PC reads D: Drive whilst in stand by

  Blue Nose 22:37 10 Nov 05
Locked

I have a Dell PC running XP home. if i leave the Pc for more than half an hour the the PC starts to read the D: drive and the PC 'beeps' then it realises no CD/DVD has been inserted and goes quiet again, before doing the same 10 minutes later. Which is qite annoying if i leave the PC on overnight! Any suggestions besides switching my PC off of a night?

  Skyver 22:40 10 Nov 05

Run this to see exactly what it is trying to find on D:. Stop any un-neccessary tasks, otherwise the event list will be huge.
click here

  Blue Nose 23:16 10 Nov 05

Skyver,
I have downloaded file monitor and let the pc go idle until it beeps and reads the drive again, nothing shows in file monitor for D: it seems to be just the following which does not make much sense to me?

23:04:04 explorer.exe:3144 QUERY INFORMATION C:\ SUCCESS FileNameInformation
23:04:04 explorer.exe:3144 QUERY INFORMATION C:\ SUCCESS FileFsVolumeInformation
23:04:04 explorer.exe:3144 CLOSE C:\ SUCCESS
23:04:04 explorer.exe:3144 WRITE C:\WINDOWS\system32\xbadd.tmp2 SUCCESS Offset: 221184 Length: 3821
23:04:04 explorer.exe:3144 CLOSE C:\WINDOWS\system32\xbadd.tmp2 SUCCESS
23:04:04 winlogon.exe:872 DIRECTORY C:\WINDOWS\SYSTEM32 SUCCESS Change Notify
23:04:04 explorer.exe:3144 OPEN C:\WINDOWS\system32\xbadd.tmp2 SUCCESS Options: Open Access: All
23:04:04 explorer.exe:3144 SET INFORMATION C:\WINDOWS\system32\xbadd.tmp2 SUCCESS FileBasicInformation
23:04:04 explorer.exe:3144 CLOSE C:\WINDOWS\system32\xbadd.tmp2 SUCCESS
23:04:04 explorer.exe:3144 OPEN C:\WINDOWS\system32\xbadd.ini2 SUCCESS Options: Open Access: All
23:04:04 explorer.exe:3144 QUERY INFORMATION C:\WINDOWS\system32\xbadd.ini2 SUCCESS FileAttributeTagInformation
23:04:04 explorer.exe:3144 DELETE C:\WINDOWS\system32\xbadd.ini2 SUCCESS
23:04:04 explorer.exe:3144 CLOSE C:\WINDOWS\system32\xbadd.ini2 SUCCESS
23:04:04 winlogon.exe:872 DIRECTORY C:\WINDOWS\SYSTEM32 SUCCESS Change Notify
23:04:04 explorer.exe:3144 OPEN C:\WINDOWS\system32\xbadd.tmp2 SUCCESS Options: Open Access: All
23:04:04 explorer.exe:3144 QUERY INFORMATION C:\WINDOWS\system32\xbadd.tmp2 SUCCESS FileAttributeTagInformation
23:04:04 explorer.exe:3144 QUERY INFORMATION C:\WINDOWS\system32\xbadd.tmp2 SUCCESS Attributes: HS
23:04:04 explorer.exe:3144 OPEN C:\WINDOWS\system32\xbadd.ini2 SUCCESS Options: Open Access: All
23:04:04 explorer.exe:3144 SET INFORMATION C:\WINDOWS\system32\xbadd.tmp2 SUCCESS FileRenameInformation
23:04:04 winlogon.exe:872 DIRECTORY C:\WINDOWS\SYSTEM32 SUCCESS Change Notify
23:04:04 winlogon.exe:872 DIRECTORY C:\WINDOWS SUCCESS Change Notify
23:04:04 explorer.exe:3144 CLOSE C:\WINDOWS\SYSTEM32\xbadd.ini2 SUCCESS
23:04:04 winlogon.exe:872 DIRECTORY C:\WINDOWS\SYSTEM32 SUCCESS Change Notify
23:04:04 explorer.exe:3144 OPEN C:\WINDOWS\system32\xbadd.ini2 SUCCESS Options: Open Access: All
23:04:04 explorer.exe:3144 SET INFORMATION C:\WINDOWS\system32\xbadd.ini2 SUCCESS FileBasicInformation
23:04:04 explorer.exe:3144 CLOSE C:\WINDOWS\system32\xbadd.ini2 SUCCESS
23:04:04 explorer.exe:3144 CREATE C:\WINDOWS\system32\xbadd.tmp2 SUCCESS Options: OverwriteIf Access: All
23:04:04 explorer.exe:3144 OPEN C:\WINDOWS\system32\ SUCCESS Options: Open Directory Access: 00000000
23:04:04 winlogon.exe:872 DIRECTORY C:\WINDOWS\SYSTEM32 SUCCESS Change Notify
23:04:04 explorer.exe:3144 OPEN C:\ SUCCESS Options: Open Directory Access: All
23:04:04 explorer.exe:3144 QUERY INFORMATION C:\ SUCCESS FileNameInformation

  woodchip 23:20 10 Nov 05

Are you sure you do not have Malaware on your computer. Try checking your Drive with Ad-Aware

  Kev.Ifty 23:33 10 Nov 05

You may want to check 'Scheduled Tasks'

Start/Programs/Accessories/System Tools...

Something might be trying to update.

Kev

  Skyver 23:47 10 Nov 05

Do as woodchip suggests, xbadd isn't a standard Windows file. Try opening it with Notepad and see if there is any readable text in it,web addresses, links to other executables on your PC.
Or use BinText which will strip the file of extraneous stuff for reading.
click here

  Blue Nose 00:04 11 Nov 05

Thanks for this fella's

I have run spybot and removed a few bits of adware that where showing, but the problem still happens. I have just tried to open the xbadd files but they are not in windows\system32\ ? i have also tried to do a search for xb* but again nothing comes up ?

  Blue Nose 00:07 11 Nov 05

Kev,

Have just checked scheduled tasks but dont have any in there at all.

  Blue Nose 00:12 11 Nov 05

Hi,

Have just looked at scheduled tasks log and the only thing there is;

B84D2E909AF2D958.job" (thebashpure.exe)
Finished 10/11/2005 05:00:00
Result: The task completed with an exit code of (0).

I have searched this file and it shows as THEBASHPURE.EXE-2146AC53.pf in C:Windows\Prefetch ?

Should i just delete this file ?

  Skyver 00:14 11 Nov 05

Possibly hidden, you need to go to Control Panel/Folder Options, View, check Show Hidden files, system files, Uncheck protect system files etc, then look.
Alternatively access the system32 folder via the command prompt (start menu/run/type `cmd`, type `cd..`, type `cd windows\system32\`, type `dir xb*.* /ah` - this will list hidden files. Or `dir xb*.* /ash to show hidden, system files.

  Blue Nose 00:38 11 Nov 05

Cheers,

I have located the xbadd files and have deleted all but one of them xbadd.ini2 just reappears each time i delete it? i cant see any readable text or links in it and have used Bin text to open it?

This thread is now locked and can not be replied to.

How to get Windows 10 for free | How to install Windows 10: There is still a way to avoid paying…

1995-2015: How technology has changed the world in 20 years

Hands-on with the Star Wars fighting drones you can fly yourself

15 macOS Sierra tips | How to use macOS Sierra: Secret tricks and best new features in Apple's new…