Duplicate program folder (not x86)

Gormta · 14 Jun 2011

Hi!

NOT TO BE CONFUSED WITH THE PROGRAM (x86) folder;

Running WIN7 64 bit; Could someone please help, I have the following folders on C:\

* "Program" AND

* "Program" ; This one is HIDDEN but with "a key lock" icon - it looks like a copy of

the ordinary Program folder... "Same" folders inside, runnable executables - only difference it seems that in properties - I cannot view size. Where does this come from? Only "my" local admin is allowed on this compared to the ordinary folder that has all the usual user rights attached.

No one this far could explain this to me so be a hero now please

BR
Gormta

kado897 · 14 Jun 2011

On an x64 system there should be two "program" folders.

1. Program Files - contains native 64bit programs and

2. Program Files (x86) - contains 32bit programs.

Gormta · 14 Jun 2011

I know - that isn´t the problem as I wrote in title of thread, but thx anyway.

NO, the problem is that I have another "Program" folder that is an "exact" copy of the ordinary but hidden and with a "key lock". Could this be the secure copy that WIN is doing?

?

kado897 · 14 Jun 2011

I don't understand that. If they are both C:/Program then that is a duplicate folder name which is not allowed.

Gormta · 14 Jun 2011

But you helped me anyway - cause checking more on this I found this to be a "Junction Point" Program: C:\Program Files. Exactly the reason for this one more than to help programs finding the right paths compared to WINXP I need to read more on... Have any links on this topic?

kado897 · 14 Jun 2011

I'm sorry no I don't. Perhaps someone else can pick this up.

Gormta · 14 Jun 2011

Well for some strange reason I did only check this with explorer. Now Ivé done this also with msdos/cmd under adminstrativ priviligies revealing that the real names are: With command dir /A:

Juction Point: [Program Files :\Program Files]
Program Files
Program Files (x86)

I know almost nothing about these Junction points so I would be more than happy to get information from community or suggested links.

kado897 · 14 Jun 2011

As I understand it Junction points are like shortcuts but are created at the NTFS level. So your two Program Files entries are pointing to exactly the same area on disk. Usually Junction points are used so that old programs still work when a default folder is moved.

Gormta · 14 Jun 2011

Ok that could explain why it hasn´t got any "size" in properties and also why only my admin user is allowed to use it. The only strange thing perhaps is that it´s changed date is a half year old and the ordinary ... used all the time... so changed date is always updated. But secure copy (WIN) of this points to the "ordinary" program files folder so the only thing now is that none of my buddies so far - have the same :) That I dont like. But probably not part of a root kit

then.

kado897 · 14 Jun 2011

I doubt it if you have no other symptoms but you could try downloading and running Malwarebytes : Free anti-malware, anti-virus and spyware removal download. After download update the database and do a full scan. It can take an hour or so depending on you disk size.