Sign in with
Sign up | Sign in
Your question

END file in c drive

Tags:
Last response: in Windows 7
Share
February 4, 2013 10:31:18 AM

I just noticed that a file named END appeared in my c drive and it has no file location. I dont know what is it and should i delete it?

More about : end file drive

Anonymous
a b $ Windows 7
February 4, 2013 12:42:51 PM

Are you sure it's not .RND,

They are normally generated by programs that need to create random numbers, do you have any VMware products installed?
m
0
l
February 4, 2013 1:08:56 PM

i think its not .rnd cause the Type of file is called"File", and i havent installed any of vmware products.
m
0
l
Related resources
February 4, 2013 1:46:54 PM

Have you tried opening the file in notepad?
m
0
l
February 4, 2013 1:49:33 PM

yes but there is nothing.
m
0
l
February 4, 2013 2:17:40 PM

bobi99mkd said:
yes but there is nothing.

Are you sure it the file was opened in notepad and it was not just a empty instance of notepad?
If it was opened in notepad there would be end-notepad in the title
If it was indeed empty I wouldn't worry about it!!

By chance, did you recently used a live linux cd?
Linux makes files like this-they generally have a "." in front of it(hidden file).

The file could also be created by some program as a marker indicating end of directory tree-not necessarily the actual end.
m
0
l
February 4, 2013 2:28:03 PM

hm, yes there is "END" title when i open the file with notepad, and i didnt use any kind of linux cd's.
m
0
l
July 8, 2013 8:11:03 AM

This is Malware...not severe, but VERY bad.
Run SpyBot Search & Destroy from safer-networking dot org.
Make sure you have the right site - safer WITH a "-" (dash) and .org - NOT .com.
m
0
l
July 8, 2013 11:48:34 AM

_kaos_ said:
Have you tried opening the file in notepad?


i opened the file in notepad.... it says ... conduitOK
m
0
l
August 1, 2013 9:07:24 PM

phaystle said:
_kaos_ said:
Have you tried opening the file in notepad?


i opened the file in notepad.... it says ... conduitOK


I got the same. Think it came in when I downloaded yesterday, what looks like a bogus message to update Firefox to the latest edition
m
0
l
October 10, 2013 3:07:47 AM

bobi99mkd said:
I just noticed that a file named END appeared in my c drive and it has no file location. I dont know what is it and should i delete it?

I have that same zero byte file also. I deleted it and nothing seems different.

m
0
l
January 17, 2014 7:25:05 AM

I just found this too. Here is what I found when researching the issue:


http://en.wikipedia.org/wiki/Browser_hijacking#Conduit_...

"Browser hijacking is the modification of a web browser's settings. The term "hijacking" is used as the changes are performed without the user's permission. A browser hijacker may replace the existing home page, error page, or search page with its own.[1] These are generally used to force hits to a particular website, increasing its advertising revenue.

Some browser hijacking can be easily reversed, while other instances may be difficult to reverse. Various software packages exist to prevent such modification."


On that same page, more information about Conduit, the source of the END file.

"Conduit Search: Conduit toolbars have been identified as Potentially Unwanted Programs by Malwarebytes[2] and are typically bundled with other free downloads.[3][4] The toolbars modify the browser default search engine, homepage, and several other browser settings."


From another forum:

"I have it too and opened it up in notepad - 1 line and says "ConduitOK." That Conduit search tracking hijack software is all over my machine making it hard to fully remove it clean. They should be thrown in jail for creating this."


Here is what seems to be a good guide to removal, though I have not tried it yet.

http://blog.yoocare.com/how-to-get-rid-search-conduit-c...


I thought I would also note that while I have this END file, found via Spy-Bot Search & Destroy v2.2, I do not have the symptoms noted in the links above, so I am still considering the issue and course of action. I just "cleaned it" with SpyBot and will see how it goes. If it shows up again, I will follow the cleaning steps in the link above.

There are fake/malware versions of SpyBot out there, typically on *.com sites, so be sure to find this site:

http://www.safer-networking.org/

Also, my anti-virus/malware application never identified this. I am using MSSE currently.


Update: I just realized why I may not have been experiencing the issues typically reported for this malware. I use a lot of software, usually downloaded from Filehippo, but other places too. Anyhow, whenever you install what seems to be legit software - and it may be legit - sometimes you see that it offers additional software, for which you have the option to install or not. However, sometimes "the option" is worded and or displayed in such a manner that it seems you do not have a choice, that it is part of the program you are installing, or something similar. Recently I noticed one that had the "skip" choice - the choice that would prevent the software from installing - as a very subtle, grayed out button in an area of the page you would not think to look for an option to decline installation.

So, the reason I may not have had the issues is that when I do accidentally install such add on software, I realize it soon after and remove it from Windows ( Control Panel\All Control Panel Items\Programs and Features ). The file may have been a remnant from such a scenario. FWIW.
m
0
l
!