSTEM\NTTZ.EXE
C:\WINDOWS\SYSTEM\NETKN.EXE
C:\WINDOWS\SYSTEM\WINBP.EXE
C:\WINDOWS\SYSTEM\APIKB32.EXE
C:\WINDOWS\APPUD.EXE
C:\WINDOWS\SYSTEM\NETTG.EXE
C:\WINDOWS\SYSTEM\SYSLP.EXE
C:\WINDOWS\SYSTEM\IEXU32.EXE
C:\WINDOWS\SYSTEM\D3DZ32.EXE
C:\WINDOWS\SYSTEM\CRSO.EXE
C:\WINDOWS\SDKPB.EXE
C:\WINDOWS\SYSTEM\APPCQ.EXE
C:\WINDOWS\SYSPV32.EXE
C:\WINDOWS\SYSTEM\MSML32.EXE
C:\WINDOWS\MSAS32.EXE
C:\WINDOWS\SYSTEM\NTPQ.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSSTAT.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSHWIN32.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
C:\WINDOWS\SYSTEM\HPZTSB02.EXE
C:\PROGRAM FILES\CREATIVE\SBLIVE\AUDIOHQ\AHQTB.EXE
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE SHARED COMPONENTS\GUARDIAN\CMGRDIAN.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\WINAD CLIENT\WINAD.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE SHARED COMPONENTS\INSTANT UPDATER\RULAUNCH.EXE
C:\PROGRAM FILES\WINAD CLIENT\WINCLT.EXE
C:\PROGRAM FILES\AWS\WEATHERBUG\WEATHER.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\HIJACK THIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://216.65.101.250/sbms/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\lxrue.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\lxrue.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\lxrue.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\lxrue.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\lxrue.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\lxrue.dll/sp.html#29126
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\lxrue.dll/sp.html#29126
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {01C6CDF5-AA54-D057-9086-211EEA30E063} - C:\WINDOWS\ADDPH.DLL (file missing)
O3 - Toolbar: McAfee VirusScan - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSCSHELLEXTENSION.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb02.exe
O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [McAfee Guardian] "C:\Program Files\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe" /SU
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe C:\PROGRA~1\WILDTA~1\APPS\CDA\CDAENG~1.DLL,cdaEngineMain
O4 - HKLM\..\Run: [Winad Client] C:\PROGRAM FILES\WINAD CLIENT\WINAD.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [McAfeeVirusScanService] C:\Program Files\McAfee\McAfee VirusScan\AVSYNMGR.EXE
O4 - HKLM\..\RunServices: [MSBL.EXE] C:\WINDOWS\SYSTEM\MSBL.EXE
O4 - HKLM\..\RunServices: [ATLWJ32.EXE] C:\WINDOWS\ATLWJ32.EXE
O4 - HKLM\..\RunServices: [NETIS.EXE] C:\WINDOWS\SYSTEM\NETIS.EXE
O4 - HKLM\..\RunServices: [APISQ32.EXE] C:\WINDOWS\SYSTEM\APISQ32.EXE
O4 - HKLM\..\RunServices: [D3OS.EXE] C:\WINDOWS\SYSTEM\D3OS.EXE
O4 - HKLM\..\RunServices: [D3AD.EXE] C:\WINDOWS\D3AD.EXE
O4 - HKLM\..\RunServices: [CRKH.EXE] C:\WINDOWS\SYSTEM\CRKH.EXE
O4 - HKLM\..\RunServices: [SYSOL.EXE] C:\WINDOWS\SYSTEM\SYSOL.EXE
O4 - HKLM\..\RunServices: [ATLRM.EXE] C:\WINDOWS\ATLRM.EXE
O4 - HKLM\..\RunServices: [CROE.EXE] C:\WINDOWS\SYSTEM\CROE.EXE
O4 - HKLM\..\RunServices: [CRMV32.EXE] C:\WINDOWS\CRMV32.EXE
O4 - HKLM\..\RunServices: [APPLC32.EXE] C:\WINDOWS\APPLC32.EXE
O4 - HKLM\..\RunServices: [D3LI.EXE] C:\WINDOWS\SYSTEM\D3LI.EXE
O4 - HKLM\..\RunServices: [IPUF32.EXE] C:\WINDOWS\IPUF32.EXE
O4 - HKLM\..\RunServices: [JAVAUZ.EXE] C:\WINDOWS\JAVAUZ.EXE
O4 - HKLM\..\RunServices: [IPQB32.EXE] C:\WINDOWS\SYSTEM\IPQB32.EXE
O4 - HKLM\..\RunServices: [ADDRS32.EXE] C:\WINDOWS\ADDRS32.EXE
O4 - HKLM\..\RunServices: [CRQZ.EXE] C:\WINDOWS\SYSTEM\CRQZ.EXE
O4 - HKLM\..\RunServices: [MFCCI.EXE] C:\WINDOWS\SYSTEM\MFCCI.EXE
O4 - HKLM\..\RunServices: [ATLWI.EXE] C:\WINDOWS\SYSTEM\ATLWI.EXE
O4 - HKLM\..\RunServices: [NTNB32.EXE] C:\WINDOWS\NTNB32.EXE
O4 - HKLM\..\RunServices: [MSGI32.EXE] C:\WINDOWS\MSGI32.EXE
O4 - HKLM\..\RunServices: [MSPO.EXE] C:\WINDOWS\SYSTEM\MSPO.EXE
O4 - HKLM\..\RunServices: [JAVAGN.EXE] C:\WINDOWS\JAVAGN.EXE
O4 - HKLM\..\RunServices: [D3RO32.EXE] C:\WINDOWS\SYSTEM\D3RO32.EXE
O4 - HKLM\..\RunServices: [APIDK32.EXE] C:\WINDOWS\SYSTEM\APIDK32.EXE
O4 - HKLM\..\RunServices: [ATLEN32.EXE] C:\WINDOWS\ATLEN32.EXE
O4 - HKLM\..\RunServices: [MFCOY.EXE] C:\WINDOWS\MFCOY.EXE
O4 - HKLM\..\RunServices: [NTTZ.EXE] C:\WINDOWS\SYSTEM\NTTZ.EXE
O4 - HKLM\..\RunServices: [NETKN.EXE] C:\WINDOWS\SYSTEM\NETKN.EXE
O4 - HKLM\..\RunServices: [WINBP.EXE] C:\WINDOWS\SYSTEM\WINBP.EXE
O4 - HKLM\..\RunServices: [APIKB32.EXE] C:\WINDOWS\SYSTEM\APIKB32.EXE
O4 - HKLM\..\RunServices: [APPUD.EXE] C:\WINDOWS\APPUD.EXE
O4 - HKLM\..\RunServices: [NETTG.EXE] C:\WINDOWS\SYSTEM\NETTG.EXE
O4 - HKLM\..\RunServices: [SYSLP.EXE] C:\WINDOWS\SYSTEM\SYSLP.EXE
O4 - HKLM\..\RunServices: [IEXU32.EXE] C:\WINDOWS\SYSTEM\IEXU32.EXE
O4 - HKLM\..\RunServices: [SDKPB.EXE] C:\WINDOWS\SDKPB.EXE
O4 - HKLM\..\RunServices: [D3DZ32.EXE] C:\WINDOWS\SYSTEM\D3DZ32.EXE
O4 - HKLM\..\RunServices: [CRSO.EXE] C:\WINDOWS\SYSTEM\CRSO.EXE
O4 - HKLM\..\RunServices: [APPCQ.EXE] C:\WINDOWS\SYSTEM\APPCQ.EXE
O4 - HKLM\..\RunServices: [SYSPV32.EXE] C:\WINDOWS\SYSPV32.EXE
O4 - HKLM\..\RunServices: [MSML32.EXE] C:\WINDOWS\SYSTEM\MSML32.EXE
O4 - HKLM\..\RunServices: [MSAS32.EXE] C:\WINDOWS\MSAS32.EXE
O4 - HKLM\..\RunServices: [NTPQ.EXE] C:\WINDOWS\SYSTEM\NTPQ.EXE
O4 - HKLM\..\RunServices: [CRDW32.EXE] C:\WINDOWS\CRDW32.EXE
O4 - HKLM\..\RunServices: [SDKCQ32.EXE] C:\WINDOWS\SYSTEM\SDKCQ32.EXE
O4 - HKLM\..\RunServices: [NETNM.EXE] C:\WINDOWS\NETNM.EXE
O4 - HKLM\..\RunServices: [APPQM32.EXE] C:\WINDOWS\APPQM32.EXE
O4 - HKCU\..\Run: [McAfee.InstantUpdate.Monitor] "C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe" /STARTMONITOR
O4 - HKCU\..\Run: [Weather] C:\PROGRAM FILES\AWS\WEATHERBUG\WEATHER.EXE 1
O4 - Startup: PowerReg Scheduler.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM95\AIM.EXE
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (HKCU)
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.blazefind.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.flingstone.com
O15 - Trusted Zone: *.slotch.com
O15 - Trusted Zone: *.xxxtoolbar.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.searchbarcash.com
O16 - DPF: Payday FreeCell by pogo - http://freecell.pogo.com/applet-5.8.5.21/freecell/freecell-ob-assets.cab
O16 - DPF: {386A771C-E96A-421F-8BA7-32F1B706892F} (Installer Class) - http://www.xxxtoolbar.com/ist/softwares/v4.0/0006_regular.cab
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_f...3d36297b2b37:b70ac5aa8ec48e2e58a29296baabe1d6
O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - http://www.mt-download.com/MediaTicketsInstaller.cab
O18 - Protocol: icoo - {4A8DADD4-5A25-4D41-8599-CB7458766220} - C:\WINDOWS\MSOPT.DLL

RELEVANCY SCORE 200
Preferred Solution: Many new .dll files being created

I recommend downloading and running Outlook PST Repair. It's a PST repair tool that I've used it in the past to recover emails, contacts, tasks and notes from corrupt Outlook files that are damaged or inaccessible. Supports Outlook 2000, 2002, 2003, 2007, 2010 and 2013.

You can download it direct from this link http://goo.gl/1bjhSi. (This link will automatically start a download of Outlook PST Repair that you can save to your computer.)

A: Many new .dll files being created

Read other 6 answers
RELEVANCY SCORE 50.8

Hi,
I've got a situation here whereby .TMP files are appearing in network directories, and the files are going missing. The size of the TMP file matches the original file.
I'm trying to narrow down the issue, because I think there may be two problems here.  
1. Offline Files are enabled, to allow profile redirection.    It seems that this is also by default, is allowing Clinet Side Caching when there are network issues.  Does the original file (.doc for example)  get renamed
as a HR234.TMP for example when the Slow link detection sees slow performance? 
2.  If the above TMP file is created when there are network issues, should this resolve itself (sync itself back to the network) when performance improves?
Currently we are in a situation where we have a department that have files missing from many network shares, all the missing files seemlingly replaced with a .TMP file, so do we have to go round to every machine in the department, and manually
sync them to resolve this?  
 

A:TMP files created, files missing Offline files issue?

Hi,
 
After checking the Hotfixes and Security Updates included in Windows 7 and Windows Server 2008 R2 Service Pack 1 in the

Documentation for Windows 7 and Windows Server 2008 R2 Service Pack 1 (KB976932), I found the following hotfix is available:
 
Temporary files do not synchronize correctly to a non-DFS share on a server from a client computer
that is running Windows 7 or Windows Server 2008 R2
 
Regards,
 
Sabrina

 
TechNet Subscriber Support
in forum.

 
If you have any feedback on our support, please contact
[email protected] posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question.
This can be beneficial to other community members reading the thread.

Read other 7 answers
RELEVANCY SCORE 48.8

Symptoms
 
Last Saturday, I was surfing the net as usual. But then suddenly, my browser (IE 8) shutted itself down, twice.
 
After rebooting my machine, I realized my notepad files that I saved as UTF-8 encoding have become unreadable text or alien language text.
 
Later, I noticed the set of these 3 files on each of many of my folders :
1. DECRYPT_INSTRUCTION.html    
 DECRYPT_INSTRUCTION.HTML   8KB
  5 downloads
2. DECRYPT_INSTRUCTION.txt    
 DECRYPT_INSTRUCTION.TXT   4.04KB
  4 downloads
3. an internet shortcut named DECRYPT_INSTRUCTION (I right clicked to see its properties. Its URL is http://kpai7ycr7jxqkilp.totortoweb.com/d07a )
 
Many of my files that have the following extensions are broken :
1. txt
2. pdf
3. MP3
4. flv
5. JPEG
 
A few days ago, before I came to post here, I downloaded Kaspersky Virus Removal Tool and scanned my laptop. The result said something like, there are some files that have password protection. I myself don't know how to create a password to protect my file. So, who did that?
 
Another symptom is, sometimes my laptop freezes and when I reboot it, I got the blue screen.
 
 
 
 
 
My laptop
 
Dell Inspiron 1525
Windows Vista Home Premium
2007 Microsoft Coporation
Service Pack 2
Intel Pentium Dual CPU T2390 @ 1.86GHz 1.87 GHz
2.0&... Read more

A:DECRYPT_INSTRUCTION files have been automatically created & my files are damaged

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/545279 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 16 answers
RELEVANCY SCORE 48

Hi,
I already searched through alot of threads but could not find anyone having the exact same issue.
We have a Windows Server 2008 R2 Enterprise with SP1 which is hosting a DFS Namespace.
A customer of us works with his notebook (Win 7 SP 1) and has enabled Offline Files for his personal folder
in the DFS path. The initial synchronisation seemed to work and no sync errors are reported in Sync Center.

Now the problem is, everytime he opens a document from his DFS path and saves it, a .tmp file gets
created there and doesnt disappear. Not even after reboot. As far as i know it happens with Word, Excel and PDF documents.

If I log on to the server and browse to his path, i cannot see those .tmp files, only he can see it.
If I try to delete those files from his notebook I get an error "File is no longer located in... Verify the itemīs location and try again".
What I have tried so far:
If Offline Files get disabled, those .tmp files disappear. On activating they are visible again.
Tried "Delete temporary files" from Sync Center -> Manage Offline Files -> Disk Usage. Nothing happened.
I tried to repair Office, didnīt help.
The only Group Policy Settings we have relating to Offline Files are "Synchronize all offline files before logging off"
and "Allow or Disallow use of the Offline Files Feature" which is enabled.

Would be nice if someone can get me into the right direction to fix this issue.
If more information ... Read more

Read other answers
RELEVANCY SCORE 45.6

Because I don't want Flash Player Utilities running at startup I have renamed the 2 files that run at startup:

C:\Windows\System32\Macrome\FlashUtil_ActiveX.dll
and
C:\Windows\System32\Macromed\FlashUJtil_ActiveX.exe

Somehow they got created again. The ones I renamed are still there but somehow the original files are back in the folder again.

I want this disabled!
There are no references to this in any of the 'Run' registry entries and I don't see a Service for this either.
Anyone have an idea how to prevent this annoying piece of garbage from recurring?

James

A:FlashUtil Files Keep Getting Created.

FYI, I have them running as well. The run at startup may be required for the Flash program to function properly when you open your browser. I also see no easy way to disable it; and, if disabled, Flash might not function properly work when you opened your browser and surfed to a site that requires Flash. With that said, if you don't like it running at start-up, and you don't need Flash, why not just uninstall it? Good luck.

Read other 18 answers
RELEVANCY SCORE 45.6

Recently re-installed WXP after Computer Crash.

Copied "My Documents" folder from thumb drive to the computer
.
Noticed several folders in "My Documents" were missing so thought I didn't back up to the thumb drive often enough so figured they were lost in the crash.

Wasl looking for a file and was unsure in which folder it might be located so did a "search" and found it in "My Documents". Went back to the "My Documents" folder and it wasn't there so did another search. This is what I discovered:

I went into Windows Explorer and found "My Documents"

I went into "My Computer" and then the "C" drive and found Documents and Settings, Gary, My Documents in the tree

Further down the tree I found the "C" Drive again and found Documents and Settings, Gary's, My Documents.

It appears there are 3 "My Documents" on my computer and of those down the tree had the missing folders I was looking for.

This is strange because after the computer crash I inserted the WXP Install disk and it wiped out all of my files and programs before installing. When the install was complete I had to install of my programs, printer, scanner etc. I then transfered the "My Documents" folder from the thumb drive to my computer. Since all of the programs were wiped clean, where did the 3 versions of "My Documents" come from.

Under Windows Explorer there is:
"My Documen... Read more

A:How Are These Duplicate Files Created?

Someone accidentally/intentionally moved the contents while browsing around your computer, creating your phenomenon. Could have simply not formatted during installation of windows, so windows worked it's magic and retained the references to the documents.
 

Read other 1 answers
RELEVANCY SCORE 45.6

In my %windir%\system32\ folder is something creating a lot of TMP files (MBs, GBs). It looks like winlogon process creates them. Is it virus, is it corrupted Windows XP SP2? Thank You!
 

Read other answers
RELEVANCY SCORE 45.6

I am getting BSODs on many occasions. I am looking for a way of fixing the issue. I wanted to create a thread. I read the instructions and I wanted to do something with the dump files that would normally be created when I got a BSOD. Whatever setting it was on, it never made any. I double checked the settings, but there is nothing in the folder. If I can find the solution to this, I can work on finding the solution for the many BSODs I am getting.

A:No dump files are created.

Follow the steps in this tutorial Dump Files - Configure Windows to Create on BSOD

Are you using CCleaner at all?

Read other 7 answers
RELEVANCY SCORE 45.6

Hi,
I sticked my usb flash in an infected pc, then in my pc in order to scan it. i run mcafee virusscan enterprise 8.5. when i sticked the usb in my pc, mcafee blocked some trojans from executing. then the files in usb become hidden. i managed to unhide them with a dos command. i made a full scan with mcafee and malwarebytes including the usb drive, but it found only 1 or 2 infections. in my usb there are a lot of exe files created with the names of my current files that mcafee doesnt recognize them as viruses. if i leave the usb sticked, the on access scan feature of mcafee continues to block trojans infinitly that come from the local settings/temp folder. also the access protection log file of mcafee shows: "Common Standard Protectionrevent common programs from running files from the Temp folder" and "Anti-virus Standard Protectionrevent mass mailing worms from sending mail" continously. now what should i do? I have to clean my pc and my usb to in the same time, because they can infect one another. please help me. thank you.
 

A:.exe files with the same name created and some other problems

Read other 16 answers
RELEVANCY SCORE 45.6

Hello there bleepingcomputer.com, I'm Edoardo and I've been infected by some strange piece of malware. It attached to most of my dll files, exe files, even htm and html files! Not sure about the rest. And when playing certain games, for example, call of duty 4: Modern Warfare, it would create a "srv" copy of the exe that was being ran; for instance, I was using "iw3mp.exe", and when ran, it would generate "iw3mpSrv.exe", which MalwareBytes would detect as "Malware.Packer" and then delete. So what I did was, after many attempts with MalwareBytes (which would detect just a couple of files), was trying out DrWeb CureIt software, and it found a lot of infected files, I just clicked on "Neutralize" and rebooted the system. I'm not sure if the infection is gone though. I'd like technical help if possible.
 
FRST log:
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-04-2015 01
Ran by Edo (administrator) on HAF-X on 20-04-2015 15:00:39
Running from D:\Download
Loaded Profiles: Edo (Available profiles: Edo)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Italiano (Italia)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will... Read more

A:"srv" version of .exe files being created

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/573803 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 26 answers
RELEVANCY SCORE 45.6

have noticed some strange folders on my shared harddrive

None of these folders cannot be deleted.
One of them named:
"9b2529692949a1396c06b567"
has subfolders
1025
1028
1029
.....
2070
3076
3082

Every of these folders contains files:
"eula.rtf"
and
"HotFixInstallerUI.dll"
along with others.

how do you delete them??

i also have a %SystemDrive% folder on my desktop, which i also want to delete

thanks for your assistance

A:strange files being created

Randomly named alpha/numeric folders are commonly created and used temporarily when updating Windows components. They are also used by some software programs (i.e. Microsoft Office, Microsoft Visual Studio, etc) during update or installation to hold setup files (.inf, .cat, .gpd, .ppd and .dlls) and other information. These files and folders are usually automatically removed as part of the update process. However, its not uncommon for them not to be cleaned up and left behind after the update has been applied. When that occurs they usually can be manually deleted at any time. For example, when you run the MS Malicious Software Removal Tool (MSRT), a temporary folder with random alpha/numeric characters (i.e. C\79f142e5e9e574d23954) will be created on your C:\ drive that contains mrt.exe, mrtstub.exe and a file named $shtdwn$.req. Since external drives can be a hiding place for malicious files, MSRT will scan them too and you may find a left over folder in that location. Most of the time after performing a scan and you click finish or cancel, the folder will automatically be removed right away or after the next restart of the computer. If not, the folder and its contents can be manually deleted without an adverse effect on the computer.Installation of security updates from Microsoft for MSMXL packages and hotfixes also create temporary randomly alpha/numeric named folders that contain sub-folders like amd64, i386. The creation date should match the installa... Read more

Read other 1 answers
RELEVANCY SCORE 45.6

I upgraded to Win10/Office 2016 from Win7/Office 2013. At the same time, I changed my web mail (Gmail) from POP3 to IMAP. Since the upgrade, Outlook creates *.ost data files instead of *.pst data files.

As far as I am able to determine, *.ost files are a product of or are otherwise related to an Exchange server, with which I am not associated., i.e., I am using my home custom PC. I also log in to Win10 with a local (vs. Microsoft) account. In Outlook, Work Offline in Send/Receive preferences is grayed out and red Xed; the Outlook icon in the task bar is also red Xed.

All of my searches about this issue relate it to Outlook behavior with an Exchange server. Not being on an Exchange server, I can find no solutions. When I first set up Win10, I logged on using a MS account but no longer do so. Nevertheless, I am wondering if I am tied to MS servers.

My question: however I accomplish it, how do I tweak Outlook to create *.pst data files instead of the *.ost data files.

Thanks for your consideration,

Monk

A:Outlook *.ost files being created instead of *.pst

Hi Monk,
*.pst files are for POP3 accounts, whilst *.ost files are for IMAP accounts. Nothing to worry about - everything's fine.

Read other answers
RELEVANCY SCORE 45.6

I installed UNIX Services for Windows. Then I installed a UNIX application. Then I wanted to remove both.
I tried to removed the application but some of the files would not let me delete them.
I then uninstalled UNIX Services for Windows which worked fine but left behind it's folder 'C:SFU' because a few application folders are there and are write protected.
I installed them under UNIX Services for Windows and now I can't delete them.

Any back doors or UTILS to get rid of them? I tried KILLBOX but it could not do it.

Thanks for any ideas!
 

A:Can't delete files after I created them.

Kenk_1998 said:

I installed UNIX Services for Windows. Then I installed a UNIX application. Then I wanted to remove both.
I tried to removed the application but some of the files would not let me delete them.
I then uninstalled UNIX Services for Windows which worked fine but left behind it's folder 'C:SFU' because a few application folders are there and are write protected.
I installed them under UNIX Services for Windows and now I can't delete them.

Any back doors or UTILS to get rid of them? I tried KILLBOX but it could not do it.

Thanks for any ideas!Click to expand...
Not sure if you installed a program but her is directions on uninstalling a program manually.

Uninstall Programs Manually
Just because Windows XP has the Add/Remove Programs feature it doesn't mean your application will appear in the list. Furthermore, even if it does appear, it's no guarantee that the uninstall feature will work. When you run across one of these situations the items listed below will help in getting rid of the application. Be aware that these steps may not remove everything associated with the application and can impact other applications on the computer. Have a backup or restore point and use caution.

Find the directory for the application and delete all the files in the directory. Delete the directory.

Open regedit and navigate to HKEY_LOCAL_MACHINE\SOFTWARE and find the folder for the application. Delete the folder.

Open regedit and navigate to HK... Read more

Read other 1 answers
RELEVANCY SCORE 45.6

Hi, I?m a college student and found someone running something on my machine. I'm not sure exactly what it was, I deleted it right once I saw him running it but it did do some weird things. It tried running a lsass.exe from my temp folder, the user temp folder. I deleted it from my temp folder but also some randomly named exe files that were created right then as well as some .tmp files. They were not running at the time so I deleted them. There was an auto start entry for the bad lsass.exe in the registry so I quickly deleted that. I don't see any signs of stuff left but I'm worried there is possibly a rootkit or something left and I am not knowledgeable enough to determine if it?s clean. I'm trying to clean it instead of reformatting just because schools about to start again and I'm hoping that we can fix it. Thanks.

I'm running win 7 64 bit ultimate with mse and windows firewall. I also have windows 7 firewall control plus installed. Mse picked off two things, from the history they were Trojan:Win32/Nebuler.J and PWS:Win32/Tacsasi.A and both were in my user appdata local temp folder, the same folder that lsass.exe was in. One thing I noticed was that lsass.exe was a 32 bit exe from the task manager so maybe since I am 64 bit that?s why my system didn't seem to be too badly hit?

I can't run gmer for any worth, it throws an error and when I looked it up it seemed to be that the program is not fully compatible with 64 bit windows yet.

Here is the dds



DDS (Ver_... Read more

Read other answers
RELEVANCY SCORE 45.6

Hi Folks,I noticed recently that I have some unknown files in my Windows>Temp folder. These files (8 in total) are named like so......cteng_1_1_131267855225.datEach one has a date stamp with yesterdays date - 6th March 2010I did google to see if I could find out anything about them but came up only with 'Incredimail' - this is not a programme I had heard of or use!I'd be most grateful if someone could take a look at my logs and keep me right.btw - I'm not sure that GMER worked properly for me - most of the options were greyed out and I was unable to either select or de-select a number of them - however I attach what I fear may just be a blank gmer generated file!Thanks!......DDS (Ver_09-12-01.01) - NTFSX64 Run by Sinclair at 8:25:11.59 on 07/03/2010Internet Explorer: 8.0.6001.18882Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.6133.4313 [GMT 0:00]SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k secsvcsC:\Windows\system32\atiesrxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestri... Read more

A:Unknown files being created

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEnetsvcsmsconfigsafebootminimalsafebootnetworkactivexdrivers32%systemroot%�... Read more

Read other 8 answers
RELEVANCY SCORE 45.6

I just removed the modify permissions from a folder to some users,so that they cannot delete or rename the files or subfolders.But now the prolem is that when ever that particular users make any changes in the files specially exel files, lot of temporary files are created in the folder which is very irritating.Can i get rid of it instead of deleting it every now and then.
 

A:Temp files created

Is the set of protected files static?
Maybe set the permissions so that users are unable to create new files too?
 

Read other 1 answers
RELEVANCY SCORE 45.6

I have two systems, one with vista ultimate 32bit and the other vista 64bit home premium.

I have decided to run Kaspersky internet security + Malwarebytes (scanner only) + SUPERantispyware (scanner only) on both

Maybe Truealarm force field when a 64bit version comes out, not going to run it now though.

My question is that I have read that these programs create files or something that are not erased on their own. Is this true and if so what is the best program to take care of this?

Thanks!

-Kevin

Read other answers
RELEVANCY SCORE 45.2

EVERYTIME I PUT A FILE ON THE DESKTOP it creates two of the same file when you go to delete them it will delete one and tell you the other one is not accessable. It's only when i'm logged into the main user on the computer. PLease help this is driving me nuts. thanks

A:Please Help! Double Files Created On Desktop

This requires altering the registry. Be sure to read how to back up and restore the registry in case something goes wrong.Duplicate Icons in the Desktop - Windows XPHow to backup the Windows XP Registry?How to back up, edit, and restore the registry in Windows XP and Windows Server 2003

Read other 3 answers
RELEVANCY SCORE 45.2

I have built some media files (photos, songs, videos) on a separate 1.5TB internal drive formatted in NTFS. Some were built using Windows XP Pro. I then added a SSD and installed Windows 8.1 Pro on the same machine and added some more files to the media drive using Win 8.1. I waited awhile until I built a media center and then tried to modify some of my files on the media drive and find:





When I select Continue I get:


With Security tab I get:



When I click Advanced I get:



It appears the control of this folder and subfolders is with the Administrator of XP Pro OS. I still have the hard drive the XP Pro was installed on but I can?t recently boot to it ? I get a blue screen to do a CHK DSK and a STOP: OXOOOOOO24 + some more numbers in ( ).

I?ve tried takeown and get:




HELP!!!! I?ve been working on this for days and I?m at a lost on what to do to gain access. I?ve read and tried the tutorials in this forum and others but to no avail.
Can anyone help me????
Thanks!!!!

A:Can't take ownership of files created in Windows XP Pro

Maybe this can be of help: Take Ownership - Add to Context Menu in Windows 8

Read other 1 answers
RELEVANCY SCORE 45.2

When I transferred from my old Windows98 systyem to XP Pro SP2 I zipped much data onto a DVD but now, altho I can see the files listed in explorer I cannot access them
Or in fact use the disk at all so cant copy them or anything.
It keeps telling me to insert disk or cannot read from source file or disk!
Does anyone know how I can repair the disk please? The is a great deal of information that I thort I had safely backed up but cannot access.
Your guidance would be appreciated thank you.
 

Read other answers
RELEVANCY SCORE 45.2

A shortcut with the name of my USB drive (pendrive or memory card ) is created, along with its memory in gb with the name, inside the usb itself . And all its contents are transfered in a hidden folder with no name. A desktop.ini and autorun.ini (both hidden ) is also created. Whenever i insert it even after formating them the same case repeats. Can anyone please tell me if its a virus and if it is a virus then is there any specific name of the virus and how to remove it. And can it even spread in all my internal hard disk drives. Any help would be great.

A:USB Shortcut created and all files transfered to it.

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
STEP 1
 
 
Please download and run the following tool and follow the prompts to disable Autorun.
 
 
STEP 2
 
 
Next please download and install MCShield 2
Go to Scanner tab and put a checkbox beside BulletProof then hit Apply.
Now plug-in your external hdd and wait to be scanned and repaired.
A log file should appear when this is done. Please post the content of the log in your next reply.
 
 
Regards,
Georgi

Read other 28 answers
RELEVANCY SCORE 45.2

I have an external hdd here with old folders from a XP machine in it.

When I try to access these, I get the error message

"Word cannot open the document user does not have access priviledges"

I have applied all the "take ownership" of a file or folder steps but no joy.

IF I move the folders from the external drive into the "My Documents" folder of the Vista sytem - they open up FINE?

Any ideas?
 

A:Old files created with XP cannot be viewed by Vista

Read other 7 answers
RELEVANCY SCORE 45.2

I created backup CDs, over the years, of all of my digital photos, digital music, and general interests of mine. Now that I have Internet Explorer 7 installed on my desktop and my laptop, every CD I try to read has this same problem - all of the folders and each of the files in the folder, have a blue (with gold band) icon in the bottom lefthand corner of each. Why is this happening?

As little a problem as this may seem, it is bugging the heck out of me!! I'd like to know why this is happening and what can I do to change it. Any help will be greatly appreciated.
 

Read other answers
RELEVANCY SCORE 45.2

Good day,

I read your t3597 response and it isn't working for me. Here is what I have done:

o Backed up the contents of the "Outlook Express" folder
o Rebuilt the computer (fomat & reinstall of XP)
o Followed your insstructions

I nuked the folders.dbx file from this backup and did the import. OE tells me that no messages can be found in the folder from which I am importing. I am running OE6 and the files were created with OE6.

Your assistance is greatly appreciated.

-Charles Boudreau
 

A:Problems importing OE6 files created with OE6

Read other 7 answers
RELEVANCY SCORE 45.2

Hi...wonder if these 2 probs are related...i reinstalled XP on a single 30gb drive and have been reinstalling stuff etc...temp files for installation are now being made on my raid0 array!...dunno why...my array is 2x maxtor 80gb's..i wonder if it has to do with the fact that I tried to install thew XP on the array, but kept gettin a BSOD right before desktop so I never did get XP working on the array tho the files are all loaded...is my system now confused between the old C: drive and the C: drive created when i tried to make the array install of XP? (i unplugged the single old C: drive with XP and tried to install XP on the array...the partition which was thus named C
Thanks
 

Read other answers
RELEVANCY SCORE 45.2

Hi,

About a week ago, I found 759 new files in a folder. These files seem to have no extension and are given (in a detailed folder view) as type 'file'. Each is 0 KBs in size. Each name consists of 8 characters. Nearly all names end in 'A8900' i.e. one of the file names is '62AA8900' another is 'D2AA8900' another '1E9A8900'. This folder is normally used to hold PDF files which are created from excel worksheets by an Excel Macro.

The Computer the files are found on is a laptop Compaq 615 running Windows 7 home basic. It is connected by wireless network to a Desktop which is running XP. There are three other laptops which also connect to the network. The folder is stored on a shared hard drive (which can be read from/written to from any of the laptops or the desktop) in the Desktop, but as this specific folder is normally used only by the 1 laptop, I assume that the files were created from there.

The laptop which normally uses this folder is one of three identical laptops all purchased at the same time, and all with similar software installed. This laptop always seems run slower, browse the internet slower, and boot slower than the other laptops. It runs AVG free regularly, which always comes up clean.

It is possible that the files were accidentally created in the folder by someone downloading something/ installing something into the wrong place, but this is unlikely.

Could someone advise if anything can be seen in the Hija... Read more

A:hundreds of files self?created in folder

Hi and Welcome,

Please do the following:

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

Disable any script blocking protection
Double click dds.pif to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.
NEXT


Download GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable.

Double click the exe file.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.

Click the image to enlarge it

In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.

Save it where you can easily find it, such as your desktop, and attach it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries
 

Read other 1 answers
RELEVANCY SCORE 45.2

Each time I connect to the internet temp files start created in c:\windows\temp of the type mx_1B21.tmp, mx_1A02.tmp etc. This is happening for 2 days now and my upload speed is messed up. I have scanned with nod32 antivirus, panda active scan, ad-aware se personal and spybot S&D. Nothing was found. I also deleted manual my temp files and then used PCMesh internet cleanup but the temp files continue to be created.
This is my hijackThis log


Logfile of HijackThis v1.99.1
Scan saved at 3:50:16 μμ, on 4/3/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\HijackThis\HijackT... Read more

A:temp files constantly created

everything ok now. I had my pc turned off for some hours and when I turned it on I had a nice blue screen. Then I rebooted and everything works perfect. Don't know how. One of the many mysteries in the world of pc's.

Read other 2 answers
RELEVANCY SCORE 45.2

I use an internal data drive for most of my data. In win 8 the drive is E and I've created several
folders and populated them with data. I then rebooted my machine to a Win 7 pro system and added
a folder and some data to the E drive. No issues.

When I go back to Win 8 i can't see the folder and files I created on the E drive from Win 7.

I haven't gone back to Win 7 yet to see if they are there, but I would be willing to bet that I will
see them in Win 7.

What is the issue here and how do I resolve?

Thanks

A:files created on win 7 data drive not seen on win 8

Can you see the drive at all? Make sure it is mounted. Did you encrypt the folders under Windows 7 at any time? THAT would be a problem.

Read other 6 answers
RELEVANCY SCORE 45.2

Is there any way to modify the "created" and "modified" dates assigned to a .exe file that's on your hard drive? Or, to make the program think it's creation date was today?
 

A:Created & Modified Dates of Files

dont know if this is the answer, but what happens to the date if you delete it then restore it from the recycle bin back to where it lives?
 

Read other 3 answers
RELEVANCY SCORE 45.2

I have a folder on my PC called C:\Backup. I thought that I created this folder myself and I wanted to delete it, but when I tried it wouldn't let me and said I require permission to make changes. The folder appeared to be empty but when I went to properties it said there were 214 files and 40 folders within. So I made the protected operating system files visible and this is what I found inside:

_Restore
Recycled
RECYCLER
System Volume Information
Thumbs

I don't know how these files/folders got there. Do they belong there? Can I delete them? Should they be in another location? I am confused as to why there are there, since I thought I created this folder, but maybe I am mistaken.

I am using Windows 7 Home Edition 64 bit.

Thanks

A:Why are these Recycler files in a folder I created?

  
Quote: Originally Posted by bulaman


I have a folder on my PC called C:\Backup. I thought that I created this folder myself and I wanted to delete it, but when I tried it wouldn't let me and said I require permission to make changes. The folder appeared to be empty but when I went to properties it said there were 214 files and 40 folders within. So I made the protected operating system files visible and this is what I found inside:

_Restore
Recycled
RECYCLER
System Volume Information
Thumbs

I don't know how these files/folders got there. Do they belong there? Can I delete them? Should they be in another location? I am confused as to why there are there, since I thought I created this folder, but maybe I am mistaken.

I am using Windows 7 Home Edition 64 bit.

Thanks


Visit the following link for information regarding the recycler folder;

How to delete files from c:\recycler?

HTH

Read other 2 answers
RELEVANCY SCORE 45.2

My computer keeps showing Excell files being created. They are called "Bi-minutely", "Bi-Hourly", and "Bi-Daily". When I open them in Excell, they are blank spreadsheets. The file extension is .csv. These files are found in almost any directory on my computer. One day, I searched and found 320 of the files. The files are usualy on 2 to 5k in size. I think this is caused by a program that I had about 6 months ago called "MyAdvantage" where you got paid to surf the web. Any help in taking care of this problem would be appreciatedl. I did uninstall the MyAdvantage program, but it didn't seem to help.

Thanks,
Brad.
 

A:Excel: CSV Files Being Automatically Created

Read other 10 answers
RELEVANCY SCORE 45.2

My Windows 7 ultimate 64 bit RTM has started to create folders with random names, and containing 2 .VDM files with random filenames, in the root folder of one of my harddisks. I have 3 harddisks + one external disk on my system. The folders created looks like this: "87354cbb7447d1e4e6e99030a4e1eaae", and contains 2 .VDM files like this: "A30368C8-33E2-4E89-8CE5-9CA07F5DD706mpasdlta.vdm", and "B013DC5F-E3CE-4706-9FD1-00452FB1C4EEmpavdlta.vdm". I need administrator rights to access these folders. Just wondering why they are created, and if I can delete them safely. EDIT: I just checked the owner of the folders, and the owner is "SYSTEM". TIA

A:Folders with random name containing 2 .VDM files created.

I have Security Essentials and I just performed an update and the random directory was created with the vdm file in it. So I believe that they are virus definition files associated with Microsoft Security Essentials. Microsoft should patch this and make the files hidden to elevate any confusion.

Read other 35 answers
RELEVANCY SCORE 45.2

Hi Seven Forums.

I'm trying to trouble shoot some bsod problems for a friend (via teamviewer, so bare with me).

1 year old custom build, the bulk of the info should be set in the system specs pane.

A few weeks ago he wiped the pc and reinstalled windows. since then when he boots it up, when it's been left idle, opening skype or doing basic functions it bsods.

Having set W7 to save dump files, I cant get anything output in either windows/Memory.dmp OR in root/minidump meaning I don't have much to show you and checking other threads I cant find a specific reason for that. (seems similar to this thread Random black screen, stuttering and BSOD error 0x0000000F4 ).

I include SF diag file though that cant get the dmp info, I also include a speccy screenshot and a crystal disk hd info screenshot of both drives.

As far as I or he can tell so far he has nothing OC, it's running only MSE/Mbytes/ccc AV wise.
Due to not physically being there and him using the computer for work I haven't yet tried to coach him through running memtest or furmark/prime95 etc.

There were hardly any non Microsoft drivers to test with driver verifier, those that there were caused no problems. Needless to say i've been through and checked that there are no important updates to be done and that all drivers are up to date as far as I can see.

Given that there are no dump files being output what should be the next step to try and diagnose the problems?
Thanks very much in advance.

EDIT-

Ran c... Read more

A:BSOD 0x0F4 NO DMP files created

Hi mondonewc.

Make it sure that both your SSD's are running with the latest firmware.
How to Upgrade OCZ SSD Firmware | StorageReview.com - Storage Reviews
How to Upgrade Samsung SSD Firmware | StorageReview.com - Storage Reviews
Uninstall Marvell Sata Controller.

Then do it: AHCI : Enable in Windows 7 / Vista

Let us know the results.

Read other 5 answers
RELEVANCY SCORE 45.2

Hey guys I've been having constant BSODs but my system is not creating any dump files for me to upload and get support, I've already enabled the system to create them and have tried both the Minidump folder and the Memory.dmp file without success, they will just not be there when my system reboots, any help?

A:Getting constant BSODs, but no .dmp files are created.

A screenshot of the the BSODs would help, even though dump files are much better.

I need to know exactly what you're doing at the time of the crash.

Have you set up the dump files?
Follow these instructions and choose Small Memory Dump

Dump Files - Configure Windows to Create on BSOD

Read other 3 answers
RELEVANCY SCORE 45.2

Recently, my friends son received a harassing IM from a local user, and while he showed his Mom the IM, and she contacted the other parents about this IM, they did not save the message. My question is, " does AIM create Temp files or store these messages where this may be retrieved, or is it lost for good. I am not looking for a log file or a key stroke file, or spyware, only to see if I can recover this one chat session, in order to document the event.
Thank You for your help Pete
 

A:Solved: AIM IM temp files created ??

Hiya

Not sure if you have to use a setting in the Options in AIM, as you do for MSN. Anyway, open Windows Explorer, and navigate to c:\Documents and Settings\%USERNAME%\Application Data\Aim\...

where %USERNAME% is your login name.

If no joy, have a look in c:\program Files\AIM

Regards

eddie
 

Read other 3 answers
RELEVANCY SCORE 45.2

I have 5 pages word documents, includes a front page without header/footer and has a page border. The second page has a footer starting page 1 up to the last page. When I saved the document in PDF. It created two files - one file come with front page only and second file come with page 2 to 4. I am looking at one PDF file instead of two. Your help is much appreciated. Thanks.
 

A:Created 2 PDF files from Word Document

What version of Word?
On what OS?
 

Read other 1 answers
RELEVANCY SCORE 45.2

I burned a CD with a cd burner from a cassette. I can play it on my cd players. However, when I put it in my cd with my computer it shows up as an empty cd. I wanted to rip these files, but that's not possible if my computer can't find them. Any solutions?

bob
 

A:Can't Find Files created by cd burner

Read other 16 answers
RELEVANCY SCORE 45.2

Ive got a folder on the server that
our databases live in. (acces 97, win 98 clients); NT 4 server.
This folder is populated with session.000,
session.001, etc files.
I delete & they come back.
What are these things?
Thanks,

$horty
 

Read other answers
RELEVANCY SCORE 45.2

Hope someone can help me.

When I reboot my computer 1,457 .rar files are created on one of my harddrives. They are all 1,120 kb in size and have various program names the first 3 and last three mentioned below:

3D Studio Max 9 Last. Keygen.rar
Adobe Acrobat Professional 8.2 Patch.rar
Adobe Creative Suite 3.11 Keygen.rar
.
.
.
.
.
.
.
.
.
CloneDVD Mobile 1.1.6.15.rar
DVDFab Platinum 4.0.5.55.rar
Windows Media Player 11 con patcheada actualizada 2008.rar

I just delete the files each time I login and they don't come back until next time I boot. Any suggestion on what to do?

A:On Reboot 1457 .rar Files Are Created?

Appears to be an Archivarius.A infection.Please perform this online Virus scan: Panda ActiveScan <- Accept default settings. (does not remove adware/spyware but will autoclean for viruses/worms and uses low-level scanning to combat rootkits...uses non-encrypted virus definitions so disable your resident anti-virus program before scanning or it may detect ActiveScan as a virus.)(Requires Internet Explorer to work. Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component. If given the option, choose "Quarantine" instead of delete.)Then continue as follows:Please download ATF Cleaner by Atribune & save it to your desktop. DO NOT use yet. Please download Sysclean Package & save it to your desktop.Create a new folder on drive "C:\" and rename it Sysclean - (C:\Sysclean).Place the sysclean.com inside that folder.Then download the latest Virus Pattern Files - (Pattern files are usually named lptxxx.zip, where xxx is the pattern file number)Extract (unzip) the lptxxx.zip pattern file into the Sysclean folder where you put sysclean.com. (Click here for information on how to extract a file if your not sure how to do this. DO NOT scan yet.Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup... Read more

Read other 1 answers
RELEVANCY SCORE 45.2

can anybody suggest me in My computer in all c drive in windows in system there is a folder fun.exe.How can I delete this folder and which antivirus and spyware is good for removing this.

A:Fun.exe is automatically created in system files

Hello and Welcome.

It seems like this might be an autorun worm, and really an .exe file with a folder icon intended to deceive.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 45.2

I backuped all my docs using HP Recovery Mgr to an extenral drive.  Then my 6yr old HP HG62 w/ WIndows 7 display failed. I bought a new Dell w/ WIndows 10-.  How can I restore the WIM files to the Dell Laptop?

A:How to restore the WIM files created with HP Recovery Mrg W...

@Msandov? Msandov wrote:I backuped all my docs using HP Recovery Mgr to an extenral drive.  Then my 6yr old HP HG62 w/ WIndows 7 display failed. I bought a new Dell w/ WIndows 10-.  How can I restore the WIM files to the Dell Laptop?You cannot use system files from Windows 7 on your Windows 10 machine.  Transferring system files from Windows 7 into your Windows 10 Operating System will likely break the Windows 10 File System. Assuming the data exists within the .wim file set, you can extract non-system files / folders from your backups. Essentially, use 7zip > extract the data to a sub-folder.. Examples:How to Extract Original (Default) System Files from Windows Setup Disc? Open/Extract WIM File with Freeware on Windows/Mac/Linux   When you see a Post that helps you,Inspires you, provides fresh insight,Or teaches you something new,Click the "Thumbs Up" on that Post. Fixed / Answered? Click that post Accept as Solution to help others find Answers.

Read other 1 answers
RELEVANCY SCORE 45.2

I just recently built this computer and today I noticed that there was files being created in my C Drive, outside of the folders. The first one was created on the 12/1/2014 and the latest 26/1/2014 and they are all around the same size of 3kb with the same format in their File Names, an example would be {4A82B6BF-BD5C-47AB-ACA3-DE0458FC3FDB} Every file has the brackets and the dashes and the File Type is just labeled as File so I cannot open these. Any help with identifying what these files are would be appreciated and if they are safe to delete.

A:Random Files being created in C Drive.

You can open notepad - then drag/drop the file into he notepad window. Most of what you see might be gibberish, but there might be enough text to allow you to get a clue about what app is making them.

Read other 9 answers
RELEVANCY SCORE 45.2

Hi ! I just experimented and tried to create boot files to another drive and was successfully created . So now I want to delete it because it was just an experiment but I don't know how to delete it .

Can someone help me delete this . (Please )

A:How to delete created boot files ?

Did you merely copy Boot Files there or use a method to move the System Active boot flags to D as well?

Please post back a screenshot of your maximized Disk Management drive map and listings:

1. Type Disk Management in Start Search box.
2. Open Disk Mgmt. window and maximize it.
3. Type Snipping Tool in Start Search box.
4. Open Snipping Tool, choose Rectangular Snip, click New, draw a box around full drive map and all listings.
5, Save Snip, attach using paper clip in Reply Box.

Tell us what is on each partition.

Read other 9 answers
RELEVANCY SCORE 44.8

Hi,
I created some files between lets say 15 and 19 August, not sure of the year, in the last 10 years, how can I find them in win7 64bit pro ?

I am hoping to avoid doing a search each time for a specific year, can one search on date disregarding year ?

Furthermore find only has a filter date modified, it says add a search filter yet doesnt have a list of choices, where are other filters to be found ?

In all, it seems archaic compared to winXP explorer search, as I cant see the options that I was used to.

DBenz

A:Find files created between two dates in any year...how ?

Need find a file copied from one location to another if forgot name

Read other 2 answers
RELEVANCY SCORE 44.8

Hey guys,

So this is my second distinct BSOD in the last while. I turned on driver verifier to investigate the first BSOD problem because minidump files arent being created even after turning on small memory dumps (kernel dumps dont show up either). So this new BSOD appears immediately when the starting windows screen appears.

Ive attached the ntbtlog.txt file which was created through the enable boot logging option.

Any info would be awesome, Thanks a lot

A:Driver Verifier BSOD - NO dmp files are being created

Welcome
Its difficult to diagnose a BSOD without the reports, but lets try.
Uninstall your Anti Virus and replace with
Microsoft Security Essentials - Free Antivirus for Windows
Set up a clean boot. Do not restore any items until, you are instructed to do so.
Troubleshoot Application Conflicts by Performing a Clean Startup
Make a full Anti Virus scan.
: Download Malwarebytes Anti-Malware 1.62 - FileHippo.com (Full Scan)
Make sure that you are configured correctly.
Dump Files - Configure Windows to Create on BSOD
Submit any new BSODs after you make these changes.

Read other 9 answers
RELEVANCY SCORE 44.8

Hi,thanks for reading this ... :-)Till now i've only noticed this in Ms office applications. Whenever i start word or excel or ppt, i creates a ghost file '~title name'.. Very irrittating...!! i know its probably a small issue...but ever since i have noticed that my computer takes ages to start and programs start a lot slower than before. I have about 5 antivirus/spyware removal programs. i scanned using all these programs in safemode, ofcourse i got a few hits and the programs deleted these malware. however even after all this , the problem persists. lately, every time i save an Ms office file, it tells me "word cannot complete the save due to file permission error" and creates another temp file '~WRD2439.tmp" list of malware removal applications.1. Norton2. Avg3. Spybot4. Adaware5. Spyware doctor.Please Help

A:Ghost files are created, whenever Ms programs are started.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

Read other 2 answers