Is this a threat?

azduck · 07-23-2008, 05:00 PM

I ran defrag the other day and a huge new, unmovable folder showed up at c:\windows\ct\ (3GB in size). This folder had never been present in any previous defrag. It's largest file is named CtEventCatalog.ctlog (2.83GB). All files in the folder are updated/new each day and cannot be deleted because I get the message that the files are in use when I try to kill them. Running antivirus/spyware programs doesn't identify anything in this folder (HiJackThis, Threat Expert Memory Scanner, Dr. Web CureIt, ComboFix, HautSecure, SpyCatcher, Norton AntiVirus, ...) Does anyone have an idea what program created this folder or how to locate the program feeding these files? I would like to decide what action to take.

tetonbob · 07-23-2008, 06:11 PM

You mention Haute Secure. Folder and file are consistent with that application. The file seems to be some sort of event log. Files are accessible in Safe Mode. As to what it does exactly or if the application requires it, you may want to ask here before deleting.

http://blog.hautesecure.com/forums/

azduck · 07-25-2008, 11:18 AM

I posted a query on http://blog.hautesecure.com/forums/ on 7/24/08 and have yet to receive a response. Will let you know when I hear. Thanks.

07-23-2008, 05:00 PM	#1 (permalink)
azduck Registered User Join Date: Jul 2008 Location: Arizona Posts: 2 OS: xp-sp3	Is this a threat? I ran defrag the other day and a huge new, unmovable folder showed up at c:\windows\ct\ (3GB in size). This folder had never been present in any previous defrag. It's largest file is named CtEventCatalog.ctlog (2.83GB). All files in the folder are updated/new each day and cannot be deleted because I get the message that the files are in use when I try to kill them. Running antivirus/spyware programs doesn't identify anything in this folder (HiJackThis, Threat Expert Memory Scanner, Dr. Web CureIt, ComboFix, HautSecure, SpyCatcher, Norton AntiVirus, ...) Does anyone have an idea what program created this folder or how to locate the program feeding these files? I would like to decide what action to take.

07-23-2008, 06:11 PM	#2 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,688 OS: 2000 Pro; XP Pro; XP Home	Re: Is this a threat? You mention Haute Secure. Folder and file are consistent with that application. The file seems to be some sort of event log. Files are accessible in Safe Mode. As to what it does exactly or if the application requires it, you may want to ask here before deleting. http://blog.hautesecure.com/forums/ __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009 Last edited by tetonbob; 07-23-2008 at 06:21 PM.

07-25-2008, 11:18 AM	#3 (permalink)
azduck Registered User Join Date: Jul 2008 Location: Arizona Posts: 2 OS: xp-sp3	Re: Is this a threat? I posted a query on http://blog.hautesecure.com/forums/ on 7/24/08 and have yet to receive a response. Will let you know when I hear. Thanks.