c:\~LD folder - does anyone know what it is?

[Balance]

I've discovered a folder on my Win 7 machine called ~LD at the root of the c: drive (ie c:\~LD) which contains a single folder with a string of numbers as its name (01101115326) and that contains $LDBACK$, $LDMAP$, $LDTMP$, $LOGS$.

It's a hidden system folder & I'm hoping someone can tell me what it is please - given it contains > 90,000 files and is > 420mb I'm hoping it's something legitimate!

Thanks

 

[allend66]

No idea, but probably a good idea to scan it if you haven't done so already, then try opening any readable files (txt, log, xml, nfo, etc..). Also try Right clicking -> properties to see when it was "installed", maybe give you a clue as to it's source...

If paranoid (and you haven't installed anything recently) what I do when something unknown appears is rar it where it is, then delete the source file. If something legit stops working, just unrar the compressed file and you should be ok.

 

[Bill2]

Probably a leftover of a software install. You can take ownership of the folder, then backup to an external drive, then delete from the hdd file. Should the heavens fall, you can restore the folder.

To be even safer, image the system drive before attempting the above.

 

[Balance]

I've scanned it - that was how I spotted it as it took an age to scan through that folder.

I might take a peek at the files later (pretending to work at the moment though!) to see what's there.

 

[kword88]

could it be a logical drive? or a network drive?

 

[Balance]

Processmon from sysinternals shows that it is explorer.exe using the folder - I'm guessing I've acquired something nasty - I've experimented with changing settings on libraries, shadow copy and indexing to now avail.

So - deleted the contents (so that's 44,000 less files sitting on the disk).

Everything is still working fine several reboots later & the files have not been regenerating (yet).

 

[allend66]

The unfortunate thing is, with more programs you have installed, it will take you longer to fully test your machine to see if removing something unknown and 'bogus' will affect something legitimate.

Advice - keep a backup for a while untill you are completely sure that everything is fine. Good luck!

 

[beanFPE]

I found it! It is from Live Drive. When you set up the account there is a check box to store your briefcase on your computer and on line, or you can click on line only. It is a hidden file under the C drive in a folder named "~LD". This is your cache folder. Go into the Live Drive Control panel, click the Online Files tab and click the button for "just store my files on line...." or change where the cache stores these files. You can store to a portable hard drive if you wish.

 

[Balance]

Well spotted! At least we know now - I would have to guess that it took as much disk space as the data it transferred before I gave up using it!