Good point. One of the first things I do on all my systems is turn off the inane "Hide extensions for known file types" setting. I completely forgot that it's the default...
On Wed, Jun 23, 2010 at 12:26 PM, Jeff Bunting <[email protected]>wrote: > I just wanted to comment about changing the extension to .txt. The only > reason I can imagine to do this is to be able to open the file through > explorer which could potentially be dangerous when dealing with a file of > unknown origin. You're safer launching a text editor and using File, Open > to load the suspicious file. A file is not required to have a .txt > extension to be opened and read. > > If file extensions are hidden and the file has an .exe extension, you might > think you're renaming the extension when you are really creating a file > named file.txt.exe. > > Jeff > > On Wed, Jun 23, 2010 at 11:35 AM, Richard Stovall <[email protected]>wrote: > >> I'd say the preponderance of evidence indicates that you can forget about >> them. They're not harmless in and of themselves, and don't appear to be the >> byproduct of some other nefarious process you need to track down. >> >> On Wed, Jun 23, 2010 at 11:32 AM, John Aldrich < >> [email protected]> wrote: >> >>> Yep. >>> >>> >>> >>> [image: John-Aldrich][image: Tile-Tools] >>> >>> >>> >>> *From:* Richard Stovall [mailto:[email protected]] >>> *Sent:* Wednesday, June 23, 2010 11:18 AM >>> *To:* NT System Admin Issues >>> *Subject:* Re: Questionable files >>> >>> >>> >>> Googling for several of the strings below make them seem like >>> installation log files left over from HP. Is it a Presario computer? >>> >>> On Wed, Jun 23, 2010 at 11:04 AM, John Aldrich < >>> [email protected]> wrote: >>> >>> Interesting. It appears to be some sort of install logfile or something >>> similar. Here’s a snippet of the file: >>> >>> >>> >>> >>> ;---------------------------------------------------------------------------- >>> >>> >>> ;---------------------------------------------------------------------------- >>> >>> >>> ;---------------------------------------------------------------------------- >>> >>> >>> ;---------------------------------------------------------------------------- >>> >>> ; OPK: EN_US_SP2 >>> >>> ; Date: Tue Aug 10 2004 17:11:34 PST >>> >>> ; Type: Customer Build >>> >>> ; Build ID: 44NAheRET4 >>> >>> ; Build ID: 44NAheRET4 >>> >>> ; Created by: Juergen Ahaus >>> >>> ; Created by: ZZZ >>> >>> ; Date: Wed Aug 11 17:20:29 2004 >>> >>> BlocksXP\34\BuildTools\51speakers\fiveonespeakers_all_ww_0000-06 >>> >>> BlocksXP\34\BuildTools\Beginbuild\OPK_beginbuild_WW_XP_0000-01 >>> >>> BlocksXP\34\BuildTools\Factoryreboot\OPK_FactoryReboot_WW_0000-01 >>> >>> >>> BlocksXP\34\BuildTools\Keyboardupdateduringcmdline\Keyboard_update_ALL_WW_0000-01 >>> >>> BlocksXP\34\BuildTools\Latte\Latte_ALL_WW_0001-02 >>> >>> >>> BlocksXP\34\BuildTools\ShutdownandBackup1\ShutDown_and_Backup_ALL_WW_0000-01 >>> >>> >>> BlocksXP\34\BuildTools\ShutdownandBackup1\ShutDown_and_Backup_ALL_WW_0000-01 >>> >>> BlocksXP\34\BuildTools\sysprep\Sysprep_Close_ALL_WW_0000-01 >>> >>> BlocksXP\34\BuildTools\sysprep\Sysprep_Open_ALL_WW_0000-01 >>> >>> >>> BlocksXP\34\BuildTools\Sysprepinfrestore\OPK_syspreprestore_ALL_WW_XP_0000-01 >>> >>> >>> BlocksXP\34\BuildTools\Sysprepinfrestore\OPK_syspreprestore_ALL_WW_XP_0000-01 >>> >>> >>> BlocksXP\34\BuildTools\Sysprepinfrestore\OPK_syspreprestore_ALL_WW_XP_0000-01 >>> >>> BlocksXP\34\Driver\NIC\nVidia\nForce_LAN_03_03_09_ALL_WW_XP_5913-03 >>> >>> BlocksXP\34\OS\MessengerService\MessengerService_Manual_ALL_WW_0000-01 >>> >>> BlocksXP\34\OS\PATCH\Patch_USB\Patch_USB_S3_ALL_WW_0000-01 >>> >>> BlocksXP\34\OS\PATCH\VIA686B\Patch_Via_686B_ALL_WW_0000-01 >>> >>> BlocksXP\34\SUPPORT\HP_Odometer\HP_Odometer_1_7_ALL_WW_1246-01 >>> >>> BlocksXP\41\BuildTools\DMA\dmaon_ww_xp_0000-10 >>> >>> BlocksXP\41\BuildTools\MLVerify\check_blocks_download_all_ww_0000-02 >>> >>> BlocksXP\41\BuildTools\Windex\windex_cleanup_all_ww_0000-01 >>> >>> BlocksXP\41\Online\WW\IAccessMFU_ALL_WW_6334-01 >>> >>> BlocksXP\42\BuildTools\Drivers\driver_cleanup_all_ww_0000-05 >>> >>> BlocksXP\42\BuildTools\Drivers\prepdriver_1_0_all_ww_0000-02 >>> >>> >>> BlocksXP\42\BuildTools\SetRES_Icon_Desktop\SetRES_Optimum_Icon_Desktop_ALL_WW_0000-04 >>> >>> BlocksXP\42\BuildTools\Utility_ALL_WW_XP_1_6803-01 >>> >>> BlocksXP\42\Driver\Chipset\Via\via_agp_5_01_00_3442_all_ww_xp_6403-02 >>> >>> BlocksXP\42\Driver\Chipset\Via\via_inf_5_01_00_0180_all_ww_xp_5918-03 >>> >>> BlocksXP\42\Driver\GART\SiS\Chipset_Sis_7_2_0_1170_ALL_WW_xp_6984-03 >>> >>> BlocksXP\42\Driver\NIC\Realtek\realtek_lan_5_505_1004_all_ww_xp_5846-02 >>> >>> BlocksXP\42\Driver\NIC\Sis\sis_lan_1_16_0_8_all_ww_xp_6416-02 >>> >>> >>> BlocksXP\42\Driver\RaidATA\Promise\raid_controller_1_00_0030_11_all_ww_xp_7005-02 >>> >>> BlocksXP\42\OS\SunJRE\Sun_JRE_1_4_2_03_ALL_WW_6851-01 >>> >>> BlocksXP\42\OS\SystemRestore\DisableSystemRestore_ALL_WW_0000-01 >>> >>> BlocksXP\43\BuildTools\BurnBoot\BurnBoot_ALL_WW_7261-07 >>> >>> BlocksXP\43\BuildTools\EndBuild\HP_EndBuild_ALL_WW_0000-01 >>> >>> BlocksXP\43\BuildTools\Motherboardname\summer04_all_boards_all_ww_0000-02 >>> >>> >>> BlocksXP\43\Driver\Audio\AUDIGYII\Creative_SB_Audigy_II_ZS_5_12_4_443_RC5_ALL_WW_7322-01 >>> >>> >>> BlocksXP\43\Driver\Chipset\nVidiaSMBUS\nvidia_nforce_smbus_4_0_4_0_all_ww_7164-03 >>> >>> >>> BlocksXP\43\Driver\modem\Agere\Agere_Cheetah_Win_Modem_8_31_ALL_WW_7090-01 >>> >>> >>> BlocksXP\43\Driver\modem\Conexant\Stinger_Modem_7_04_05_51A_ALL_WW_XP_7091-01 >>> >>> >>> BlocksXP\43\Driver\NIC\Arcadyan\Arcadyan_Accton_WN4201B_1_5_09_ALL_WW_7185-02 >>> >>> >>> BlocksXP\43\Driver\NIC\Arcadyan\Arcadyn_Wireless_USB_WN4501F_2_0_1_0_ALL_WW_7593-01 >>> >>> BlocksXP\43\Driver\NIC\VIA\Via_LAN_3_27_0_0412_ALL_WW_7317-01 >>> >>> >>> BlocksXP\43\Driver\RaidATA\Promise\Raid_Utility_3_3_30_18_ALL_WW_XP_7190-01 >>> >>> BlocksXP\43\HP\Recovery\RecoveryToolsCD\RecoveryToolsCD_ALL_WW_7464-01 >>> >>> BlocksXP\43\HP\SuperComponent\hpware_dtsshortcut_move_ALL_WW_0000-01 >>> >>> BlocksXP\43\HP\SupportInfo\support_info_All_WW_7066-01 >>> >>> BlocksXP\43\Online\EN_CA\NonISP_ALL_EN_CA_7082-01 >>> >>> BlocksXP\43\Online\EN_US\BASEoffer_ALL_EN_US_7083-01 >>> >>> BlocksXP\43\Online\EN_US\EarthlinkBB_ALL_EN_US_7092-01 >>> >>> BlocksXP\43\Online\EN_US\FAQforEIS_ALL_EN_US_7058-01 >>> >>> BlocksXP\43\Online\EN_US\iTunesMFU_ALL_WW_7088-01 >>> >>> BlocksXP\43\Online\EN_US\NON-ISP-content4US_ALL_EN_US_7071-01 >>> >>> BlocksXP\43\Online\EN_US\PeoplePC_RED_EN_US_6938-01 >>> >>> BlocksXP\43\Online\WW\WISISPSignup_ALL_WW_7080-01 >>> >>> <snip> >>> >>> >>> >>> Any idea what this is from? >>> >>> >>> >>> [image: John-Aldrich][image: Tile-Tools] >>> >>> >>> >>> *From:* Richard Stovall [mailto:[email protected]] >>> *Sent:* Wednesday, June 23, 2010 10:56 AM >>> *To:* NT System Admin Issues >>> *Subject:* Re: Questionable files >>> >>> >>> >>> Looks like they might be subtitles for a video file. >>> >>> >>> >>> http://www.ehow.com/about_5066018_srt-file.html >>> >>> >>> >>> Slap a .txt extension on them and have a look. >>> >>> On Wed, Jun 23, 2010 at 10:51 AM, John Aldrich < >>> [email protected]> wrote: >>> >>> Hey, guys… I am cleaning up a computer and found a couple questionable >>> files. The file names are ml1.srt and ml2.srt. Anyone know what these files >>> are and if they are safe? I tried to submit to Sunbelt’s sandbox, but they >>> only scan executable files. L >>> >>> >>> >>> Thanks. >>> >>> >>> >>> [image: John-Aldrich][image: Tile-Tools] >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >> >> >> >> >> > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
<<image001.jpg>>
<<image002.jpg>>
