Page 1 of 1 [ 12 posts ] 

Claradoon
Supporting Member
Supporting Member

User avatar

Joined: 23 Aug 2006
Gender: Female
Posts: 4,966
Location: Canada

06 Apr 2007, 11:48 am

I just found a text in my computer called
c:\780a3469-78b6-440d-95bc-f63bbf9fc88c

size 2.60 KB
size on disk 4.00 KB

Either it's legit from Symantec or it's totally alien - can you tell me which, and what to do?

It goes like this

<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
- <UPLOADINFO>
<UPLOADDATA USERNAME="780a3469-78b6-440d-95bc-f63bbf9fc88c" PRODUCTID="Sdc User" PRODUCTNAME="supportal" PROBLEMDESCRIPTION="Symantec ASA Index" Severity="normal" />
- <DataCollection>
- <Snapshot Timestamp="20060921153119.000000+000">
- <CIM CIMVERSION="2.0" DTDVERSION="2.0">
- <DECLARATION>
- <DECLGROUP.WITHPATH>
- <VALUE.OBJECTWITHPATH>
- <INSTANCEPATH>
- <NAMESPACEPATH>
<HOST>CHRIS-V2KFGS8KX</HOST>
- <LOCALNAMESPACEPATH>
<NAMESPACE NAME="root/cimv2" />
</LOCALNAMESPACEPATH>
</NAMESPACEPATH>
- <INSTANCENAME CLASSNAME="PCH_Sysinfo">
- <KEYBINDING NAME="SystemID">
<KEYVALUE>{ec176a55-441b-47d8-8002-2755d8bfd0c0}</KEYVALUE>
</KEYBINDING>
</INSTANCENAME>
</INSTANCEPATH>
- <INSTANCE CLASSNAME="PCH_Sysinfo">
- <PROPERTY NAME="ClockSpeed" TYPE="uint32">
<VALUE>1530</VALUE>
</PROPERTY>
- <PROPERTY NAME="OSName" TYPE="string">
<VALUE>Windows XP 5.1</VALUE>
</PROPERTY>
- <PROPERTY NAME="OSVersion" TYPE="string">
<VALUE>build 2600</VALUE>
</PROPERTY>
- <PROPERTY NAME="Processor" TYPE="string">
<VALUE>AuthenticAMD</VALUE>
</PROPERTY>
- <PROPERTY NAME="RAM" TYPE="uint64">
<VALUE>223</VALUE>
</PROPERTY>
- <PROPERTY NAME="SwapFile" TYPE="string">
<VALUE>C:\pagefile.sys 192 MB Free</VALUE>
</PROPERTY>
- <PROPERTY NAME="SystemID" TYPE="string">
<VALUE>{ec176a55-441b-47d8-8002-2755d8bfd0c0}</VALUE>
</PROPERTY>
- <PROPERTY NAME="WindowsDirectory" TYPE="string">
<VALUE>C:\WINDOWS</VALUE>

BIG SNIP to save space here

<VALUE>01c5e0baaa6bc7baffffffff</VALUE>
</PROPERTY>
- <PROPERTY NAME="FileModifiedTimeFormated" TYPE="DateTime">
<VALUE>11/3/2005 04:07 PM</VALUE>
</PROPERTY>
- <PROPERTY NAME="Filename" TYPE="string">
<VALUE>norton.exe</VALUE>
</PROPERTY>
- <PROPERTY NAME="FilePath" TYPE="string">
<VALUE>C:\Program Files\Norton SystemWorks\Norton Utilities\</VALUE>
</PROPERTY>
- <PROPERTY NAME="FileSize" TYPE="uint64">
<VALUE>46680</VALUE>
</PROPERTY>
- <PROPERTY NAME="FileVersion" TYPE="string">
<VALUE>19.0.1.8</VALUE>
</PROPERTY>
- <PROPERTY NAME="ProductName" TYPE="string">
<VALUE>Norton Utilities for Windows</VALUE>
</PROPERTY>
- <PROPERTY NAME="ProductVersion" TYPE="string">
<VALUE>19.0.1.8</VALUE>
</PROPERTY>
</INSTANCE>
</VALUE.OBJECTWITHPATH>
- <VALUE.OBJECTWITHPATH>
- <INSTANCEPATH>
- <NAMESPACEPATH>
<HOST>CHRIS-V2K (etc)</HOST>
- <LOCALNAMESPACEPATH>
<NAMESPACE NAME="root/symantec" />
</LOCALNAMESPACEPATH>
</NAMESPACEPATH>
- <INSTANCENAME CLASSNAME="LiveUpdate_Info">
- <KEYBINDING NAME="Filename">
<KEYVALUE>LUALL.EXE</KEYVALUE>
</KEYBINDING>
</INSTANCENAME>
</INSTANCEPATH>
- <INSTANCE CLASSNAME="LiveUpdate_Info">
- <PROPERTY NAME="CompanyName" TYPE="string">
<VALUE>Symantec Corporation</VALUE>
</PROPERTY>
- <PROPERTY NAME="FileDescription" TYPE="string">
<VALUE>LiveUpdate Wizard</VALUE>
</PROPERTY>
- <PROPERTY NAME="FileModifiedTime" TYPE="DateTime">
<VALUE>01c6786e57795d28ffffffff</VALUE>
</PROPERTY>
- <PROPERTY NAME="FileModifiedTimeFormated" TYPE="DateTime">
<VALUE>5/15/2006 06:24 PM</VALUE>
</PROPERTY>
- <PROPERTY NAME="Filename" TYPE="string">
<VALUE>LUALL.EXE</VALUE>
</PROPERTY>
- <PROPERTY NAME="FilePath" TYPE="string">
<VALUE>C:\Program Files\Symantec\LiveUpdate\</VALUE>
</PROPERTY>
- <PROPERTY NAME="FileSize" TYPE="uint64">
<VALUE>1267392</VALUE>
</PROPERTY>
- <PROPERTY NAME="FileVersion" TYPE="string">
<VALUE>3.0.0.166</VALUE>
</PROPERTY>
- <PROPERTY NAME="ProductName" TYPE="string">
<VALUE>LiveUpdate</VALUE>
</PROPERTY>
- <PROPERTY NAME="ProductVersion" TYPE="string">
<VALUE>3.0.0.166</VALUE>
</PROPERTY>
</INSTANCE>
</VALUE.OBJECTWITHPATH>
</DECLGROUP.WITHPATH>
</DECLARATION>
</CIM>
</Snapshot>
</DataCollection>
</UPLOADINFO>



Lygophile
Blue Jay
Blue Jay

User avatar

Joined: 22 Feb 2006
Age: 44
Gender: Male
Posts: 77
Location: Somewhere in Vermont

06 Apr 2007, 7:40 pm

I'm not certain but that looks like a bunch of non-specific data about your computer and your version of norton anti-virus (or some other symantec product) which was probably submitted to symantec when it crashed. A lot of programs nowadays will send data like this to the manufacturer when there's a problem so that they can know what caused the crash and hopefully fix the problem for future versions.
I wouldn't worry about it too much, I don't see anything in there that could be used to personally identify you. It's probably safe to delete the file.



lau
Veteran
Veteran

User avatar

Joined: 17 Jun 2006
Age: 76
Gender: Male
Posts: 9,798
Location: Somerset UK

06 Apr 2007, 10:15 pm

Just delete it. It's pretty old (September 21st, last year, as per <Snapshot Timestamp="20060921153119.000000+000">). It's an old text file (actually XML, eXtendable Markup Language, but they don't seem to have tacked ".xml" on as the file extension, or you haven't shown it).

I find it distinctly annoying when programs just assume they can stuff files straight into the root of your "C" drive. There are proper places to put temporary files. Yuck. This is Symantec for you. Remove Norton. Install AVG free <http://free.grisoft.com> or Avast! <http://www.avast.com/eng/avast_4_home.html>. I've used the former for years.


_________________
"Striking up conversations with strangers is an autistic person's version of extreme sports." Kamran Nazeer


matt271
Veteran
Veteran

User avatar

Joined: 27 Jan 2007
Gender: Male
Posts: 982
Location: Australia

06 Apr 2007, 10:20 pm

some progs use C:\ as a temp dir??
what if u have no C:\, either purposely changed drive letters or removed/deleted/converted it for some other reason.



lau
Veteran
Veteran

User avatar

Joined: 17 Jun 2006
Age: 76
Gender: Male
Posts: 9,798
Location: Somerset UK

06 Apr 2007, 10:31 pm

matt271 wrote:
some progs use C:\ as a temp dir??
what if u have no C:\, either purposely changed drive letters or removed/deleted/converted it for some other reason.

Well, in that case, the programs have some trouble. They fall over.

My two XPs are on drive E and drive... J? I do have a C drive, but it's FAT, so I can access it easily from Linux. It has the ntldr stuff on it, plus bootpart bits and bobs. Quite clean, as I look at it from here. 25 partitions in all, amongst my three HDDs.


_________________
"Striking up conversations with strangers is an autistic person's version of extreme sports." Kamran Nazeer


Claradoon
Supporting Member
Supporting Member

User avatar

Joined: 23 Aug 2006
Gender: Female
Posts: 4,966
Location: Canada

07 Apr 2007, 8:51 am

Thank you - I deleted it. I'm too chicken to switch from Norton - also maybe it's cybertwit-friendly?



lau
Veteran
Veteran

User avatar

Joined: 17 Jun 2006
Age: 76
Gender: Male
Posts: 9,798
Location: Somerset UK

07 Apr 2007, 9:21 am

Claradoon wrote:
Thank you - I deleted it. I'm too chicken to switch from Norton - also maybe it's cybertwit-friendly?

No. I my experience, as soon as you have any sort of glitch with a Norton setup, it turns immediately into a disaster area. That especially applies to their "wonderful" system backup ideas. I had awful trouble extricating a user from that one, where their startup invoked some horrendous c*ck-up effect from the weird drive imaging stuff and meant they couldn't even start in safe mode. A bit of judicious Norton installation file wrecking, using a Linux live CD, and I got it all back working - sans Norton.

AVG, for instance, does what it says on the packet. It stops viruses. It doesn't try to make your sandwiches.


_________________
"Striking up conversations with strangers is an autistic person's version of extreme sports." Kamran Nazeer


DingoDv
Veteran
Veteran

User avatar

Joined: 1 Apr 2007
Age: 38
Gender: Male
Posts: 507
Location: East Anglia, UK

07 Apr 2007, 9:23 am

It would be nice if it did make sandwiches though! I wouldn't have to leave my compy nearly as often then



lau
Veteran
Veteran

User avatar

Joined: 17 Jun 2006
Age: 76
Gender: Male
Posts: 9,798
Location: Somerset UK

07 Apr 2007, 9:38 am

Now there's a suggestion for Google's next April Fool's Day joke... the software to convert your computer into a toasted sandwich maker.


_________________
"Striking up conversations with strangers is an autistic person's version of extreme sports." Kamran Nazeer


DingoDv
Veteran
Veteran

User avatar

Joined: 1 Apr 2007
Age: 38
Gender: Male
Posts: 507
Location: East Anglia, UK

07 Apr 2007, 9:42 am

you could use the flatbed scanner for that lau :twisted:



computerlove
Veteran
Veteran

User avatar

Joined: 10 Jul 2006
Age: 124
Gender: Male
Posts: 5,791

08 Apr 2007, 12:14 am

don't know how tech-savvy you are, but if you feel confident, install Spybot S&D and do a scan
http://www.spybot.info/

also SpywareBlaster
http://www.javacoolsoftware.com/spywareblaster.html
it's basically a list that will block "malware(bad)" sites

if you have any questions just ask :)


_________________
One of God's own prototypes. Some kind of high powered mutant never even considered for mass production. Too weird to live, and too rare to die.


Gilb
Veteran
Veteran

User avatar

Joined: 4 Jan 2007
Gender: Male
Posts: 1,214

08 Apr 2007, 1:35 pm

Claradoon wrote:
I just found a text in my computer called
c:\780a3469-78b6-440d-95bc-f63bbf9fc88c

size 2.60 KB
size on disk 4.00 KB

Either it's legit from Symantec or it's totally alien - can you tell me which, and what to do?

It goes like this

it is probably just a temporary file and it seems pretty old so just delete it.

lollollol
Symantec are evil and incompetent registry nukes.
(rolling on the floor whist trying to forward the message to doordoctor)