 |
|
|
|
Next: can i password protect internet options
|
| Author |
Message |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 1) Posted: Mon Oct 23, 2006 2:32 pm
Post subject: Mystery file
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)
|
|
|
I'm not sure this is the right place to ask; if not please point me
elsewhere...
When I run disk defragmentation on the C: partition, there is one
gigantic section of the disk flagged as a system file(s?). It is larger
than the paging or hibernation files. The defragmenter has a "cluster
explorer" feature that lists the files, or portions of them, in a
selected block. The blocks in this huge file(s?) show up as "$Secure;
$SDS; $DATA" I am wondering what this is. Also, chkdsk spends about
forever in Phase 3, "verifying security descriptors" when I run it; I
suspect that has something to do with this very large file as well.
TIA
Jason
--
reverse my name in email address |
|
| Back to top |
|
 | |
External
Since: Jan 15, 2004
Posts: 5
|
(Msg. 2) Posted: Thu Oct 26, 2006 9:57 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
You might consider running a rootkit detection app:
f-secure's blacklight or Sysinternal's rootkit revealer.
Knowing something about what apps you run might help as well.
I hesitate to post this, because I don't get here very often, but checking
for rootkits would be one way of differentiating "good" metadata from
something else.
--
"jason" <nerraw_nosaj.TakeThisOut@verizon.net> wrote in message
news:MPG.1fa6c8ede33a48b398968d@msnews.microsoft.com...
> I'm not sure this is the right place to ask; if not please point me
> elsewhere...
>
> When I run disk defragmentation on the C: partition, there is one
> gigantic section of the disk flagged as a system file(s?). It is larger
> than the paging or hibernation files. The defragmenter has a "cluster
> explorer" feature that lists the files, or portions of them, in a
> selected block. The blocks in this huge file(s?) show up as "$Secure;
> $SDS; $DATA" I am wondering what this is. Also, chkdsk spends about
> forever in Phase 3, "verifying security descriptors" when I run it; I
> suspect that has something to do with this very large file as well.
>
>
> TIA
>
> Jason
> --
> reverse my name in email address |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 3) Posted: Thu Oct 26, 2006 10:07 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <eXlt8sW#GHA.4376@TK2MSFTNGP03.phx.gbl>,
Bill_Sanderson RemoveThis @msn.com.plugh.org says...
> You might consider running a rootkit detection app:
>
> f-secure's blacklight or Sysinternal's rootkit revealer.
>
> Knowing something about what apps you run might help as well.
>
> I hesitate to post this, because I don't get here very often, but checking
> for rootkits would be one way of differentiating "good" metadata from
> something else.
>
>
Thanks for the pointers, Bill. I did run a rootkit finder, though not
either of those you mention. I took a look at the Sysinternals rootkit
revealer page and it lists $Secure as a Win Server 2003 NTFS metadata
file, but no mention of $SDS or $DATA. I'll try out those you suggested.
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 4) Posted: Thu Oct 26, 2006 10:57 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <eXlt8sW#GHA.4376@TK2MSFTNGP03.phx.gbl>,
Bill_Sanderson DeleteThis @msn.com.plugh.org says...
>
> Knowing something about what apps you run might help as well.
>
I forgot to address that. I don't think there's a clue to be had - it's
a tired old Thinkpad that I use almost exclusively for Web browsing
(Firefox) and Outlook email. Security software is McAfee Security Center
that's up to date, and I have a couple of spyware finders that I run
occasionally. The system is clean in terms of spyware and viruses as far
as I know.
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 5) Posted: Fri Oct 27, 2006 10:21 am
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <MPG.1fab3fb2bd34e5ba989690.TakeThisOut@msnews.microsoft.com>,
nerraw_nosaj.TakeThisOut@verizon.net says...
I tried the Sysinternals root kit finder and it didn't find anything. I
guess that's positive : )
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 15, 2004
Posts: 5
|
(Msg. 6) Posted: Fri Oct 27, 2006 8:50 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
I guess I'd say this is more of a curiosity than something I'd see as
worriesome at this point--these seem like normal system metadata--we just
don't seem to have a complete list. Have you run a scandisk lately? (just
wondering if anything about the time to scan issues you mentioned might
relate to a physical disk issue.)
--
"jason" <nerraw_nosaj DeleteThis @verizon.net> wrote in message
news:MPG.1fabe004ec1fa417989691@msnews.microsoft.com...
> In article <MPG.1fab3fb2bd34e5ba989690 DeleteThis @msnews.microsoft.com>,
> nerraw_nosaj DeleteThis @verizon.net says...
>
> I tried the Sysinternals root kit finder and it didn't find anything. I
> guess that's positive : )
>
>
> Jason
>
> --
> reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 7) Posted: Mon Nov 13, 2006 3:48 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <uclrFsi#GHA.4472@TK2MSFTNGP05.phx.gbl>,
Bill_Sanderson RemoveThis @msn.com.plugh.org says...
> I guess I'd say this is more of a curiosity than something I'd see as
> worriesome at this point--these seem like normal system metadata--we just
> don't seem to have a complete list. Have you run a scandisk lately? (just
> wondering if anything about the time to scan issues you mentioned might
> relate to a physical disk issue.)
>
I think the disk hardware is ok. As I mentioned, phase 3 of chkdsk takes
forever, but it finishes. When I run a boot-time chkdsk, including the
phases to scan for/repair bad sectors all is ok.
I'm not really worried about this after running every checking utility I
can find, but the fact that this hunk of invisible storage consumes
about 25% of the entire partition made me wonder what's going on...
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 8) Posted: Mon Nov 13, 2006 3:48 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <uclrFsi#GHA.4472@TK2MSFTNGP05.phx.gbl>,
Bill_Sanderson.DeleteThis@msn.com.plugh.org says...
> I guess I'd say this is more of a curiosity than something I'd see as
> worriesome at this point--these seem like normal system metadata--we just
> don't seem to have a complete list. Have you run a scandisk lately? (just
> wondering if anything about the time to scan issues you mentioned might
> relate to a physical disk issue.)
>
I think the disk hardware is ok. As I mentioned, phase 3 of chkdsk takes
forever, but it finishes. When I run a boot-time chkdsk, including the
phases to scan for/repair bad sectors all is ok.
I'm not really worried about this after running every checking utility I
can find, but the fact that this hunk of invisible storage consumes
about 25% of the entire partition made me wonder what's going on...
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 9) Posted: Mon Nov 13, 2006 3:48 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <uclrFsi#GHA.4472@TK2MSFTNGP05.phx.gbl>,
Bill_Sanderson.TakeThisOut@msn.com.plugh.org says...
> I guess I'd say this is more of a curiosity than something I'd see as
> worriesome at this point--these seem like normal system metadata--we just
> don't seem to have a complete list. Have you run a scandisk lately? (just
> wondering if anything about the time to scan issues you mentioned might
> relate to a physical disk issue.)
>
I think the disk hardware is ok. As I mentioned, phase 3 of chkdsk takes
forever, but it finishes. When I run a boot-time chkdsk, including the
phases to scan for/repair bad sectors all is ok.
I'm not really worried about this after running every checking utility I
can find, but the fact that this hunk of invisible storage consumes
about 25% of the entire partition made me wonder what's going on...
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 10) Posted: Mon Nov 13, 2006 3:48 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <uclrFsi#GHA.4472@TK2MSFTNGP05.phx.gbl>,
Bill_Sanderson DeleteThis @msn.com.plugh.org says...
> I guess I'd say this is more of a curiosity than something I'd see as
> worriesome at this point--these seem like normal system metadata--we just
> don't seem to have a complete list. Have you run a scandisk lately? (just
> wondering if anything about the time to scan issues you mentioned might
> relate to a physical disk issue.)
>
I think the disk hardware is ok. As I mentioned, phase 3 of chkdsk takes
forever, but it finishes. When I run a boot-time chkdsk, including the
phases to scan for/repair bad sectors all is ok.
I'm not really worried about this after running every checking utility I
can find, but the fact that this hunk of invisible storage consumes
about 25% of the entire partition made me wonder what's going on...
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 11) Posted: Mon Nov 13, 2006 3:48 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <uclrFsi#GHA.4472@TK2MSFTNGP05.phx.gbl>,
Bill_Sanderson RemoveThis @msn.com.plugh.org says...
> I guess I'd say this is more of a curiosity than something I'd see as
> worriesome at this point--these seem like normal system metadata--we just
> don't seem to have a complete list. Have you run a scandisk lately? (just
> wondering if anything about the time to scan issues you mentioned might
> relate to a physical disk issue.)
>
I think the disk hardware is ok. As I mentioned, phase 3 of chkdsk takes
forever, but it finishes. When I run a boot-time chkdsk, including the
phases to scan for/repair bad sectors all is ok.
I'm not really worried about this after running every checking utility I
can find, but the fact that this hunk of invisible storage consumes
about 25% of the entire partition made me wonder what's going on...
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 12) Posted: Mon Nov 13, 2006 3:48 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <uclrFsi#GHA.4472@TK2MSFTNGP05.phx.gbl>,
Bill_Sanderson.TakeThisOut@msn.com.plugh.org says...
> I guess I'd say this is more of a curiosity than something I'd see as
> worriesome at this point--these seem like normal system metadata--we just
> don't seem to have a complete list. Have you run a scandisk lately? (just
> wondering if anything about the time to scan issues you mentioned might
> relate to a physical disk issue.)
>
I think the disk hardware is ok. As I mentioned, phase 3 of chkdsk takes
forever, but it finishes. When I run a boot-time chkdsk, including the
phases to scan for/repair bad sectors all is ok.
I'm not really worried about this after running every checking utility I
can find, but the fact that this hunk of invisible storage consumes
about 25% of the entire partition made me wonder what's going on...
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 13) Posted: Mon Nov 13, 2006 3:48 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <uclrFsi#GHA.4472@TK2MSFTNGP05.phx.gbl>,
Bill_Sanderson DeleteThis @msn.com.plugh.org says...
> I guess I'd say this is more of a curiosity than something I'd see as
> worriesome at this point--these seem like normal system metadata--we just
> don't seem to have a complete list. Have you run a scandisk lately? (just
> wondering if anything about the time to scan issues you mentioned might
> relate to a physical disk issue.)
>
I think the disk hardware is ok. As I mentioned, phase 3 of chkdsk takes
forever, but it finishes. When I run a boot-time chkdsk, including the
phases to scan for/repair bad sectors all is ok.
I'm not really worried about this after running every checking utility I
can find, but the fact that this hunk of invisible storage consumes
about 25% of the entire partition made me wonder what's going on...
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 14) Posted: Mon Nov 13, 2006 3:48 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <uclrFsi#GHA.4472@TK2MSFTNGP05.phx.gbl>,
Bill_Sanderson.RemoveThis@msn.com.plugh.org says...
> I guess I'd say this is more of a curiosity than something I'd see as
> worriesome at this point--these seem like normal system metadata--we just
> don't seem to have a complete list. Have you run a scandisk lately? (just
> wondering if anything about the time to scan issues you mentioned might
> relate to a physical disk issue.)
>
I think the disk hardware is ok. As I mentioned, phase 3 of chkdsk takes
forever, but it finishes. When I run a boot-time chkdsk, including the
phases to scan for/repair bad sectors all is ok.
I'm not really worried about this after running every checking utility I
can find, but the fact that this hunk of invisible storage consumes
about 25% of the entire partition made me wonder what's going on...
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
External
Since: Jan 14, 2006
Posts: 44
|
(Msg. 15) Posted: Mon Nov 13, 2006 3:48 pm
Post subject: Re: Mystery file [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <uclrFsi#GHA.4472@TK2MSFTNGP05.phx.gbl>,
Bill_Sanderson RemoveThis @msn.com.plugh.org says...
> I guess I'd say this is more of a curiosity than something I'd see as
> worriesome at this point--these seem like normal system metadata--we just
> don't seem to have a complete list. Have you run a scandisk lately? (just
> wondering if anything about the time to scan issues you mentioned might
> relate to a physical disk issue.)
>
I think the disk hardware is ok. As I mentioned, phase 3 of chkdsk takes
forever, but it finishes. When I run a boot-time chkdsk, including the
phases to scan for/repair bad sectors all is ok.
I'm not really worried about this after running every checking utility I
can find, but the fact that this hunk of invisible storage consumes
about 25% of the entire partition made me wonder what's going on...
Jason
--
reverse my name in email address >> Stay informed about: Mystery file |
|
| Back to top |
|
| |
|
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum
|
|
|
|
|
|
|
FAQ
Profile
Private Messages
Log in
