What is this folder - "Apps" in appdata/local/

[Keyes]

This folder was created a little over two weeks ago.

The folder extends this far, with no folders having any files.

Appdata/local/Apps/2.0/NN3MAOW.TB8/OTAHHLPM.5KM/manifests

All the sub folders were created at the same time. What causes these folders to created? I read that its something to do with clickonce, but I do not use it.

 

[Keyes]

Anyone have any information?

 

[logicearth]

Applications that use the .NET Framework. Perfectly normal. And yes, it can be Click-Once which is part of the .NET Framework.

 

[Keyes]

Applications that use the .NET Framework. Perfectly normal. And yes, it can be Click-Once which is part of the .NET Framework.

How can I find out what created it? No event logs or files seem to be found at the time it was created.

 

[Ztruker]

Google doesn't have a lot of info: Appdata/local/Apps/2.0/NN3MAOW.TB8

 

[Keyes]

Google doesn't have a lot of info: Appdata/local/Apps/2.0/NN3MAOW.TB8

The folders beyond 2.0 are temp or randomly made up names. I could find info about apps/2.0, and that clickonce, or as logicearth says .net framework apps use it, but I want to know what program caused it, and im having troublr finding out as event viewer and searching for file dates isnt showing much.

 

[Ztruker]

Mine, C:\Users\xxxxxxxx\AppData\Local\Apps\2.0\Q6VR3HJB.LPZ\GA35AHRE.171\manifests was created 12/25/2013 which was before I upgraded 8.0 to 8.1, so I think it came from something I installed or updated while using 8.0.

No idea what though.

 

[Keyes]

Mine, C:\Users\xxxxxxxx\AppData\Local\Apps\2.0\Q6VR3HJB.LPZ\GA35AHRE.171\manifests was created 12/25/2013 which was before I upgraded 8.0 to 8.1, so I think it came from something I installed or updated while using 8.0.

No idea what though.

Is a way to find out what executables of files were used at a certain date as event viewer seems to be limited. Is there some sort of llg file somewhere? Maybe a .net log?

 

[Callender]

Checked file creation time

I've checked that folder and looked at any other folders that were created around the same time.

So far I have not spotted anything. I might try the same trick and look at registry changes.

 

[Keyes]

I've checked that folder and looked at any other folders that were created around the same time.

So far I have not spotted anything. I might try the same trick and look at registry changes.

View attachment 333644

If you are able to find out anything, I would appreciate it.

 

[Keyes]

So does anyone have anymore information?

 

[ThrashZone]

I don't see anything more recent than 8/23/13 :/
Sounds like most of those came from Google toolbar and about the time I uninstalled it ?
None of the exact folder names though
6H5VZOXA.LCA
EB7LVO9P.CQM
Manifests shows,
clic...exe
goog...app

 

[Keyes]

I don't see anything more recent than 8/23/13 :/
Sounds like most of those came from Google toolbar and about the time I uninstalled it ?
None of the exact folder names though
6H5VZOXA.LCA
EB7LVO9P.CQM
Manifests shows,
clic...exe
goog...app

Mine just appear to be empty with the temp file names. Is there A way to see my past installed and uninstalled aplications? (Control panel wont show past uninstalled ones)

 

[ThrashZone]

I was going by memory,
If the dates of install were recent you could just post you msconfig startup and services pages for review :/
Click start and type in the search box,
msconfig
Click or enter
Services check the box on the bottom left to Hide all Microsoft services,
Then Startup repeat the screen shots,
Cheers.

 

[Keyes]

I was going by memory,
If the dates of install were recent you could just post you msconfig startup and services pages for review :/
Click start and type in the search box,
msconfig
Click or enter
Services check the box on the bottom left to Hide all Microsoft services,
Then Startup repeat the screen shots,
Cheers.

I cant take a screenshot as I am using a tablet at the moment, but here is the list of startup. The folder is now almost 20 days old without any modifications("." Will represent space between startup item and manufacturer. )

Realtek HD audio manager . Realtek Semiconductor
Microsoft security client . Microsoft Corporation
Nvidia Geforce Experience . Nvidia Corporation
Nvidia Geforce Experience . Nvidia Corporation
Steam Client Bootstrapper . Valve corporation
Intel(R) USB 3.0 monitor . Intel Corporation
P17RunE . Unknown (this startup dll is signed by creative, they make soundcards and I use a soundcard used by them
Logitech (c) G930 headset . Logitech (c)


Services

Creative audio engine licensing service . Creative labs
Creative audio service . Creative technology ltd
Google update service (gupdate) . Google inc
Google update service (gupdatem) . Google inc
Intel (r) capability licensing software interface . Intel (r) corporation
Intel (r) capability licensing software tcp ip interface. Intel (r) corporation
Intel (r) dynamic application loader host interface service . Intel (r) corporation
Intel (r) management and security application local management service . Intel (r) .corporation
Nvidia Network Service . Nvidia Corporation
Nvidia Streamer service . Nvidia corporation
Nvidia display driver service . Nvidia Corporation
PnkBstrA . Unknown (this is an anti cheat engine for a game called battlefield and a few others, which I have)
Steam client service . Valve Corporation
Nvidia Stereoscopic 3d driver service . Nvidia corporation


Sorry if its a bit rough.

 

[ThrashZone]

Thank you for the update,
Confirm which browsers you have install and how long this anti cheat has been installed ?
Also review your browser add-ons in them/ toolbars and extensions and accelerators,
I take it if you game you have Java installed as well in your browsers ?
If you have ie11 installed this could all be tied to this new feature of it,
Internet Explorer begins blocking out-of-date ActiveX controls
Cheers.

 

[ThrashZone]

Sorry that link doesn't go very far see this instead,
http://www.sevenforums.com/security-news/344910-september-9th-2014-security-updates.html

 

[Keyes]

Thank you for the update,
Confirm which browsers you have install and how long this anti cheat has been installed ?
Also review your browser add-ons in them/ toolbars and extensions and accelerators,
I take it if you game you have Java installed as well in your browsers ?
If you have ie11 installed this could all be tied to this new feature of it,
Internet Explorer begins blocking out-of-date ActiveX controls
Cheers.

Punkbuster has been installed for more than a year. It is a legitimate program used by Ea and activision developed by evenbalance.

I use google chrome, I have been reinstalling chrome alot lately testing things and I heard chrome uses click once so possibly its related

I do not use games related with java and I do away with java completely for security reasons.


I have the latest ie installed but I use chrome 99% of the time.

 

[ThrashZone]

Could be why the folders are empty you don't use ie for the games you play :/

I believe Callender might return with an update sooner or later ?
See how many files this clears,
I doubt it will changed the listing of the local folders but it's a good cleaner none the less for gamers,
Temp files delete,
Run this as administrator and Start the scanner,
Shut your machine down after it finishes,
http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/

 

[Keyes]

Could be why the folders are empty you don't use ie for the games you play :/

I believe Callender might return with an update sooner or later ?
See how many files this clears,
I doubt it will changed the listing of the local folders but it's a good cleaner none the less for gamers,
Temp files delete,
Run this as administrator and Start the scanner,
Shut your machine down after it finishes,
http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/

Ive never used a browser to play any sort of java game or flash game. I play games downloaded from steam. I have moved the folder away and it hasnt come back so im going to wait and see if anything happens.