My .exe file is being changed with no reason

[VictorFRodriguez]

I have been experimenting recently a problem with an .EXE file. My application is called INFOSOFT and the executable file is INFOSOFT.EXE
Every time a open the file an error occurs that says
"it is not a valid foxpro file".
I check the file and it is 766KB but the original is only 598KB.
So, I have to re-copy the valid one and then the program opens.
I think that this is probable a virus.
I also checked that in C:\WINNT\ and C:\WINNT\ServicePackFiles\i386 there is another file called infosoft.dll which do not belong to me.
My question is: Does anybody know if those .dll files really exist in WINNT/WIN2000?
Does anyone knows what might be happening that my .exe file is being changed?
Victor F. Rodriguez

 

[AirCon]

Hi Victor,

I think you should post this in W2K forum. Because it's general problem and not specific to VFP.

Anyway, I'm using W2K SP3 and yes the file is exist. It also exist in C:\WINNT\System32. I guess it belongs to the system. Look for file properties from Explorer.
File size : 206,096 bytes
Version : 5.0.2195.4091
Copyright (C) Microsoft Corp. 1981-1999

Now, if you suspect it has a virus why don't you run anti-virus scanner. Also try to rename your exe to other name, i.e.: MyTEST.exe.
Run it a a few times, see whether the size change again.

-- AirCon --

 

[craigsboyd]

I concur with AirCon on this one. infosoft.dll is just one of a number of dlls that make up the Windows Indexing Service. Rename your exe and see if the problem persists, though even if windows was mistaking your exe for the dll somehow (seems very unlikely) I would think that it would just replace the dll with the extra copy it has available to it. I don't see how it would decide to just arbitrarily add on some bytes to the beginning or the end of your file...anything is possible I guess. Let us know when you figure out what gives, I'm curious now.

Slighthaze = NULL

 

[Mike Lewis]

For what it's worth, Infosoft.DLL is part of Microsoft's Indexing Services.



Mike Lewis
Edinburgh, Scotland

http://www.ml-consult.demon.co.uk

 

[VictorFRodriguez]

I also renamed the file with a different name but the problem persists.
Victor F. Rodriguez

 

[dbMark]

Why haven't you run a virus scanner with current up-to-date virus definitions on the entire computer already? With an EXE changing size, gaining about 160K (the size of some viruses), it sure sounds like virus-type activity. And if you noticed one file changing, there may be many others modified as well if it really is a virus. Don't delay, as some viruses quietly replicate for a while on the workstation, to others on the LAN and on the internet, then get destructive, leaving you with a pile of electronic garble.