"Prefetch" application files legitimate?

[nailer]

In C/Windows/Prefetch are many application files, encrypted, with file
extension .pf
Windows is unable to open these files, with names like
NDETECT.EXE-16E64095.pf and DLAYUPDT.EXE-04F1628D.pf and
UNWISE.EXE-18CAEA7A.pf
At times Norton Monitor alerts that one of these files,
IEXPLORE.EXE-27122324.pf is trying to access the internet, is of medium risk,
and suggests it be blocked. Blocking it (repeatedly) causes the desired
Internet Explorer page to not open.

Are these Prefetch files a legitmate part of Windows XP?

[Carey Frisch [MVP]]

The Prefetch folder contains information regarding the optimal disk layout
of program files so they launch quicker. You may delete all those files,
but XP will rebuild that folder so that your computer runs as efficiently
as possible. After deleting the prefetch files, your computer's performance
will suffer slightly until the prefetch folder is rebuilt. It takes approximately
three computer reboots to properly rebuild the prefetch folder contents.

Windows XP's Built-In Optimization
http://www.extremetech.com/article2/0,3973,1149277,00.asp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

-------------------------------------------------------------------------------------

"nailer" wrote:

| In C/Windows/Prefetch are many application files, encrypted, with file
| extension .pf
| Windows is unable to open these files, with names like
| NDETECT.EXE-16E64095.pf and DLAYUPDT.EXE-04F1628D.pf and
| UNWISE.EXE-18CAEA7A.pf
| At times Norton Monitor alerts that one of these files,
| IEXPLORE.EXE-27122324.pf is trying to access the internet, is of medium risk,
| and suggests it be blocked. Blocking it (repeatedly) causes the desired
| Internet Explorer page to not open.
|
| Are these Prefetch files a legitmate part of Windows XP?

[nailer]

Many thanks. This means internet access from the Prefetch folder should be
allowed?

"Carey Frisch [MVP]" wrote:

> The Prefetch folder contains information regarding the optimal disk layout
> of program files so they launch quicker. You may delete all those files,
> but XP will rebuild that folder so that your computer runs as efficiently
> as possible. After deleting the prefetch files, your computer's performance
> will suffer slightly until the prefetch folder is rebuilt. It takes approximately
> three computer reboots to properly rebuild the prefetch folder contents.
>
> Windows XP's Built-In Optimization
> http://www.extremetech.com/article2/0,3973,1149277,00.asp
>
> --
> Carey Frisch
> Microsoft MVP
> Windows XP - Shell/User
>
> Be Smart! Protect Your PC!
> http://www.microsoft.com/athome/security/protect/default.aspx
>
> -------------------------------------------------------------------------------------
>
> "nailer" wrote:
>
> | In C/Windows/Prefetch are many application files, encrypted, with file
> | extension .pf
> | Windows is unable to open these files, with names like
> | NDETECT.EXE-16E64095.pf and DLAYUPDT.EXE-04F1628D.pf and
> | UNWISE.EXE-18CAEA7A.pf
> | At times Norton Monitor alerts that one of these files,
> | IEXPLORE.EXE-27122324.pf is trying to access the internet, is of medium risk,
> | and suggests it be blocked. Blocking it (repeatedly) causes the desired
> | Internet Explorer page to not open.
> |
> | Are these Prefetch files a legitmate part of Windows XP?
>

[Robert Moir]

nailer wrote:
> Many thanks. This means internet access from the Prefetch folder
> should be allowed?

I would say not. The prefetch folder is information from Windows to Windows
on how best the hard disk should be laid out to ensure stuff loads quickly
when you ask for it. No executable code.

Either there is more to the file you are getting errors on than meets the
eye - e.g. its malware of some kind pretending to be a prefetch file, OR,
Norton is doing what it does best and false alarming on something innocent.


--
--
Rob Moir
Website - http://www.robertmoir.co.uk
Virtual PC 2004 FAQ - http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html
Kazaa - Software update services for your Viruses and Spyware.