Windows 10: Unknown file in Windows/SysWow64 directory. Is my PC hacked?

Discus and support Unknown file in Windows/SysWow64 directory. Is my PC hacked? in AntiVirus, Firewalls and System Security to solve the problem; I am running on latest Windows 10 Home Version. When I ran Norton Power Eraser, it identified a file named "nddcf.cmd" in the directory... Discussion in 'AntiVirus, Firewalls and System Security' started by N_S_M_, Jun 30, 2020.

  1. N_S_M_ Win User

    Unknown file in Windows/SysWow64 directory. Is my PC hacked?


    I am running on latest Windows 10 Home Version. When I ran Norton Power Eraser, it identified a file named "nddcf.cmd" in the directory C://Windows/SysWow64/. No anti-virus detected it Kaspersky, MalwareBytes, ESET. However, when I ran Norton Power User, its threat level as 'Unknown'. I read that these kind of files don't exist in Windows directory. Was my PC hacked or is it a genuine Windows file?

    The results:

    Unknown file in Windows/SysWow64 directory. Is my PC hacked? dbd5f8ce-cb6f-488b-882b-eca5ab8b9faa?upload=true.png

    Norton couldn't identify the file type:

    Unknown file in Windows/SysWow64 directory. Is my PC hacked? 27f23421-3883-4592-a871-0e02fb8d5e06?upload=true.png

    When I doubleclicked on the file, it showed the following lines, saying something like Ncat:

    Unknown file in Windows/SysWow64 directory. Is my PC hacked? 76b75209-2775-4c2a-b253-24b7033f1d98?upload=true.png

    I finally opened the file in Notepad, and something was written in some language I don't understand:

    Unknown file in Windows/SysWow64 directory. Is my PC hacked? 004ec430-081d-449a-853a-8fb77343bdc3?upload=true.png


    Is it a legit Windows file or was my PC compromised? Please help.

    :)
     
    N_S_M_, Jun 30, 2020
    #1

  2. Directory Size Utility

    Change Log v1.6

    • Resoved an issue where selecting "Detail" from the "View" drop down would cause duplicates.
    • New "Peek" feature!
      • Selecting something in the Directory column in the Directory view (Left window) while holding "z" will peek into that directory!
      • Double clicking the Directory column in the directory view(Left window) while holding "z" will add the folder.
    • New color coded feature in both Size columns for Detailed view.
    • Exporting to Excel will now Export both Folder (left) and File (right) window. In the excel file the Folder, and File window will be on different sheets.
    • Add a feature to export to older excel 97-2003 (.xls) from the file/export drop down window.
    Download HERE!

    Don't forget to enter to win this game bundle! here Drawing is this Friday!
     
    Mindweaver, Jun 30, 2020
    #2
  3. Drone Win User
    Directory Size Utility

    First of all nice utility, Mindweaver!
    Second of all, it's so nice to see that this section ain't dead.

    I have a few questions/suggestions, maybe you'd want to see ...
    • maybe you rename Get Folder button caption to something more intuitive? Add Folder, Get Folder Size, Check Folder Size or something like that?
    • Could you add subfolder files to the right pane? (it can be a tickbox with include sub dirs)
    • maybe you also add export list to excel?
    • there's delete file button maybe you add delete folder button too?
    • and finally maybe you can add UP button for directories?
     
    Drone, Jun 30, 2020
    #3
  4. Unknown file in Windows/SysWow64 directory. Is my PC hacked?

    RealTimeLog.cvs Logs in Multiple Directories

    Can you force the path setting for the RealTempLog.csv file?
    Below are several scenarios of the RTL file starting or appending in two other directories than the RT directory.

    The improvement: Force the RTS file to start in only one directory and append the file as the RT program starts/stops/starts, at Task Scheduling (startup or login), or any tests using the RT program.

    My reason is I am using Excel PowerPivot and have set up pivot tables and charts that when ‘refreshed’ by PowerPivot, updates the tables and charts from the RTL file. Having the files start, stop, appends at various directories makes is a pain to ‘refresh’. There are ways to work around the problems, which maintains the link to a single file. Mainly; copying the file to the linked directory. However there is no continuous logging, which make me copy and paste from each log to the linked file. If all three RTL files are involved, it is a pain.

    Anyhow, it would be very beneficial to force only one directory for logging the RTL file.

    Below is some scenarios that represent the issue, as well as the RealTemp.ini information. Attached is more information in a zipped PDF file.

    BTW, the program is awesome as it stands and thanks for the work you all have done to make it so.

    Regards,
    Dale

    Dale Hamilton
    L: dalehamilton@embarqmail.com

    Here are the different scenarios regarding the directories, running ReatTemp (RT):
    1. When starting RealTemp (RT) from the Task Scheduler at user login
    a. RealTempLog.csv starts up in the Windows/SysWOW64 directory
    b. Stopping RT, stops the log file in the Windows/SysWOW64 directory
    c. Re-starting RT, starts a new RealTempLog.csv file in the RT directory
    2. Stopping and starting RT after user login
    a. Starts RealTempLog.csv file in the RT directory
    b. Appends the log file with each start
    3. Logging off while RT is still logging in the RT directory and then logging back on
    a. RealTempLog starts logging in the Windows/SysWOW64 directory
    b. The log file is appended at login time
    c. The RealTempLog file in the RT directory stops logging at log-off time
    4. Starting the XS Bench test
    a. RTL continues to log in the directory that was logging at the time of starting XS Bench test
    5. Starting the Sensor Test using Prime95 with the logging and log file at Windows/SysWOW64 directory
    a. The RTL file closes in the Windows/SysWOW64 directory
    b. The RTL file starts logging in the RT directory
    c. The logging appends the RTL file
    6. Starting the Sensor Test using Prime95 with the logging and log file at the RT directory
    a. Closes the RTL file in the RT directory
    b. Starts or appends the RTL file in the Prime95 directory
    7. Starting the Sensor Test using Prime95 with the logging and log file at the Prime95 directory
    a. Appends the RTL file at the Prime95 directory

    RealTemp.ini Information:

    [RealTemp]
    ;
    ;RealTemp 3.60
    ;September 30, 2010
    ;
    ;For further information and updates visit either of these sites:
    ;TechPowerUp
    ;Real Temp - New temp program for Intel Core processors
    ;
    ;Remove the semi-colon at the start of each line to try these options.
    DegreeSymbolString=" ºC"
    ;
    ;How often the log file gets saved to the hard drive.
    ;Default is 60 seconds. Range is [1..86400] seconds.
    HDWrite=1
    ;
    ;For Core 2 CPUs, use MSRMulti=1 to read the multiplier the traditional way.
    ;The default now is to use the same method that i7 Turbo uses for all processors.
    ;MSRMulti=1
    ;
    ;To read each CPU in a Skulltrail system use one of these.
    ;Skull=1
    ;Skull=2
    ;
    ;To use a calibratition formula similar to the original formula that has no affect
    ;on your reported temperatures between 70C and 100C use this. The original formula
    ;closely approximates what I found during testing.
    ;OldFormula=1
    ;
    ;Use the RealTemp Settings window to make all other adjustments.
    ;
    WindowXY=562963771
    IconTextColor0=0x80FFFF
    IconTextColor1=0x80FF80
    IconTextColor2=0xFFFF80
    IconTextColor3=0xFF80FF
    TjMax0=100
    TjMax1=100
    TjMax2=100
    TjMax3=100
    Idle0=0.0
    Idle1=0.0
    Idle2=3.0
    Idle3=1.0
    IconShow=0
    LogFile=1
    LogInterval=5
    StartMinimized=0
    TaskBar=1
    FontNumber=
    OnTop=0
    TrayInfo=0
    InfoWindow=
    MiniMode=0
    MinimizeOnClose=0
    Spec=Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
    RivaFile=C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe
    Alarm=0
    Alarm1=100
    Alarm2=100
    CSV=1
    AlarmFile=
    VIDInfo=0
    ClockMod=2
    GUIColor=0xF4F3EE
    GUIMiniColor=0xF4F3EE
    GUIText=0x408000
    GUIMiniText=0x000000
    GUINormHead=0x000000
    GUIMiniHead=0x000000
    NormHeading=1
    MiniHeading=0
    TMLoad=0
    CustomGUI=0
    CustomGUIMini=0
    CPUID=0x6FB
    Quality=3
    ThreeDigit=0
    GPU=0
    Fahrenheit=0
    IconTextColor4=0x8080FF
    AnchorXY=560407865
    lfHeight=-16
    lfWidth=0
    lfWeight=400
    lfItalic=0
    lfCharSet=0
    lfPitchAndFamily=18
    lfFaceName=Times New Roman
     
    dalehamilton, Jun 30, 2020
    #4
Thema:

Unknown file in Windows/SysWow64 directory. Is my PC hacked?

Loading...
  1. Unknown file in Windows/SysWow64 directory. Is my PC hacked? - Similar Threads - Unknown file SysWow64

  2. Windows 11 Account Unknown for my user directory

    in Windows 10 Gaming
    Windows 11 Account Unknown for my user directory: See first entry. Account Unknown. I set this machine up with my microsoft account and bought 365. I see no other users on my machine. A whoami shows me as GJVictus\gary_. The 365 guys says my user name is the first 5 from ny email -account address. That tracks, but 1 would...
  3. Windows 11 Account Unknown for my user directory

    in Windows 10 Software and Apps
    Windows 11 Account Unknown for my user directory: See first entry. Account Unknown. I set this machine up with my microsoft account and bought 365. I see no other users on my machine. A whoami shows me as GJVictus\gary_. The 365 guys says my user name is the first 5 from ny email -account address. That tracks, but 1 would...
  4. Unknown Folders and Files Appear in my OneDrive. Possible Hack or Virus

    in Windows 10 Network and Sharing
    Unknown Folders and Files Appear in my OneDrive. Possible Hack or Virus: Hi there.There is strange folder appear on my Folder E: yesterday The folder name is "dce7337580918db4d51ca95ef9" and size of approximately 726 MBSo my question is 1. Is it a important folder and is it possible a hacking or virus?2. Can I deleting this folder?If someone can...
  5. Unknown Folders and Files Appear in my OneDrive. Possible Hack or Virus

    in Windows 10 Gaming
    Unknown Folders and Files Appear in my OneDrive. Possible Hack or Virus: Hi there.There is strange folder appear on my Folder E: yesterday The folder name is "dce7337580918db4d51ca95ef9" and size of approximately 726 MBSo my question is 1. Is it a important folder and is it possible a hacking or virus?2. Can I deleting this folder?If someone can...
  6. Unknown Folders and Files Appear in my OneDrive. Possible Hack or Virus

    in Windows 10 Software and Apps
    Unknown Folders and Files Appear in my OneDrive. Possible Hack or Virus: Hi there.There is strange folder appear on my Folder E: yesterday The folder name is "dce7337580918db4d51ca95ef9" and size of approximately 726 MBSo my question is 1. Is it a important folder and is it possible a hacking or virus?2. Can I deleting this folder?If someone can...
  7. I deleted SysWOW64 in the "Windows" directory Missing DLL files

    in Windows 10 Network and Sharing
    I deleted SysWOW64 in the "Windows" directory Missing DLL files: The story is too long to explain but I deleted the folder SysWOW64 folder in the C:/Windows/ and apparently it has a lot of important files that the system doesn't need but it is needed by softwares that I use on windows and I want to re-download the folder or repair the...
  8. I deleted SysWOW64 in the "Windows" directory Missing DLL files

    in Windows 10 Software and Apps
    I deleted SysWOW64 in the "Windows" directory Missing DLL files: The story is too long to explain but I deleted the folder SysWOW64 folder in the C:/Windows/ and apparently it has a lot of important files that the system doesn't need but it is needed by softwares that I use on windows and I want to re-download the folder or repair the...
  9. I deleted SysWOW64 in the "Windows" directory Missing DLL files

    in Windows 10 Gaming
    I deleted SysWOW64 in the "Windows" directory Missing DLL files: The story is too long to explain but I deleted the folder SysWOW64 folder in the C:/Windows/ and apparently it has a lot of important files that the system doesn't need but it is needed by softwares that I use on windows and I want to re-download the folder or repair the...
  10. Unknown file in my OneDrive folder - Am I hacked?

    in Windows 10 Network and Sharing
    Unknown file in my OneDrive folder - Am I hacked?: Hello,Today I noticed a suspicious file in my OneDrive folder. Suspicious thing is that the file is named in chinese. I don't have any chinese friends. -- This is the file name. Funny thing is I cant delete the file. is someone hacking me? :D...