Results 1 to 15 of 15
  1. #1
    Lounger
    Join Date
    Sep 2010
    Location
    Bicester, Oxon, UK
    Posts
    41
    Thanks
    9
    Thanked 1 Time in 1 Post

    Smile What is this .exe file?

    Hi, can anyone recognize this file, my firewall (on line armor), keeps letting me know that this file wants to run, I have not been able to find out what it is, so I have been blocking it, as I don't want to delete it, in case it should run :-

    3d25f147-3f51-4f78-a7fa-09f39d0c91dc.exe, 0.0.0.0, (0.0.0.0)
    C:\WINDOWS\Temp\3d25f147-3f51-4f78-a7fa-09f39d0c91dc.exe
    Hash(MD5): C1B7BACC5F4A932870308FF2D2481F30


    Thanks for your help
    Bob

  2. #2
    Administrator
    Join Date
    Jun 2010
    Location
    Portugal
    Posts
    12,519
    Thanks
    152
    Thanked 1,398 Times in 1,221 Posts
    Did it start occurring after some Windows update?

    Anyway, no engine at virus total found it malicious: https://www.virustotal.com/file/dc63...3697/analysis/

  3. The Following User Says Thank You to ruirib For This Useful Post:

    bob rouse (2012-09-06)

  4. #3
    Super Moderator BATcher's Avatar
    Join Date
    Feb 2008
    Location
    A cultural area in SW England
    Posts
    3,420
    Thanks
    33
    Thanked 195 Times in 175 Posts
    If it's in the TEMP directory I would have no qualms about deleting it!
    BATcher

    Time prevents everything happening all at once...

  5. The Following User Says Thank You to BATcher For This Useful Post:

    bob rouse (2012-09-06)

  6. #4
    Lounger
    Join Date
    Sep 2010
    Location
    Bicester, Oxon, UK
    Posts
    41
    Thanks
    9
    Thanked 1 Time in 1 Post
    Hi, I'm not sure if it occurred after an update, it is a family computer, and as I work shifts, I may not use it for several days, as usual no one can remember when it started, sorry for not being very helpful, I have updated Malwarebytes and my anti virus Avast free edition, neither has found anything, also I can't see any ill effects from blocking this file, so I guess it will be ok to delete it ?, like BATcher said it is a temp file, it was just that it keeps trying to run, each time the computer is started, so was not sure what is going on, I will block it for now, if I can't find any more info, to be safe I think it will have to go.

    Thanks for the replys ruirib/BATcher

  7. #5
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts
    Unless you downloaded a program to install and then didn't install it, no .exe file should EVER need to run from a Temp directory. I wouldn't just block the file from running, but would get it off my system.

    If you do not use cCleaner, I would recommend getting it (it's free) and running it at least weekly to clean up your system. You can find a tutorial for it here.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  8. The Following User Says Thank You to DocWatson For This Useful Post:

    bob rouse (2012-09-06)

  9. #6
    5 Star Lounger
    Join Date
    Jul 2012
    Posts
    966
    Thanks
    661
    Thanked 58 Times in 57 Posts
    "it keeps trying to run, each time the computer is started"
    --- Uncheck it in startups
    Create a restore point and run CCleaner as recommended
    --- When I started using CCleaner I ran the default cleaner section just fine
    --- However, the registry cleaner section recorded umpteen entries to be addressed so I didn't do everything at once since I had read about various opinions about using registry cleaners
    --- Going to a weekly schedule as already recommended is a great idea
    --- CCleaner has served me very well and now it takes all of about 10 seconds to run both the cleaner & registry sections

  10. The Following User Says Thank You to cmptrgy For This Useful Post:

    bob rouse (2012-09-06)

  11. #7
    Lounger
    Join Date
    Sep 2010
    Location
    Bicester, Oxon, UK
    Posts
    41
    Thanks
    9
    Thanked 1 Time in 1 Post
    Thank you all for the advise, I have run CCleaner, and all is quite now, am not sure where this file came from, I have run several scans and they are all clean, so I guess all is ok now, will have to try harder to run a regular clean up, it is difficult with a family pc, you just start to do some maintenance, and someone wants to use it !!

    Thanks again
    Bob

  12. #8
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts
    Just run cCleaner every time you use the machine, just before you start. It almost never takes more than a minute or two if you run it that frequently and as a bonus, your session will run faster.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  13. #9
    5 Star Lounger
    Join Date
    Jul 2012
    Posts
    966
    Thanks
    661
    Thanked 58 Times in 57 Posts
    Thank you for letting us know what worked for you

  14. #10
    Lounger
    Join Date
    Sep 2010
    Location
    Bicester, Oxon, UK
    Posts
    41
    Thanks
    9
    Thanked 1 Time in 1 Post
    DocWatson

    Thats a great idea, I never gave it a thought, the simple idea's are always the best
    Thanks
    Bob

  15. #11
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts
    Simple is my specialty.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  16. #12
    3 Star Lounger
    Join Date
    Mar 2010
    Location
    USA
    Posts
    301
    Thanks
    65
    Thanked 39 Times in 30 Posts
    Suggest test the file in virtual environment.
    One such is Sandboxie (please google it.)

    Purchase Sandboxie (I think less than US$40). Install. Then right click your exe file. Select 'Run sandboxed' to run the exe file in a 'sandbox'.

    After the 'installation', you'll know what the exe file is for. If not to your satisfaction, close the program. Sandboxie will clean it up for you. No trace is left to harm your machine. No junk. No registry entry either.

    Sandboxie creates a sandbox (walled environment). You might say it virtualizes the installation process. Different from Virtualbox and VMware that it is a small program. (Virtualbox and VMware create a virtualized OS within an OS first.)

    Nothing will be leaked out to harm the PC. Sandboxie is perfect for testing software, yet leaving no trace and harm to the system.

    I use Sandboxie. Have no affiliation with Sandboxie. I also use Virtulabox and VMware.
    P.S.
    Your cryptic-name exe files maybe update file for antivirus program. Antivirus program may want to hide from being detected by virus. Virus may detect them and prevent them from proper operation.

  17. #13
    Bronze Lounger DrWho's Avatar
    Join Date
    Dec 2009
    Location
    Central Florida
    Posts
    1,501
    Thanks
    30
    Thanked 205 Times in 163 Posts
    As DocWatson said, "Simple is my business".
    To keep drive cleanup as simple as possible, I wrote a batch file that runs from the Startup folder on every boot (at least once a day).
    That batch file has one line in it for every place on my HD where junk files are stored. It changes according to the OS being used. But the temp folders, all umpteen of them get emptied every day.
    Temp means "Temporary", and temporary files never need to be kept. They are only needed while the program that created them is still running. Once that program closes, they are just Garbage and need to be removed. (like old potatoe peels or coffee grounds)

    Be very careful with CCleaner, as it does have the capability to disable Windows. That happened to me twice and since then I won't let it anywhere near my PC. I use other cleanup tools that are much safer, like "Easy Cleaner 2".

    Window's own "Disk Cleanup" is a pretty good tool, when run in Extended mode, and it's 100% safe. But probably less than 1% of users ever even use it. What a shame!
    I set up Disk Cleanup in the Extended mode and put a shortcut to it on the desktop, for all my customers as a part of a weekly Drive Maintenance routine.
    For the lazy one who will never do anything for themselves, I put the shortcut to the Disk Cleanup program at the end of my Cleanup.bat program, so it runs automatically every day.
    I run that batch file, "Minimized" so it's not up on the screen, 'in their face', when it runs.
    It's out of sight, out of mind, but their HD stays nice and clean. Mission accomplished!
    Don't we all just love, "Simple" ???

    Cheers Mates!
    Last edited by DrWho; 2012-09-13 at 08:46.
    Experience is truly the best teacher.

    Backup! Backup! Backup! GHOST Rocks!

  18. #14
    5 Star Lounger
    Join Date
    Mar 2010
    Location
    east coast
    Posts
    701
    Thanks
    89
    Thanked 8 Times in 8 Posts
    some people believe that that file is an avast update
    dont know
    cant say

    but imho i never run anything from a temp folder
    if it was an avast update they did not do a good job of implementing it

  19. #15
    Lounge VIP bobprimak's Avatar
    Join Date
    Feb 2009
    Location
    Hinsdale, IL, USA
    Posts
    2,482
    Thanks
    176
    Thanked 152 Times in 129 Posts
    Avast updates do create temporary files which look something like that, in my experience with Avast. They are updated to a special Temporary Directory, created and managed by the Avast program. Other security programs may do the same sorts of things. Trouble is, this is sort of a Hex-Code filename. That makes it difficult to interpret. These (updater) files do get swept clean from time to time. Java Runtime updates also look like this one (except that they are not .exe extensions), but they go to a different location on the PC.

    It seems clear that this was nothing malicious, so I wouldn't worry about it, unless more like it keep accumulating. Which I don't see happening here. Just leave it alone, and let whatever creates it manage it.
    Last edited by bobprimak; 2012-09-13 at 17:35.
    -- Bob Primak --

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •