GDIPFONTCACHEV1

Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but soon
it came back... I don't have any malware on my pc.

thx

In article ,
, Questioner says...

Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but soon
it came back... I don't have any malware on my pc.

thx


http://www.google.com/search?hl=en&q...=Google+Search

Questioner wrote:
Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but soon
it came back... I don't have any malware on my pc.

thx

You do in fact have malware on your computer, sorry. Learn how to clean
it up:

http://www.elephantboycomputers.com/...moving_Malware

Thanks to Malke, the greatest MVP there ever was. Too bad she has to
live in (or anywhere near) Fresno...

"I was raised on a may-naise farm half-way between Visalia and
Bakersfield. Right outa the eighth-grade mah bruther run over me with a
backhoe. Sparks commenced and mah face caught on fire. Daddy run off the
porch and put it out with a rake. Then I growed up."
~Tim Tomerson

Although I saw the best Loggins & Messina concert ever at the colledge
there... Pablo Cruise opened. Frikkin rocked!

Steve N.

I used adaware and tried to delete this. there was no results and I don't
have f3scrctr.dll, mwsbar.dll, mwsoeplg.dll. Help please

Questioner wrote:
I used adaware and tried to delete this. there was no results and I
don't have f3scrctr.dll, mwsbar.dll, mwsoeplg.dll. Help please

http://www.derkeiler.com/Newsgroups/...4-10/0600.html

Hi Steve,

Well, according to this response, it's not adwa

"umm figured it out..
File is created when I run (ohhh how I hate to admit this)
Hallmark Card Studio
The fonts list in it made me try opening all applications that use fonts and
might induce it's creation and low and behold after a process of trial and
error mystery solved!"

http://www.users.waitrose.com/~archi...EV1dat-i.shtml

Alan

"Steve N." wrote in message
...
Questioner wrote:
Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but
soon it came back... I don't have any malware on my pc. thx

You do in fact have malware on your computer, sorry. Learn how to clean it
up:

http://www.elephantboycomputers.com/...moving_Malware

Thanks to Malke, the greatest MVP there ever was. Too bad she has to live
in (or anywhere near) Fresno...

"I was raised on a may-naise farm half-way between Visalia and
Bakersfield. Right outa the eighth-grade mah bruther run over me with a
backhoe. Sparks commenced and mah face caught on fire. Daddy run off the
porch and put it out with a rake. Then I growed up."
~Tim Tomerson

Although I saw the best Loggins & Messina concert ever at the colledge
there... Pablo Cruise opened. Frikkin rocked!

Steve N.

Hello Questioner,

According to a Pest Patrol analysis page, GDIPFONTCACHEV1 is not a pest.

http://research.pestpatrol.com/Analy...-13_001701.asp

I just checked my own PC, and I have this file in 9 different folders,
including C:\I386.

Some of the create dates for this file match the original manufacture date
of my Dell computer, so if I'm being compromised, it's been going on for 3
1/2 years.

Alan

"Questioner" wrote in message
news
Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but
soon
it came back... I don't have any malware on my pc.

thx

And still _another_ Pest Patrol link, assuring it's not a "pest:"

http://research.pestpatrol.com/Searc...47d82f 90c0fe

Alan

"Questioner" wrote in message
news
Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but
soon
it came back... I don't have any malware on my pc.

thx

That depends on the file version.
LinkGrabber99 (popup adware) uses the same file name as one of it's active
files.

--
Larry Samuels Associate Expert
MS-MVP (2001-2005)
Unofficial FAQ for Windows Server 2003 at
http://pelos.us/SERVER.htm
Expert Zone- www.microsoft.com/windowsxp/expertzone

"Alan" wrote in message
...
And still _another_ Pest Patrol link, assuring it's not a "pest:"


http://research.pestpatrol.com/Searc...47d82f 90c0fe

Alan

"Questioner" wrote in message
news
Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but
soon
it came back... I don't have any malware on my pc.

thx

Hi Larry,

Well, none of the various GDIPFONTCACHEV1.DAT files on my computer seem to
have any file versions associated with it on my PC. When I click Properties
on any of them, there isn't a Version tab available.

In fact, if I right click on _MOST_ of the 755 *.DAT files in my C:\ drive
and check in Properties, I don't have a Version Tab shown.

If any of these GDIPFONTCACHEV1.DAT files were part of a malware program,
wouldn't Windows Defender, Ad-Aware, SpyBot, Pest-Patrol, etc. flag any of
them?

Alan

"Larry Samuels" wrote in message
...
That depends on the file version.
LinkGrabber99 (popup adware) uses the same file name as one of it's active
files.

--
Larry Samuels Associate Expert
MS-MVP (2001-2005)
Unofficial FAQ for Windows Server 2003 at
http://pelos.us/SERVER.htm
Expert Zone- www.microsoft.com/windowsxp/expertzone

"Alan" wrote in message
...
And still _another_ Pest Patrol link, assuring it's not a "pest:"


http://research.pestpatrol.com/Searc...47d82f 90c0fe

Alan

"Questioner" wrote in message
news
Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but
soon
it came back... I don't have any malware on my pc.

thx

I picked up this description off a website which may be of interest to you:

"The gdipfontcachev1.dat file is dangerous to the computer system and your
privacy. It belongs to a parasite, whose payload may differ depending on its
type. While relatively harmless pests may use gdipfontcachev1.dat to degrade
system performance, display commercial advertisements or perform other
annoying actions, really dangerous parasites may use gdipfontcachev1.dat to
damage your system, infect files, corrupt installed software and violate your
privacy. DO NOT open this file!
"The gdipfontcachev1.dat file is installed and used by LinkGrabber 99.
Please note that the gdipfontcachev1.dat file actually may be a fully
legitimate part of the operating system or legitimate software. Often
parasites use files with unsuspicious names, but malicious functionality. You
should always carefully check the file before deleting it. It may not be
related with malware, but can be required by your essential programs to work
properly."



"Questioner" wrote:

Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but soon
it came back... I don't have any malware on my pc.

thx

Hi Tonyo,

It seems as if that's the problem with trying to determine whether this file
is "bad" or not. Depending upon various sources found via Google, opinions
range from its being harmless to your description of its being "dangerous."

This is not just directed at you, but is there some way of anyone knowing
for sure?

Alan

"Tonyo UK" wrote in message
...
I picked up this description off a website which may be of interest to you:

"The gdipfontcachev1.dat file is dangerous to the computer system and your
privacy. It belongs to a parasite, whose payload may differ depending on
its
type. While relatively harmless pests may use gdipfontcachev1.dat to
degrade
system performance, display commercial advertisements or perform other
annoying actions, really dangerous parasites may use gdipfontcachev1.dat
to
damage your system, infect files, corrupt installed software and violate
your
privacy. DO NOT open this file!
"The gdipfontcachev1.dat file is installed and used by LinkGrabber 99.
Please note that the gdipfontcachev1.dat file actually may be a fully
legitimate part of the operating system or legitimate software. Often
parasites use files with unsuspicious names, but malicious functionality.
You
should always carefully check the file before deleting it. It may not be
related with malware, but can be required by your essential programs to
work
properly."



"Questioner" wrote:

Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but
soon
it came back... I don't have any malware on my pc.

thx

Hi Alan,

Sorry, my reply was misleading. I didn't mean check the version tab since
that is easily alterable by editing the metadata.
What I meant was to check the file size/hash against known good versions
installed by legitimate programs.

There is every probability that all the versions on YOUR pc are legit. That
is probably not the case with Questioner's pc since he/she tried to delete
the file. Something must have flagged the file to bring it to their
attention and make them try to delete it.


--
Larry Samuels Associate Expert
MS-MVP (2001-2005)
Unofficial FAQ for Windows Server 2003 at
http://pelos.us/SERVER.htm
Expert Zone- www.microsoft.com/windowsxp/expertzone
"Alan" wrote in message
...
Hi Larry,

Well, none of the various GDIPFONTCACHEV1.DAT files on my computer seem to
have any file versions associated with it on my PC. When I click
Properties on any of them, there isn't a Version tab available.

In fact, if I right click on _MOST_ of the 755 *.DAT files in my C:\ drive
and check in Properties, I don't have a Version Tab shown.

If any of these GDIPFONTCACHEV1.DAT files were part of a malware program,
wouldn't Windows Defender, Ad-Aware, SpyBot, Pest-Patrol, etc. flag any of
them?

Alan

"Larry Samuels" wrote in message
...
That depends on the file version.
LinkGrabber99 (popup adware) uses the same file name as one of it's
active files.

--
Larry Samuels Associate Expert
MS-MVP (2001-2005)
Unofficial FAQ for Windows Server 2003 at
http://pelos.us/SERVER.htm
Expert Zone- www.microsoft.com/windowsxp/expertzone

"Alan" wrote in message
...
And still _another_ Pest Patrol link, assuring it's not a "pest:"


http://research.pestpatrol.com/Searc...47d82f 90c0fe

Alan

"Questioner" wrote in message
news Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once,
but soon
it came back... I don't have any malware on my pc.

thx

It seems to be some kind of component of XML or other coding
language. I have this module on different OS'es (XP, Server 2003).
There appears to be an instance in the \Application Data subfolder
of the profile and another one in the \Local Settings\ tree.
I was searching around for info and read through a certification for
Visual .Net and it made reference to leaving the .Dat after uninstall.
Whatever it's function, it doesn't seem to get accessed/updated as
both copies on my primary machine have quite old "Last Modified"
time stamps. The module is also found on a Windows 2000 instance.


"Alan" wrote in message
...
Hi Tonyo,

It seems as if that's the problem with trying to determine whether this
file is "bad" or not. Depending upon various sources found via Google,
opinions range from its being harmless to your description of its being
"dangerous."

This is not just directed at you, but is there some way of anyone knowing
for sure?

Alan

"Tonyo UK" wrote in message
...
I picked up this description off a website which may be of interest to
you:

"The gdipfontcachev1.dat file is dangerous to the computer system and
your
privacy. It belongs to a parasite, whose payload may differ depending on
its
type. While relatively harmless pests may use gdipfontcachev1.dat to
degrade
system performance, display commercial advertisements or perform other
annoying actions, really dangerous parasites may use gdipfontcachev1.dat
to
damage your system, infect files, corrupt installed software and violate
your
privacy. DO NOT open this file!
"The gdipfontcachev1.dat file is installed and used by LinkGrabber 99.
Please note that the gdipfontcachev1.dat file actually may be a fully
legitimate part of the operating system or legitimate software. Often
parasites use files with unsuspicious names, but malicious functionality.
You
should always carefully check the file before deleting it. It may not be
related with malware, but can be required by your essential programs to
work
properly."



"Questioner" wrote:

Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but
soon
it came back... I don't have any malware on my pc.

thx

Alan wrote:
Hi Steve,

Well, according to this response, it's not adwa

"umm figured it out..
File is created when I run (ohhh how I hate to admit this)
Hallmark Card Studio
The fonts list in it made me try opening all applications that use fonts and
might induce it's creation and low and behold after a process of trial and
error mystery solved!"

http://www.users.waitrose.com/~archi...EV1dat-i.shtml

Alan

"Steve N." wrote in message
...

Questioner wrote:

Does anyone know what GDIPFONTCACHEV1 is? I tried to delete it once, but
soon it came back... I don't have any malware on my pc. thx

You do in fact have malware on your computer, sorry. Learn how to clean it
up:

http://www.elephantboycomputers.com/...moving_Malware

Thanks to Malke, the greatest MVP there ever was. Too bad she has to live
in (or anywhere near) Fresno...

"I was raised on a may-naise farm half-way between Visalia and
Bakersfield. Right outa the eighth-grade mah bruther run over me with a
backhoe. Sparks commenced and mah face caught on fire. Daddy run off the
porch and put it out with a rake. Then I growed up."
~Tim Tomerson

Although I saw the best Loggins & Messina concert ever at the colledge
there... Pablo Cruise opened. Frikkin rocked!

Steve N.




Ok. I stand corrected. When I did a search I got a whole slew of adware
hits on it. Glad you got it figured out and you're safe after all.

There's nothing to be ashamed of for using Hallmark, Alan.

Steve N.