3 suspicious files

[ShinobiGiri]

I have 3 files that look very suspectible to adware and wondered if it would be safe to delete them.

winSOLID.exe is the most suspectible one as i've never heard of this file. Oddly enough there aren't any topics around the net about it...it runs at startup and it also sometimes hides in the task manager yet i do not see anything of winsolid on the desktop anywhere as of now it's inside the system32 folder and there is also a WINSOLID.EXE-09CDF6DB.pf in the prefetch folder

hiberfil.sys and PAGEFILE.SYS aren't that suspectible but was wondering if i could delete these as it's eating up about a gig of memory and my C drive is very low on space.

so is it safe to delete these files or maybe there is someway to clean them up?

[SonicVanguard]

Pagfile.sys is your Paging file - basically what the SwapFile was in Windows98. WindowsXP places programs not being utilized (but still active) in the pagefile so RAM is available for active programs that are currently running. Unless you have copious amounts of RAM (2Gig or more), leave the pagefile alone.

Hiberfil.sys is your Hibernation file - used by WindowsXP for all the backups done when your system goes into hybernation. You can delete it, but WindowsXP will just re-create it the next time your system goes into hybernation.

As for winSOLID.exe, I haven't a clue.

[Negeva]

if ur running Windows ME or XP then cleanup the System Restore 'backup' files, this will clear up alot of free space. an even better option is to reduce the amount of hdd space System Restore uses.

Cleanup System restore in XP: run disk cleanup wizard and select advanced options > click for System Restore > click to remove all but last restore point > confirm > run cleanup.

for a better cleanup tool then the one builtin with Windows i reccomend CCleaner (http://www.ccleaner.com/) its free and extremely good at what it does.

[ShinobiGiri]

ah thank you very much for the tip guys....this winSOLID....as much as i don't want to touch it...i know windows can run without this file...but then again im a bit too timid to actually touch it >_<;

[Gizmo]

Googled that file and can't find anything, I would assume it's safe to get rid of it. I've never seen that file name before. If OS problems happen after it's deleted, you can always do a repair install of the OS to replace that file.

[darkside]

to disable hibernation (and therefore get rid of the hiberfil.sys file) go to

control panel (classic view)> power options> hibernate tab> and untick the 'enable hibernation' box then the hiberfil file shouldve gone, if not reeboot and if its still not gone delete it

about winsolid.exe - rename it to something such as winsolidXXXX.exe and then go about your busness as normal, if somehting fails to start then rename the file back to what it was and try again, if nothing fails to start it should be fairly safe to delete, its not a system file or it wouldve definatley come up in a google search


Nathan

[ShinobiGiri]

ah thanks that most definetly freed up some space thanks from the hibernation file and i renamed the winsolid file and neither can i can't find it anywhere and it hasn't effected anything yet but we'll see on next restart.

[nycsunny]

hey, seems like i have the same problem with winsolid.exe showing up outta nowhere. there's still nothing to be found on the web about this file. i noticed it because Windows Firewall popped up asking me if I wanted to allow an outgoing connection by this program. I noticed it after i installed Photoshop CS2...bootleg version (downloaded), also used Paradox's Keygen.

Symantec antivirus has just finished it's scan. It has classified this file winSOLID.exe as a Backdoor.Sdbot virus risk. If Symantec Antivirus (Corporate Version, mind you) is correct, you should run an antivirus scan to remove the threat.

If anyone else has updated info on this, please share, thank you.

[blue60007]

Originally Posted by darkside to disable hibernation (and therefore get rid of the hiberfil.sys file) go to control panel (classic view)> power options> hibernate tab> and untick the 'enable hibernation' box then the hiberfil file shouldve gone, if not reeboot and if its still not gone delete it about winsolid.exe - rename it to something such as winsolidXXXX.exe and then go about your busness as normal, if somehting fails to start then rename the file back to what it was and try again, if nothing fails to start it should be fairly safe to delete, its not a system file or it wouldve definatley come up in a google search Nathan

That's what I would do. Rename it, or move it to another folder, if you see no change in computer operation, delete it.

[scottish144]

Originally Posted by nycsunny hey, seems like i have the same problem with winsolid.exe showing up outta nowhere. there's still nothing to be found on the web about this file. i noticed it because Windows Firewall popped up asking me if I wanted to allow an outgoing connection by this program. I noticed it after i installed Photoshop CS2...bootleg version (downloaded), also used Paradox's Keygen. Symantec antivirus has just finished it's scan. It has classified this file winSOLID.exe as a Backdoor.Sdbot virus risk. If Symantec Antivirus (Corporate Version, mind you) is correct, you should run an antivirus scan to remove the threat. If anyone else has updated info on this, please share, thank you.

Yeah, I got the same file. McAfee caught it. Sounds like a trojan.