View original (French)

Startupinfo file

agraphl -  
Didi64_549 Posted messages 2830 Registration date   Status Member Last intervention   -

Hello, I have a file named startupinfo that appeared by itself on my Windows 10 desktop. I deleted it, but it keeps reappearing on the desktop. Can someone explain to me why?

Thank you in advance

2 answers

  1.
    brucine Posted messages 24842 Registration date   Status Member Last intervention   4 169
     

    Hello,

    What is the file extension, exe, xml, ini...?

    Has any new software been installed recently?

    0
    1. Clarckos Posted messages 10059 Registration date   Status Contributor Last intervention   930
       

      Hello Brucine,

      are you considering the installation of "Advanced SystemCare," which the name of this possible executable depends on?

      0
      1. brucine Posted messages 24842 Registration date   Status Member Last intervention   4 169 > Clarckos Posted messages 10059 Registration date   Status Contributor Last intervention  
         

        Hello,

        Yes, for example, but the nature of the file may enlighten us, version and editor if it's an executable, content if it's xml, ini...

        0
    2. agraphl
       

      Hello

      Yes, it's an XML file and the last software I installed is called Visual C++ and Microsoft PC Manager

      0
      1. brucine Posted messages 24842 Registration date   Status Member Last intervention   4 169 > agraphl
         

        Hello,

        This would gladly plead for the second one, the only formal way to verify is to edit this file (right click, open with Notepad) to see what it refers to.

        0
      2. brucine Posted messages 24842 Registration date   Status Member Last intervention   4 169 > brucine Posted messages 24842 Registration date   Status Member Last intervention  
         

        That said, Windows by default includes this type of file that logs the startup at
        C:\Windows\System32\WDI\LogFiles\StartupInfo\S-1-5-21-xxx-yyy-zzz-qqq_StartupInfo(n).xml
        an excerpt (you have to copy and paste it elsewhere, it's not editable on site):

         <?xml version="1.0" encoding="UTF-16"?> <StartupData IntervalStartMs="88072" IntervalEndMs="178072"> <Process Name="C:\Windows\System32\SecurityHealthSystray.exe" PID="8176" StartedInTraceSec="143.090"> <StartTime>2023/06/03:09:28:31.5439777</StartTime> <CommandLine><![CDATA["C:\Windows\System32\SecurityHealthSystray.exe" ]]></CommandLine> <DiskUsage Units="bytes">392704</DiskUsage> <CpuUsage Units="us">97858</CpuUsage> <ParentPID>5920</ParentPID> <ParentStartTime>2023/06/03:09:27:40.5366940</ParentStartTime> <ParentName>explorer.exe</ParentName> </Process>

        It is conceivable that Microsoft PC Manager, if it exists, logs these events since that is its role, but the question is why this log is on the desktop; software installed on the desktop, incorrect configuration?
        There is a way to check: make a copy of this file in another folder, temporarily disable the software in question via Autoruns (possible service set to manual and stopped, disabled Run entries), delete this file, and check if it now reappears in time depending on whether we restart the PC or not.

        0
  2. Didi64_549 Posted messages 2830 Registration date   Status Member Last intervention  
     

    Hello,

    This is a not very harmful ad and you must have visited a site, for example, a startup site.

    You need to clear your browser history and see afterwards.

    But after a while, it doesn't come back.

    -1
    1. Didi64_549 Posted messages 2830 Registration date   Status Member Last intervention  
       

      Hi,

      You can uninstall this file via the registry.

      0