BleepingComputer.com: ati2evxx.exe

I noticed 2 instances of this file in my task manager. So I searched for the file and got the following results (I'm running XP Media Center SP 3):

1 instance in C:\i386, with a Modified date that precedes the Created date (don't know if this matters or not).

1 instance in C:\WINDOWS\system32

1 instance in C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles

1 instance in C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles

I also have this file:

ATI2EVXX.EXE-07A42849.pf in C:\WINDOWS\Prefetch

So my questions are:

What is this file, what does it do, why do I have several instances of it, should I be concerned, and what, if anything, should I do about it?

If this has been discussed here already, please direct me to the pertinent thread. Thanks!

James

ATI2EVXX.EXE is process of ATI graphic card.

Commonly you have 2 ATI2EVXX.EXE in your task manager

They are Windows Files, safe, leave them alone.

Be very careful in deleting Windows Files, it could muck up your System, BIG TIME!

Abacus 7, on Dec 28 2009, 02:39 AM, said:

Thanks, folks! I know that deleting Windows files can screw stuff up fast. That's why I consulted you nice folks.

I am very curious, though, about how a file can have a Modified date that precedes its Created date.

This post has been edited by jtphenom: 28 December 2009 - 07:08 PM

I think I'd check the CMOS time/battery.

Files reflect the dates which are on that clock.

When the CMOS battery starts to weaken, a common symptom is that the system clock/date data start to become inaccurate.

Louis

hamluis, on Dec 28 2009, 08:55 PM, said:

Good point. However, both dates are from around 4 years ago. So unless a weak CMOS battery can affect time and date attributes that were already set for a given file, then I doubt that's the cause. How about you?

I don't think you understand.

The CMOS on this system will default to a date of Feb 2007 if the battery is weak.

Any files that I move, create, etc. once that has happened...will bear dates of 2007, regardless of what the correct date/time might be.

So I can have a file which is created by XYZ Corp yesterday...downloaded today by me...and if my CMOS battery is failing, the modified date for that file will reflect 2007.

Louis

hamluis, on Dec 28 2009, 09:14 PM, said:

I did misunderstand you at first. Thanks for the clarification. But would these dates change even if my system clock has not changed? I have not had to reset my clock at all since I've had this computer. Does that not mean it is safe to assume that the CMOS battery is fine?

I can't answer all that...I was merely answering your query of how a file can have a modified date that is earlier than its creation date.

Taken from personal experience .

Louis

When in dought just change the battery. They are cheep. Right click on your time, lower left and update you time in the computer world. It's cheep and doesn't take long. I change my battery about every 2 years. It may or may not help but it can't hurt.

Hello,

To answer the question of why a file can have a modification date the precedes the creation date is as follows:

The creation date is the date the file was installed or placed on your system. However, the person who wrote or updated that file may actually have done so before you installed it.

For example: Let's say Javacool updated SpywareBlaster Dec. 24, 2009, but I didn't install SpywareBlaster until Dec. 30, 2009. The creation date would then show a date of Dec. 30, 2009, but the modification date would be Dec. 24, 2009.

Another example. Let's say you are working with someone on a project in MS Powerpoint. Your friend edits the file on January 10, 2009 and sends you an e-mail with the file as an attachment on Jan. 11, 2009. You save the file on Jan. 12, 2009. Your computer will then show a file creation date of Jan. 12, 2009 and a modification date of Jan. 10, 2009 - the date your friend edited the Powerpoint file.

Orange Blossom

Thanks, Orange Blossom!

You're welcome.

About this file: ATI2EVXX.EXE-07A42849.pf in C:\WINDOWS\Prefetch

Quote

From here: http://www.edbott.com/weblog/archives/000024.html

In other words, Prefetch is a directory that Windows creates that allows it to load the programs you use faster. It's rather akin to having a grocery list and a map of the store so you can go immediately to the groceries without hunting all over the store for them.

Orange Blossom