Windows 10: Unknown file in Windows/SysWow64 directory. Is my PC hacked?

Discus and support Unknown file in Windows/SysWow64 directory. Is my PC hacked? in AntiVirus, Firewalls and System Security to solve the problem; I am running on latest Windows 10 Home Version. When I ran Norton Power Eraser, it identified a file named "nddcf.cmd" in the directory... Discussion in 'AntiVirus, Firewalls and System Security' started by N_S_M_, Jun 30, 2020 at 5:22 AM.

  1. N_S_M_ Win User

    Unknown file in Windows/SysWow64 directory. Is my PC hacked?


    I am running on latest Windows 10 Home Version. When I ran Norton Power Eraser, it identified a file named "nddcf.cmd" in the directory C://Windows/SysWow64/. No anti-virus detected it Kaspersky, MalwareBytes, ESET. However, when I ran Norton Power User, its threat level as 'Unknown'. I read that these kind of files don't exist in Windows directory. Was my PC hacked or is it a genuine Windows file?

    The results:

    Unknown file in Windows/SysWow64 directory. Is my PC hacked? dbd5f8ce-cb6f-488b-882b-eca5ab8b9faa?upload=true.png

    Norton couldn't identify the file type:

    Unknown file in Windows/SysWow64 directory. Is my PC hacked? 27f23421-3883-4592-a871-0e02fb8d5e06?upload=true.png

    When I doubleclicked on the file, it showed the following lines, saying something like Ncat:

    Unknown file in Windows/SysWow64 directory. Is my PC hacked? 76b75209-2775-4c2a-b253-24b7033f1d98?upload=true.png

    I finally opened the file in Notepad, and something was written in some language I don't understand:

    Unknown file in Windows/SysWow64 directory. Is my PC hacked? 004ec430-081d-449a-853a-8fb77343bdc3?upload=true.png


    Is it a legit Windows file or was my PC compromised? Please help.

    :)
     

  2. Directory Size Utility

    Change Log v1.6

    • Resoved an issue where selecting "Detail" from the "View" drop down would cause duplicates.
    • New "Peek" feature!
      • Selecting something in the Directory column in the Directory view (Left window) while holding "z" will peek into that directory!
      • Double clicking the Directory column in the directory view(Left window) while holding "z" will add the folder.
    • New color coded feature in both Size columns for Detailed view.
    • Exporting to Excel will now Export both Folder (left) and File (right) window. In the excel file the Folder, and File window will be on different sheets.
    • Add a feature to export to older excel 97-2003 (.xls) from the file/export drop down window.
    Download HERE!

    Don't forget to enter to win this game bundle! here Drawing is this Friday!
     
  3. Drone Win User
    Directory Size Utility

    First of all nice utility, Mindweaver!
    Second of all, it's so nice to see that this section ain't dead.

    I have a few questions/suggestions, maybe you'd want to see ...
    • maybe you rename Get Folder button caption to something more intuitive? Add Folder, Get Folder Size, Check Folder Size or something like that?
    • Could you add subfolder files to the right pane? (it can be a tickbox with include sub dirs)
    • maybe you also add export list to excel?
    • there's delete file button maybe you add delete folder button too?
    • and finally maybe you can add UP button for directories?
     
  4. Unknown file in Windows/SysWow64 directory. Is my PC hacked?

    RealTimeLog.cvs Logs in Multiple Directories

    Can you force the path setting for the RealTempLog.csv file?
    Below are several scenarios of the RTL file starting or appending in two other directories than the RT directory.

    The improvement: Force the RTS file to start in only one directory and append the file as the RT program starts/stops/starts, at Task Scheduling (startup or login), or any tests using the RT program.

    My reason is I am using Excel PowerPivot and have set up pivot tables and charts that when ‘refreshed’ by PowerPivot, updates the tables and charts from the RTL file. Having the files start, stop, appends at various directories makes is a pain to ‘refresh’. There are ways to work around the problems, which maintains the link to a single file. Mainly; copying the file to the linked directory. However there is no continuous logging, which make me copy and paste from each log to the linked file. If all three RTL files are involved, it is a pain.

    Anyhow, it would be very beneficial to force only one directory for logging the RTL file.

    Below is some scenarios that represent the issue, as well as the RealTemp.ini information. Attached is more information in a zipped PDF file.

    BTW, the program is awesome as it stands and thanks for the work you all have done to make it so.

    Regards,
    Dale

    Dale Hamilton
    L: dalehamilton@embarqmail.com

    Here are the different scenarios regarding the directories, running ReatTemp (RT):
    1. When starting RealTemp (RT) from the Task Scheduler at user login
    a. RealTempLog.csv starts up in the Windows/SysWOW64 directory
    b. Stopping RT, stops the log file in the Windows/SysWOW64 directory
    c. Re-starting RT, starts a new RealTempLog.csv file in the RT directory
    2. Stopping and starting RT after user login
    a. Starts RealTempLog.csv file in the RT directory
    b. Appends the log file with each start
    3. Logging off while RT is still logging in the RT directory and then logging back on
    a. RealTempLog starts logging in the Windows/SysWOW64 directory
    b. The log file is appended at login time
    c. The RealTempLog file in the RT directory stops logging at log-off time
    4. Starting the XS Bench test
    a. RTL continues to log in the directory that was logging at the time of starting XS Bench test
    5. Starting the Sensor Test using Prime95 with the logging and log file at Windows/SysWOW64 directory
    a. The RTL file closes in the Windows/SysWOW64 directory
    b. The RTL file starts logging in the RT directory
    c. The logging appends the RTL file
    6. Starting the Sensor Test using Prime95 with the logging and log file at the RT directory
    a. Closes the RTL file in the RT directory
    b. Starts or appends the RTL file in the Prime95 directory
    7. Starting the Sensor Test using Prime95 with the logging and log file at the Prime95 directory
    a. Appends the RTL file at the Prime95 directory

    RealTemp.ini Information:

    [RealTemp]
    ;
    ;RealTemp 3.60
    ;September 30, 2010
    ;
    ;For further information and updates visit either of these sites:
    ;TechPowerUp
    ;Real Temp - New temp program for Intel Core processors
    ;
    ;Remove the semi-colon at the start of each line to try these options.
    DegreeSymbolString=" ºC"
    ;
    ;How often the log file gets saved to the hard drive.
    ;Default is 60 seconds. Range is [1..86400] seconds.
    HDWrite=1
    ;
    ;For Core 2 CPUs, use MSRMulti=1 to read the multiplier the traditional way.
    ;The default now is to use the same method that i7 Turbo uses for all processors.
    ;MSRMulti=1
    ;
    ;To read each CPU in a Skulltrail system use one of these.
    ;Skull=1
    ;Skull=2
    ;
    ;To use a calibratition formula similar to the original formula that has no affect
    ;on your reported temperatures between 70C and 100C use this. The original formula
    ;closely approximates what I found during testing.
    ;OldFormula=1
    ;
    ;Use the RealTemp Settings window to make all other adjustments.
    ;
    WindowXY=562963771
    IconTextColor0=0x80FFFF
    IconTextColor1=0x80FF80
    IconTextColor2=0xFFFF80
    IconTextColor3=0xFF80FF
    TjMax0=100
    TjMax1=100
    TjMax2=100
    TjMax3=100
    Idle0=0.0
    Idle1=0.0
    Idle2=3.0
    Idle3=1.0
    IconShow=0
    LogFile=1
    LogInterval=5
    StartMinimized=0
    TaskBar=1
    FontNumber=
    OnTop=0
    TrayInfo=0
    InfoWindow=
    MiniMode=0
    MinimizeOnClose=0
    Spec=Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
    RivaFile=C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe
    Alarm=0
    Alarm1=100
    Alarm2=100
    CSV=1
    AlarmFile=
    VIDInfo=0
    ClockMod=2
    GUIColor=0xF4F3EE
    GUIMiniColor=0xF4F3EE
    GUIText=0x408000
    GUIMiniText=0x000000
    GUINormHead=0x000000
    GUIMiniHead=0x000000
    NormHeading=1
    MiniHeading=0
    TMLoad=0
    CustomGUI=0
    CustomGUIMini=0
    CPUID=0x6FB
    Quality=3
    ThreeDigit=0
    GPU=0
    Fahrenheit=0
    IconTextColor4=0x8080FF
    AnchorXY=560407865
    lfHeight=-16
    lfWidth=0
    lfWeight=400
    lfItalic=0
    lfCharSet=0
    lfPitchAndFamily=18
    lfFaceName=Times New Roman
     
    dalehamilton, Jun 30, 2020 at 5:23 AM
    #4
Thema:

Unknown file in Windows/SysWow64 directory. Is my PC hacked?

Loading...
  1. Unknown file in Windows/SysWow64 directory. Is my PC hacked? - Similar Threads - Unknown file SysWow64

  2. Is my PC hacked?

    in AntiVirus, Firewalls and System Security
    Is my PC hacked?: okay so this is the issue I'm having I was being a idiot and downloaded something and now when I go to Google it says there is a administrator and it added a extension called "mazy search" and I can't get rid of it. I already turned my internet off on my pc just in case and...
  3. unknown files took place in pc

    in Windows 10 Network and Sharing
    unknown files took place in pc: I don't know how but some unknown files had taken place in my pc I don't know from where did they came from...I had already tried each and every best soln for this advised by ur advisors but couldn't solve this problem...this has already taken a lot of memory in my pc..as you...
  4. unknown files taken place in my pc

    in Windows 10 Network and Sharing
    unknown files taken place in my pc: i dont know how but when i opened the pc some unknown files had taken place in my pc and em unable to delete them they are in huge numbersit says access is denied the file is not accessible please help me fast...
  5. SysWow64

    in Windows 10 Network and Sharing
    SysWow64: hey.I am using windows 10 32-bit os.I want find syswow64 but it is not in C/Windows.Please help me to find it or download that file. Thanks, Kavira Ratnayake https://answers.microsoft.com/en-us/windows/forum/all/syswow64/e596cbcb-65ca-4095-a476-11251d2bee8d
  6. My pc was hacked and now locked

    in Windows 10 Gaming
    My pc was hacked and now locked: Hi all I had a notification on my windows 10 laptop later this morning saying Microsoft has locks pc due to a funny Web site it said call the showing so I called and spoken to a man called Dan who claims he works for them after he said he needs to see what's going on so I...
  7. Hacked PC

    in Windows 10 Network and Sharing
    Hacked PC: [IMG] Hi There, I've been onto my ISP about being hacked they sent me a new modem so totally different port's access ETC.... But I still think I've been hacked I even formatted my HDD's and reinstalled windows 10. Here is a Screen shot taken from the ask Task Manager 6...
  8. SysWOW64

    in Windows 10 Ask Insider
    SysWOW64: So I logged on 10 minutes ago and I got pop up for Chromium, and Internet Explorer, both things I dont have. Then I got a notification that said there was a risk on the pc and it was called sysWOW64. I have no idea how I got it, the only things I have installed recently are...
  9. SysWow64 registry file deleted

    in Windows 10 Customization
    SysWow64 registry file deleted: Hello, so when i was deleting some virus regitry file i accidently deleted the SysWow64 files and everything get down, when i rebooted my pc, it crashed and return the 0×00000f error, but i have some access to my files using a bootalbe windows cd, i need a way to restore the...
  10. Umonit64.exe in my SysWOW64?

    in Windows 10 Support
    Umonit64.exe in my SysWOW64?: Suddenly it was there, sitting in my startup, Umonit64.exe. already shutter down and hidden because you never know... So what the heck is it, after checking it appeared as a USB driver. I recently updated my driver stuff with an updater on the 8th of Nov. And the file was...