jarrycanada
join:2004-12-02
Schenectady, NY
| reply to jarrycanada
Re: strange file HBEPGUID.TXT
anon101, I did open it with notepad. it just says
i've got two numbers so far.
278cd9b7-9f46-4742-9430-328be6c44b79|000E0CB14FC7
e8cd3a8e-073f-4bd2-a6cc-1173c7f30160|000E0CB14FC7
Damon85 is right the last number is my mac address. but the other numbers don't come up at all. I seached the drive and the registry now for them. |
|
jimkyle
Btrieve Guy
Premium
join:2002-10-20
Oklahoma City, OK
 ·AT&T Southwest
| search the registry also for "HBEP" since this file is apparently storing a process-identifying GUID value together with the MAC of your network card. It quite well may be something innocent. However I would expect a search of the registry for just the GUID portion of the current file's content to have at least one hit, probably in the HKLM hive...
--
Jim Kyle |
|
anon101
@cox.net
| reply to jarrycanada
well, it doesn't look too harmful. Judging from the name (HBEPGUID) seems like an ID of some sort along with a MAC address. Maybe they found a new way to set cookies?
I would tend to believe you have something running on your system that checks if the item is there, and if not rewrites it. Open Task Manager and see what is running. Kill any processes you don't know about. Check your startup programs. Most likely there is something in there that starts up with your system. Have you run a HijackThis? |
|
jarrycanada
join:2004-12-02
Schenectady, NY
| reply to jimkyle
I searched for HBEP and any of the set of numbers found nothing. I would think nothing of this file but what scares me is the folder I found it in. I run HijackThis all the time. I don't see anything new in there. getting to the point I am thinking about just reinstalling the os. sad part is the system runs fine. no strange error messages. no weired log files or anything showing up on my firewall logs. I nuked the IE internet folder and all the cookies. |
|
anon101
@cox.net
| I don't think you need to go to the extent of reloading OS. Maybe try something like file monitor with filtering to find out what is happening. I don't have this program so I don't know how to set it up. In any event, I would be curious as to what was happening before I reloaded new OS.
Filemon: »www.microsoft.com/technet/sysint···mon.mspx |
|
