what are these files

  canard 01:24 01 Jan 05
Locked

Happy New Year to the gurus, readers and FE! Since PC had new mobo [AsusTek] and graphics card 4 of these files appear each day with properties of 0 bytes- can anyone tell me what they are and is it OK to delete all or some?click here

  LinuxPenguin 02:49 01 Jan 05

If theyre zero bytes, id say go for it...

to make sure... open them in notepad, if there is nothing in them at all, not even a space, then you can quite happily delete them

  canard 14:18 01 Jan 05

Thankyou for the reassurance LinuxPenguin. Any ideas about hieroglyph soup files type and function?

  LinuxPenguin 17:36 01 Jan 05

i have no idea, but if theyve got no data in, theyre deletable, as a rule of thumb. id suggest you have a more serious problem tho, run adaware and spybot S+D click here and click here

  canard 23:35 01 Jan 05

Neither show anything nor Asquared and CCleaner ignores them.

  LinuxPenguin 20:28 03 Jan 05

CCleaner doesnt deal with empty files...

  woodchip 20:34 03 Jan 05

All them strange!!! download Hijackthis and run it. you can post hear but will have to chop it up so it does not go over 800 word limit also double space line so we can read it click here

  canard 21:46 03 Jan 05

Logfile of HijackThis v1.99.0
Scan saved at 21:39:11, on 03/01/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\WINDOWS\RunDLL.exe
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\MYDOWNLOADS\HIJACKTHIS\HIJACKTH.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = click here
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = click here
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -

  canard 21:47 03 Jan 05

C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SmcService] C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE

  canard 21:56 03 Jan 05

The weird script is like the wordpad rendering of DRMV2 licence [ms windows media player] so suppose that it's encrypted. Sorry-forgot double space!
BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} seems to be the only unknown item.

  woodchip 22:45 03 Jan 05

Look hear click here

This thread is now locked and can not be replied to.

Surface Pro (2017) vs Surface Pro 4

Where HTML5 is headed next

MacBook Pro v Surface Pro 5