Remoted into my machine at work and tried that. Processmon shows its denied, but nothing is complaining. I can see Explorer.exe is trying to Createfile on the TestQuest file (most likely me setting the permissions on it), Dropbox is doing a queryopen (and succeeding despite everything having deny set), and devenv.exe is (or was) doing Writefile. Avp.exe (the Kaspsky antivirus) looks like it was checking the file. I guess that should mean its ok, it would (should?) know if its a virus or evidence of a virus. (I hope) I did a compare between the dll's loaded by Visual Studio on work pc versus home Pc and theres a few differences but nothing jumps out at me.
I'll post that info later if anyone is interested, time to do some work and leave the detective work for later... On Tue, Jul 12, 2011 at 10:52 AM, mike smith <meski...@gmail.com> wrote: > Goto security and deny all on that file, and see what complains. > > > On Tue, Jul 12, 2011 at 12:43 PM, Stephen Price > <step...@littlevoices.com>wrote: > >> Yup, Sysinternals tools are great. >> Not in the office today so will have a look at that tomorrow. >> Checked with one of the other guys and he has Resharper 6.0 installed but >> also does not have the TestQuest sil files. The mystery is killing me. hehe >> On Tue, Jul 12, 2011 at 10:04 AM, Mark Hurd <markeh...@gmail.com> wrote: >> >>> I assume you've used ProcessMonitor or FileMonitor to determine that. >>> When you don't mind devenv crashing, try finding the handle in >>> ProcessExplorer and closing it. See if any resulting error helps tell >>> you who/what is writing to the file. >>> >>> -- >>> Regards, >>> Mark Hurd, B.Sc.(Ma.)(Hons.) >>> >>> On 12 July 2011 01:08, Stephen Price <step...@littlevoices.com> wrote: >>> > Yeah, I wondered so did a full scan. Its a work machine and it uses >>> Trend. >>> > It might be something installed as part of the image, but I doubt that >>> as I >>> > installed Visual Studio myself. >>> > Virus scan found nothing. >>> > Its got to be an add in or Visual studio itself as SysInternals is >>> showing >>> > devenv.exe as the process opening the file. I'll keep looking, its >>> > suspicious when you can't identify something like this. I might just be >>> > paranoid. Why? Who's asking? ;) >>> > >>> > thanks >>> > Stephen >>> > On Mon, Jul 11, 2011 at 9:11 PM, Peter Maddin < >>> petermad...@iinet.net.au> >>> > wrote: >>> >> >>> >> I just checked. I don’t have a file like that. >>> >> >>> >> >>> >> >>> >> Probably wrong but I checked the sil extension. Not too many Google >>> hits. >>> >> Silhouette Designer - CAD/CAM for designing clothes. Does not seem >>> you. >>> >> >>> >> Also got a hit on SmartInspect (http://www.gurock.com/smartinspect/). >>> Ever >>> >> tried that? >>> >> >>> >> >>> >> >>> >> Maybe time for full virus/malware sweep. >>> >> >>> >> >>> >> >>> >> Regards Peter >>> >> >>> >> >>> >> >>> >> From: ozdotnet-boun...@ozdotnet.com [mailto: >>> ozdotnet-boun...@ozdotnet.com] >>> >> On Behalf Of Stephen Price >>> >> Sent: Monday, 11 July 2011 4:33 PM >>> >> To: ozDotNet >>> >> Subject: TestQuest >>> >> >>> >> >>> >> >>> >> I've got Visual Studio constantly writing to a file in my temp folder >>> >> called ..\AppData\Local\Temp\TestQuest-2011-07-11-08-28-37.sil >>> >> >>> >> I've done a search for it, no idea what it's for. I've disabled all of >>> my >>> >> plugins and addins in case its one of them, but it's still doing it. >>> my >>> >> Devenv.exe task is just sitting at 13% when its doing it and >>> everything >>> >> grinds to a halt while its doing its thing. Very annoying. I've >>> rebooted and >>> >> still no luck stopping it. >>> >> >>> >> >>> >> >>> >> Anyone else actually have this file in their Temp folder? Know what it >>> >> is? >>> >> >>> >> The contents of the file is a heap of nulls, etx, eot, my machine >>> name, >>> >> with a header of SILF. >>> >> >>> >> Also some what looks like calls >>> >> to AutoMainDTE2010CodeView.get_CurrentFileNameMyMACHINENAME >>> >> >>> >> >>> >> >>> >> It's cramping my style. >>> >> >>> >> >>> >> >>> >> cheers, >>> >> >>> >> Stephen >>> >> >> > > > -- > Meski > > http://courteous.ly/aAOZcv > > "Going to Starbucks for coffee is like going to prison for sex. Sure, > you'll get it, but it's going to be rough" - Adam Hills > >
