Help - Search - Members - Calendar
Full Version: Forum Game: I'm a File. What do I do?
BleepingComputer.com > General Topics > Forum Games
   
phawgg
OK, this is a re-hash of an ancient network television show that was one of the only options available to watch just before "I Love Lucy" on whatever night it was shown.

WHAT'S MY LINE?

Three mystery contestants would sit at a podium with their name in front of them. All of 'em would claim to be "Joe Doe from Kokamo". The head bleeper , or maybe it was the "Off-Stage Announcer", would read a biography of Joe Doe. Something like this:

"My name is Joe Doe. I have been working as a consultant to the Big-Star (or whatever). I first began this work when I was a high school student and my friend's would ask me for the time of day, blah, blah, blah, etc" Then the "CelebrityGuests" would each take turns asking the three about the story, trying to see who the two "Imposters" were. 30 minutes of questions, commercials & canned laughter later we the Audience would finally find out who the Real Joe Doe was after the CelebrityGuests had voted. (you'd have to have seen Kitty Carlisle sittin' next to Perry Como and giving us her reasons to vote for the guy with the glasses on instead of the other two to truly get a kick out this sorta game I guess tongue.gif )

Anyway, it might be fun. Very few rules. List a file. Provide clues or don't. We the members can then go to work tryin' to figure out just what the heck you do along side of thousands of other files in my computer. If ya' don't know what I do exactly, take a wild guess. Then add another file for us to FigureOut. In the long run, we probably will get more right than wrong... in doing so we'll be doing just about what Microsoft & everybody who makes these files does. laugh.gif

Once again...
  • List a file.
  • next post, try to enlighten us about what that file does. Then:
  • List a new one to figure out.
KoanYorel
OK - I'll try and start this off.

I write things: "Features include: saving/loading drafts, post preview, 100 level undo/redo, menu and colour customisation," ..... (Verbatm quote from the program)

(Hopefully, this is the way you wanted us to do it?)
phawgg
Answer: I'm Fass.exe I'm part of a cool little program and as a program I come with a few other files, too. My download folder, when it's unzipped actually has all of these in it:
  • Fass.exe
  • Fass.exe.manifest
  • uninstall.exe
  • readme.txt
  • insert.txt
  • preview.txt
  • tags.txt
  • template.txt
  • web.txt
  • pawsoft.??? (an internet shortcut)
and since I'm a program that the InstallWizard is used for, and I can end up on your StartMenu, this is what I do to your PC when I'm opened up (confirmed when seen in your TaskManager-->Processes)

File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
File C:\Documents and Settings\phawgg\Local Settings\Temporary Internet Files\Content.IE5\index.dat
File C:\Documents and Settings\phawgg\Cookies\index.dat
File C:\Documents and Settings\phawgg\Local Settings\History\History.IE5\index.dat
File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
File \Device\Afd\Endpoint
File \Device\Udp
File \Device\KsecDD
File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
File C:\Documents and Settings\phawgg\Local Settings\Temp\~DF3F7.tmp
File I:\Program Files\fass
Key HKCU
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Key HKCU\Software\Microsoft\Internet Explorer\Security\P3Global
Key HKCU\Software\Microsoft\Internet Explorer\Security\P3Sites
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Key HKCU\Software\Classes
Key HKLM
Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage
Key HKCR
Key HKCU\Software\Classes
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKU
Key HKCR
Key HKU
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKCR\CLSID
Key HKCR
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKU
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKCR\CLSID
Key HKCU\Software\Classes
Key HKCU\Software\Classes
KeyedEvent \KernelObjects\CritSecOutOfMemoryEvent
Mutant \BaseNamedObjects\_!MSFTHISTORY!_
Mutant \BaseNamedObjects\c:!documents and settings!phawgg!local settings!temporary internet files!content.ie5!
Mutant \BaseNamedObjects\c:!documents and settings!phawgg!cookies!
Mutant \BaseNamedObjects\c:!documents and settings!phawgg!local settings!history!history.ie5!
Mutant \BaseNamedObjects\WininetStartupMutex
Mutant \BaseNamedObjects\WininetConnectionMutex
Mutant \BaseNamedObjects\WininetProxyRegistryMutex
Port \RPC Control\OLE75EDE3F00DDF40D48D1B8C5F6568
Section \BaseNamedObjects\C:_Documents and Settings_phawgg_Local Settings_Temporary Internet Files_Content.IE5_index.dat_65536
Section \BaseNamedObjects\C:_Documents and Settings_phawgg_Local Settings_History_History.IE5_index.dat_49152
Section \BaseNamedObjects\C:_Documents and Settings_phawgg_Cookies_index.dat_32768
Section \BaseNamedObjects\UrlZonesSM_phawgg
Section \BaseNamedObjects\DfSharedHeap603F4
Section \BaseNamedObjects\DFMap0-394237
Section \BaseNamedObjects\DfRoot0000603F4
Section \BaseNamedObjects\__R_000000000007_SMem__
Semaphore \BaseNamedObjects\shell._ie_sessioncount
Semaphore \BaseNamedObjects\shell.{210A4BA0-3AEA-1069-A2D9-08002B30309D}
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Semaphore \BaseNamedObjects\I:?PROGRAM FILES?FASS?FASS.EXE
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Semaphore \BaseNamedObjects\OleDfRoot0000603F4
Thread Fass.exe(620): 616
Thread Fass.exe(620): 1296
Thread Fass.exe(620): 616
Thread Fass.exe(620): 1236
Thread Fass.exe(620): 1236
Thread Fass.exe(620): 1236
Thread Fass.exe(620): 196
Token NT AUTHORITY\NETWORK SERVICE
WindowStation \Windows\WindowStations\WinSta0
WindowStation \Windows\WindowStations\WinSta0

I'm a busy guy. huh?


Question: I'm CONTROL.EXE-013DBFB85.pf I get installed with the OS. I reside in a folder with 83 others, but the number of us there in the folder changes as time goes on. smile.gif
cowsgonemadd3
Now this is a game!!
I think I got it....
Is this it?
Control.exe is a part of the Microsoft Windows operating system and offers accses to the Microsoft Windows control panel.
???

I am very common. All HJT members should know this. carpserv.exe what am I? I cant give any more on this one or it would be told.
DID I do this game right?
KoanYorel
I'm still waiting for some feedback from phawgg as to if we're doing this correctly.

BTW - phawgg had the correct answer on my initial submission. I guess it was just too easy.

I think CGM3 that you only answered 1/2 of phawggs question.

I know that I don't have the file "CONTROL.EXE-013DBFB85.pf" on any of my 4 ' puters.

I think it may actually be a virus, or spyware, or adwawre.... in that form.

Of course, I'm no "HJT TECH" either.....

So - fill us in please phawgg....
cowsgonemadd3
Its no virus. I looked it up! Optional thing. Check out the list...
http://www.liutilities.com/products/wintas...ibrary/Control/

Only half? What did I miss?
KoanYorel
I'm still waiting for phawgg....

You responded to "CONTROL.EXE"

the other half "013DBFB85.pf"...

I've a WIN 95 OS machine, a WIN 98 (piece of junk), and two with XP....

This noted file is not on any of them....(and yes hidden files are shown)

I said, I'm not an HJT Tech...

so me and the "goats" are patiently waiting.....
Grinler
For phawggs :

I am the control.exe loaded into the prefetch folder?
phawgg
QUOTE
I am the control.exe loaded into the prefetch folder?
Dang right you are, Grinler!
QUOTE
Now this is a game!!
I think I got it....
Is this it?  Control.exe is a part of the Microsoft Windows operating system

You are right on it, too, CGM3. This is fun, just answer the previous file (and/or program) any way you can... using any search you want. In my case I came up with a file by just opening my C:\WINDOWS\Prefetch and pickin' the second one listed. Then I counted how many were there for a little clue and extra info/amusement and posted it after I guessed Koan's which, BTW I kinda suspected was Fass from his wonderful clue, but since I have that program all I had to do to find out for sure was go to C:\Program Files\Fass and check it out. Since I also use this free program (a utility, really) from Sysinternals I then went to my I:\Program Files\process explorer and double-clicked it to open it. At the upper pane it shows all programs currently running. I had opened up the Fass so it appeared there. By clicking on it (or any process running) the bottom pane of the process explorer reveals the extra data that I posted for fun.

So,
QUOTE
I'm still waiting for some feedback from phawgg as to if we're doing this correctly.
the game is being played RIGHT. Just post away and play. Since I think I answered the previous file questions, then it's my turn to try and stump the players!!

I'm called accessor.PNF you'd find me next to another file that's my name but it doesn't have those extra three letters behind the *dot* tongue.gif
KoanYorel
Well, I guess I'm the dum-dee-dum one. Because I can't find that file anywhere on my systems. What am I missing? Where is this file located "CONTROL.EXE-013DBFB85.pf "



And "Accessor" is a toolbar that is used to quickly launch programs, open files and Internet URLs with one mouse click on the screen. (It's a piece of junk!! It uses more resources than its worth IMHO.)


"runrabbitrun": I am a DOS program.

Have fun...
phawgg
yeah, I guess I am too, cause I can't find a file called runrabbitrun on mine either. blink.gif
KoanYorel
No you're not phawgg - it's me again!

I'll pull back the "runrabbitrun" file until I get a copy again from the originator to prove what the file does. Appears I've lost my copy disk somewhere amoung the kids game CD's - LOL...


Instead then I'll offer - this item helps one find "things", and the version I have is 5.1.3102.1360

//this probably too easy also//
phawgg
This is supposed to be an easy game. smile.gif
QUOTE
Instead then I'll offer - this item helps one find "things"


I'll offer a file:

notepad.exe what do I do?

or

IKernal an application file. Where am I found?
phawgg
CMG3, I don't think you got an answer on carpsrv.exe... carpserv.exe is installed alongside Zoltrix and Conexant modems and enables the internal modem speaker, which allows you to listen to the dial-up process. This is a non-essential process. Disabling or enabling this is down to user preference

notepad.exe opens notepad & I forget what the other one does. ohmy.gif
berni2k
QUOTE(phawgg @ Nov 6 2004, 12:32 AM) *
IKernal an application file. Where am I found?


A: I am part of the Install Shield windows installer engine and im found in every program that uses this install help tool for installing itself uner windows (putting the right files and right reg entries under the right folders)

Q: I am part of the extra windows features and i can be turned to scientific mode which makes my GUI double so wide :D
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.