Unknown File in Temp Folder

[ReneeFox]

Okay, this has been driving me crazy enough to attempt to write a program to
tell me what application has this file open. Every other time I reboot my
machine, a strange-looking file is in my c:\documents and settings\name\local
settings\temp directory. The beginning always looks the same, but the ending
varies:

sqlite_noipgL7HQxaZ2M6

There is no file extension, and I haven't ever seen it above 0 bytes. Is
there a utility out there somewhere that can tell which applications have
WHAT files open? Used to be stuff like that in Resource Kits, but I haven't
seen one for XP Pro. This filename just looks too suspicious to me, and I
can't delete it because it's open. I doubt SQL has it open, because I have
shut down those services. I only have the desktop engines anyway. I can't
afford SMS; it would be overkill for a single computer, although I do have a
server with a much older O.S. and an old SMS that I never bothered to learn
how to configure correctly. I don't have my server running most of the time,
but I don't think it will be able to diagnose Windows XP Professional.

[Rick \Nutcase\ Rogers]

Hi,

Have you seen http://www.sqlite.org ? Looks like something is loading this
database product. The file you are seeing is just a temp placement file it
creates.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"ReneeFox" > wrote in message
...
> Okay, this has been driving me crazy enough to attempt to write a program
> to
> tell me what application has this file open. Every other time I reboot my
> machine, a strange-looking file is in my c:\documents and
> settings\name\local
> settings\temp directory. The beginning always looks the same, but the
> ending
> varies:
>
> sqlite_noipgL7HQxaZ2M6
>
> There is no file extension, and I haven't ever seen it above 0 bytes. Is
> there a utility out there somewhere that can tell which applications have
> WHAT files open? Used to be stuff like that in Resource Kits, but I
> haven't
> seen one for XP Pro. This filename just looks too suspicious to me, and I
> can't delete it because it's open. I doubt SQL has it open, because I
> have
> shut down those services. I only have the desktop engines anyway. I
> can't
> afford SMS; it would be overkill for a single computer, although I do have
> a
> server with a much older O.S. and an old SMS that I never bothered to
> learn
> how to configure correctly. I don't have my server running most of the
> time,
> but I don't think it will be able to diagnose Windows XP Professional.

[S.Sengupta]

It seems it has come from SQLite.

regards,
ssg MS-MVP


ReneeFox wrote:

> Okay, this has been driving me crazy enough to attempt to write a program to
> tell me what application has this file open. Every other time I reboot my
> machine, a strange-looking file is in my c:\documents and settings\name\local
> settings\temp directory. The beginning always looks the same, but the ending
> varies:
>
> sqlite_noipgL7HQxaZ2M6
>
> There is no file extension, and I haven't ever seen it above 0 bytes. Is
> there a utility out there somewhere that can tell which applications have
> WHAT files open? Used to be stuff like that in Resource Kits, but I haven't
> seen one for XP Pro. This filename just looks too suspicious to me, and I
> can't delete it because it's open. I doubt SQL has it open, because I have
> shut down those services. I only have the desktop engines anyway. I can't
> afford SMS; it would be overkill for a single computer, although I do have a
> server with a much older O.S. and an old SMS that I never bothered to learn
> how to configure correctly. I don't have my server running most of the time,
> but I don't think it will be able to diagnose Windows XP Professional.

[da_test]

On Sat, 07 May 2005 08:44:26 +0530, "S.Sengupta" >
wrote:

>It seems it has come from SQLite.
>
>regards,
>ssg MS-MVP
>
>
>ReneeFox wrote:
>
>> Okay, this has been driving me crazy enough to attempt to write a program to
>> tell me what application has this file open. Every other time I reboot my
>> machine, a strange-looking file is in my c:\documents and settings\name\local
>> settings\temp directory. The beginning always looks the same, but the ending
>> varies:
>>
>> sqlite_noipgL7HQxaZ2M6
>>
>> There is no file extension, and I haven't ever seen it above 0 bytes. Is
>> there a utility out there somewhere that can tell which applications have
>> WHAT files open? Used to be stuff like that in Resource Kits, but I haven't
>> seen one for XP Pro. This filename just looks too suspicious to me, and I
>> can't delete it because it's open. I doubt SQL has it open, because I have
>> shut down those services. I only have the desktop engines anyway. I can't
>> afford SMS; it would be overkill for a single computer, although I do have a
>> server with a much older O.S. and an old SMS that I never bothered to learn
>> how to configure correctly. I don't have my server running most of the time,
>> but I don't think it will be able to diagnose Windows XP Professional.
There's probably quite a few progs using the freeware database SQlite.
One I use that incorporates SQlite is BNR3, the Usenet newsreader.
I get the same temp files when BNR3 is active.
Dave

[ReneeFox]

Well, that would be fine, but I didn't install SQLite and da_test, how do you
know that BNR3 uses SQLite? I'm trying to think if I've installed anything
lately. There's nothing new in my list of installed programs nor MSCONFIG.
Actually, I've run some things, and installed a few programs trying to trace
this file. Why is it so sneaky? I did a search on anything beginning with
SQLite in both my registry and on my hard-drive and didn't find anything but
that file. Thank you very much for pointing me to the website, Rick; I'll
read up on it. Any utilities that can check open files?

"S.Sengupta" wrote:

> It seems it has come from SQLite.
>
> regards,
> ssg MS-MVP
>
>
> ReneeFox wrote:
>
> > Okay, this has been driving me crazy enough to attempt to write a program to
> > tell me what application has this file open. Every other time I reboot my
> > machine, a strange-looking file is in my c:\documents and settings\name\local
> > settings\temp directory. The beginning always looks the same, but the ending
> > varies:
> >
> > sqlite_noipgL7HQxaZ2M6
> >
> > There is no file extension, and I haven't ever seen it above 0 bytes. Is
> > there a utility out there somewhere that can tell which applications have
> > WHAT files open? Used to be stuff like that in Resource Kits, but I haven't
> > seen one for XP Pro. This filename just looks too suspicious to me, and I
> > can't delete it because it's open. I doubt SQL has it open, because I have
> > shut down those services. I only have the desktop engines anyway. I can't
> > afford SMS; it would be overkill for a single computer, although I do have a
> > server with a much older O.S. and an old SMS that I never bothered to learn
> > how to configure correctly. I don't have my server running most of the time,
> > but I don't think it will be able to diagnose Windows XP Professional.
>

[ReneeFox]

Well, that would be fine, but I didn't install SQLite and da_test, how do you
know that BNR3 uses SQLite? I'm trying to think if I've installed anything
lately. There's nothing new in my list of installed programs nor MSCONFIG.
Actually, I've run some things, and installed a few programs trying to trace
this file. Why is it so sneaky? I did a search on anything beginning with
SQLite in both my registry and on my hard-drive and didn't find anything but
that file. Thank you very much for pointing me to the website, Rick; I'll
read up on it. Any utilities that can check open files?

"S.Sengupta" wrote:

> It seems it has come from SQLite.
>
> regards,
> ssg MS-MVP
>
>
> ReneeFox wrote:
>
> > Okay, this has been driving me crazy enough to attempt to write a program to
> > tell me what application has this file open. Every other time I reboot my
> > machine, a strange-looking file is in my c:\documents and settings\name\local
> > settings\temp directory. The beginning always looks the same, but the ending
> > varies:
> >
> > sqlite_noipgL7HQxaZ2M6
> >
> > There is no file extension, and I haven't ever seen it above 0 bytes. Is
> > there a utility out there somewhere that can tell which applications have
> > WHAT files open? Used to be stuff like that in Resource Kits, but I haven't
> > seen one for XP Pro. This filename just looks too suspicious to me, and I
> > can't delete it because it's open. I doubt SQL has it open, because I have
> > shut down those services. I only have the desktop engines anyway. I can't
> > afford SMS; it would be overkill for a single computer, although I do have a
> > server with a much older O.S. and an old SMS that I never bothered to learn
> > how to configure correctly. I don't have my server running most of the time,
> > but I don't think it will be able to diagnose Windows XP Professional.
>

[ReneeFox]

Sorry about the double-post. Stupid MSN Browser said I had an error posting
the reply when it did so anyway.

"ReneeFox" wrote:

> Okay, this has been driving me crazy enough to attempt to write a program to
> tell me what application has this file open. Every other time I reboot my
> machine, a strange-looking file is in my c:\documents and settings\name\local
> settings\temp directory. The beginning always looks the same, but the ending
> varies:
>
> sqlite_noipgL7HQxaZ2M6
>
> There is no file extension, and I haven't ever seen it above 0 bytes. Is
> there a utility out there somewhere that can tell which applications have
> WHAT files open? Used to be stuff like that in Resource Kits, but I haven't
> seen one for XP Pro. This filename just looks too suspicious to me, and I
> can't delete it because it's open. I doubt SQL has it open, because I have
> shut down those services. I only have the desktop engines anyway. I can't
> afford SMS; it would be overkill for a single computer, although I do have a
> server with a much older O.S. and an old SMS that I never bothered to learn
> how to configure correctly. I don't have my server running most of the time,
> but I don't think it will be able to diagnose Windows XP Professional.

[ReneeFox]

Hmmmmmm. I read a little about sqlite, but it still doesn't tell me what
process has that file open. By the looks of sqlite, since it's just some
embedded C library, anything could be using it, no? It mentioned Linux, so I
remembered seeing Linux in my Internet Connections. It was some kind of
bridge that I saw once and didn't know what it was, but apparently, it
appeared when I added the QoS Packet Scheduler protocol to my TCP/IP
connection. I made it go away, but the file is still there and open by
something. Anymore clues? There's no unusual-looking programs in my
task-manager, and I keep a close eye on my computer; very close.

I have a process utility that I found, but it's clutzy, and doesn't display
open files for the processes it shows; plus it bombs when I click certain
buttons. I also have a file open utility program. It runs in realtime, and
doesn't pay attention to anything that was created before I run the utility.

I am having some very strange behavior with viruses being attached to the
server I use email for (MSN!!!). When I called a tech about it, from my
provider, he blew it off because my Norton Antivirus keeps catching it when
it happens. I told him that I didn't think I should just ignore it, even
though Norton catches it; what if it doesn't one day for whatever reason?
It's that new virus called soberworm, and because my provider isn't MSN, MSN
has put a wedge between customers and that provider allowing us to use MSN
Premium. Can't talk to MSN directly. Isn't that some sh_t?

"Rick "Nutcase" Rogers" wrote:

> Hi,
>
> Have you seen http://www.sqlite.org ? Looks like something is loading this
> database product. The file you are seeing is just a temp placement file it
> creates.
>
> --
> Best of Luck,
>
> Rick Rogers, aka "Nutcase" - Microsoft MVP
> http://mvp.support.microsoft.com/
> Associate Expert - WindowsXP Expert Zone
> www.microsoft.com/windowsxp/expertzone
> Windows help - www.rickrogers.org
>
> "ReneeFox" > wrote in message
> ...
> > Okay, this has been driving me crazy enough to attempt to write a program
> > to
> > tell me what application has this file open. Every other time I reboot my
> > machine, a strange-looking file is in my c:\documents and
> > settings\name\local
> > settings\temp directory. The beginning always looks the same, but the
> > ending
> > varies:
> >
> > sqlite_noipgL7HQxaZ2M6
> >
> > There is no file extension, and I haven't ever seen it above 0 bytes. Is
> > there a utility out there somewhere that can tell which applications have
> > WHAT files open? Used to be stuff like that in Resource Kits, but I
> > haven't
> > seen one for XP Pro. This filename just looks too suspicious to me, and I
> > can't delete it because it's open. I doubt SQL has it open, because I
> > have
> > shut down those services. I only have the desktop engines anyway. I
> > can't
> > afford SMS; it would be overkill for a single computer, although I do have
> > a
> > server with a much older O.S. and an old SMS that I never bothered to
> > learn
> > how to configure correctly. I don't have my server running most of the
> > time,
> > but I don't think it will be able to diagnose Windows XP Professional.
>
>
>

[da_test]

On Fri, 6 May 2005 22:14:01 -0700, "ReneeFox"
> wrote:

>Well, that would be fine, but I didn't install SQLite and da_test, how do you
>know that BNR3 uses SQLite? I'm trying to think if I've installed anything
>lately. There's nothing new in my list of installed programs nor MSCONFIG.
>Actually, I've run some things, and installed a few programs trying to trace
>this file. Why is it so sneaky? I did a search on anything beginning with
>SQLite in both my registry and on my hard-drive and didn't find anything but
>that file. Thank you very much for pointing me to the website, Rick; I'll
>read up on it. Any utilities that can check open files?
>
ReneeFox,
I'm a long time user of the BNR programs.
Besides, BNR3 has the sqlite dll file in it's program folder !

Use the search companion, and search the system partition
for sqlite - the folder that it is found in may help identify the
user.
regards,
Dave

[Rock]

ReneeFox wrote:

> Well, that would be fine, but I didn't install SQLite and da_test, how do you
> know that BNR3 uses SQLite? I'm trying to think if I've installed anything
> lately. There's nothing new in my list of installed programs nor MSCONFIG.
> Actually, I've run some things, and installed a few programs trying to trace
> this file. Why is it so sneaky? I did a search on anything beginning with
> SQLite in both my registry and on my hard-drive and didn't find anything but
> that file. Thank you very much for pointing me to the website, Rick; I'll
> read up on it. Any utilities that can check open files?
>
> "S.Sengupta" wrote:
>
>
>>It seems it has come from SQLite.
>>
>>regards,
>>ssg MS-MVP
>>
>>
>>ReneeFox wrote:
>>
>>
>>>Okay, this has been driving me crazy enough to attempt to write a program to
>>>tell me what application has this file open. Every other time I reboot my
>>>machine, a strange-looking file is in my c:\documents and settings\name\local
>>>settings\temp directory. The beginning always looks the same, but the ending
>>>varies:
>>>
>>>sqlite_noipgL7HQxaZ2M6
>>>
>>>There is no file extension, and I haven't ever seen it above 0 bytes. Is
>>>there a utility out there somewhere that can tell which applications have
>>>WHAT files open? Used to be stuff like that in Resource Kits, but I haven't
>>>seen one for XP Pro. This filename just looks too suspicious to me, and I
>>>can't delete it because it's open. I doubt SQL has it open, because I have
>>>shut down those services. I only have the desktop engines anyway. I can't
>>>afford SMS; it would be overkill for a single computer, although I do have a
>>>server with a much older O.S. and an old SMS that I never bothered to learn
>>>how to configure correctly. I don't have my server running most of the time,
>>>but I don't think it will be able to diagnose Windows XP Professional.
>>

Look at filemon from www.sysinternals.com

--
Rock
MS MVP Windows - Shell/User

[Rick \Nutcase\ Rogers]

Hi,

Something you installed is using it, it's just a matter of isolating "what".
You can either troubleshoot with msconfig:

How to Troubleshoot By Using the Msconfig Utility in Windows XP [Q310560]
http://support.microsoft.com/?kbid=310560

Or you can use a process watcher, try filemon here:
http://www.sysinternals.com/ntw2k/utilities.shtml

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"ReneeFox" > wrote in message
...
> Hmmmmmm. I read a little about sqlite, but it still doesn't tell me what
> process has that file open. By the looks of sqlite, since it's just some
> embedded C library, anything could be using it, no? It mentioned Linux,
> so I
> remembered seeing Linux in my Internet Connections. It was some kind of
> bridge that I saw once and didn't know what it was, but apparently, it
> appeared when I added the QoS Packet Scheduler protocol to my TCP/IP
> connection. I made it go away, but the file is still there and open by
> something. Anymore clues? There's no unusual-looking programs in my
> task-manager, and I keep a close eye on my computer; very close.
>
> I have a process utility that I found, but it's clutzy, and doesn't
> display
> open files for the processes it shows; plus it bombs when I click certain
> buttons. I also have a file open utility program. It runs in realtime,
> and
> doesn't pay attention to anything that was created before I run the
> utility.
>
> I am having some very strange behavior with viruses being attached to the
> server I use email for (MSN!!!). When I called a tech about it, from my
> provider, he blew it off because my Norton Antivirus keeps catching it
> when
> it happens. I told him that I didn't think I should just ignore it, even
> though Norton catches it; what if it doesn't one day for whatever reason?
> It's that new virus called soberworm, and because my provider isn't MSN,
> MSN
> has put a wedge between customers and that provider allowing us to use MSN
> Premium. Can't talk to MSN directly. Isn't that some sh_t?
>
> "Rick "Nutcase" Rogers" wrote:
>
>> Hi,
>>
>> Have you seen http://www.sqlite.org ? Looks like something is loading
>> this
>> database product. The file you are seeing is just a temp placement file
>> it
>> creates.
>>
>> --
>> Best of Luck,
>>
>> Rick Rogers, aka "Nutcase" - Microsoft MVP
>> http://mvp.support.microsoft.com/
>> Associate Expert - WindowsXP Expert Zone
>> www.microsoft.com/windowsxp/expertzone
>> Windows help - www.rickrogers.org
>>
>> "ReneeFox" > wrote in message
>> ...
>> > Okay, this has been driving me crazy enough to attempt to write a
>> > program
>> > to
>> > tell me what application has this file open. Every other time I reboot
>> > my
>> > machine, a strange-looking file is in my c:\documents and
>> > settings\name\local
>> > settings\temp directory. The beginning always looks the same, but the
>> > ending
>> > varies:
>> >
>> > sqlite_noipgL7HQxaZ2M6
>> >
>> > There is no file extension, and I haven't ever seen it above 0 bytes.
>> > Is
>> > there a utility out there somewhere that can tell which applications
>> > have
>> > WHAT files open? Used to be stuff like that in Resource Kits, but I
>> > haven't
>> > seen one for XP Pro. This filename just looks too suspicious to me,
>> > and I
>> > can't delete it because it's open. I doubt SQL has it open, because I
>> > have
>> > shut down those services. I only have the desktop engines anyway. I
>> > can't
>> > afford SMS; it would be overkill for a single computer, although I do
>> > have
>> > a
>> > server with a much older O.S. and an old SMS that I never bothered to
>> > learn
>> > how to configure correctly. I don't have my server running most of the
>> > time,
>> > but I don't think it will be able to diagnose Windows XP Professional.
>>
>>
>>

[ReneeFox]

You guys, this is really getting funny now. I said I searched both my
hard-drive and registry for sqlite and found nothing. And, guess what?
FileMon is what I'm using to try to catch anything using the file, but it
hasn't happened yet. I suppose I would have to start FileMon before that
file gets created, because there's little-to-no activity against the file;
it's just sitting there open with NOTHING in it. I see all sorts of other
things from FileMon, but not whatever has that file open. I have no folder
for sqlite; I wonder why? I do have tons of Microsoft products installed,
because I'm in school for my IT degree, and have lots of programs. My
provider suggested I uninstall my DSL modem and see if it's the one that
created the file. Oh well! The hunt continues...

"S.Sengupta" wrote:

> It seems it has come from SQLite.
>
> regards,
> ssg MS-MVP
>
>
> ReneeFox wrote:
>
> > Okay, this has been driving me crazy enough to attempt to write a program to
> > tell me what application has this file open. Every other time I reboot my
> > machine, a strange-looking file is in my c:\documents and settings\name\local
> > settings\temp directory. The beginning always looks the same, but the ending
> > varies:
> >
> > sqlite_noipgL7HQxaZ2M6
> >
> > There is no file extension, and I haven't ever seen it above 0 bytes. Is
> > there a utility out there somewhere that can tell which applications have
> > WHAT files open? Used to be stuff like that in Resource Kits, but I haven't
> > seen one for XP Pro. This filename just looks too suspicious to me, and I
> > can't delete it because it's open. I doubt SQL has it open, because I have
> > shut down those services. I only have the desktop engines anyway. I can't
> > afford SMS; it would be overkill for a single computer, although I do have a
> > server with a much older O.S. and an old SMS that I never bothered to learn
> > how to configure correctly. I don't have my server running most of the time,
> > but I don't think it will be able to diagnose Windows XP Professional.
>