help me understand the reason of these folders? (sandboxie)

[giulia]

Hi
i bought a software and i'm tring to create it portable

i run it in a sandboxie

and i found the program create only these folders

C\Windows\system32\CatRoot2\

with this files

Code: Select all

edb.log, 65.536 bytes
edb.chk, 8.192 bytes

these folders

C\Windows\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}

Code: Select all

catdb, 1.056.768 bytes

and

C\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}

Code: Select all

catdb, 26.746.880 bytes

may i ask you?
is the w7 that creates such folders and files?
or is the program?
thanks

[guinness]

It's Windows.

[giulia]

It's Windows.

thanks Guinnes
may i know what's is related to these folders/files?

i mean some info about them?

thanks

[guinness]

Just google to find out.

[giulia]

Just google to find out.

hi
yes i did it before asking
but i got only antivirus about malware ,virus pages

[SYSTEM]

I recall that CCleaner with winapp2.ini removes edb.log. In other words, edb.log is useless.

[joby_toss]

Its A Folder Which Stores The Signatures Of Windows Update Package And Allows It To Be Installed. The File %windir%\System32\catroot2\edb.log will be updated by the cryptographic services. So Inorder To Delete The Folder The Cryptographic Services Has To Be Stopped First. All The Updates Are Stored Under The Folder %windir%\SoftwareDistribution And Its managed By The Automatic Updates Service.

...first link found by google... and further down: How to Get Rid of a Catroot2.

[giulia]

Its A Folder Which Stores The Signatures Of Windows Update Package And Allows It To Be Installed. The File %windir%\System32\catroot2\edb.log will be updated by the cryptographic services. So Inorder To Delete The Folder The Cryptographic Services Has To Be Stopped First. All The Updates Are Stored Under The Folder %windir%\SoftwareDistribution And Its managed By The Automatic Updates Service.

...first link found by google... and further down: How to Get Rid of a Catroot2.

Just google to find out.

thanks mates
but i find out that many software doesn't write in these folders