asked on
Strange iphist.dat file appearing. Delphi related ?
Sometime, an empty file named iphist.dat appears either on the Windows desktop, or in a folder where I have a Delphi project, or in the folder where I copy the project EXE file.
My anti-virus avast! does not detect any virus on my computer...
What is that file ?
Is there anyway something worst than a virus on my PC ?
My anti-virus avast! does not detect any virus on my computer...
What is that file ?
Is there anyway something worst than a virus on my PC ?
VulnerabilitiesOS SecurityDelphi
Last Comment
LeTay
It's not Delphi related. Delphi has nothing to do with it, except that the worm keeps spreading over the folder/exe you access.
ASKER
Does not seem to be that worm : none of the file to be deleted, according to "how to remove it" does exist !
It certainly seems to be some sort of worm, maybe a successor of aphex. Did you do a scan during boot with avast? Is there anything in the iphist file?
ASKER
The file is empty
I don't know how I can do a scan with avast at boot time
I don't know how I can do a scan with avast at boot time
Open Avast interface, select scan, select boot-time scan from the drop down list, press start.
If nothing is found, it's wise to try with another virus scanner. Not that Avast is bad, but no single virus scanner gets everything.
If nothing is found, it's wise to try with another virus scanner. Not that Avast is bad, but no single virus scanner gets everything.
it's the indy component for resolving or monitoring ip adresses which creates this file
normally this is in the .exe directory
my best guess is an app uses
TIdIPWatch or TIdIpAddrMon
normally this is in the .exe directory
my best guess is an app uses
TIdIPWatch or TIdIpAddrMon
Very interesting Geert, especially since the same file is associated with some worms, you wonder if that's coincidence or not ;)
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
I never stopped thinking, I just never use Indy ;)
Google for iphist.dat and you'll hit info about worms, not about Indy :p
Google for iphist.dat and you'll hit info about worms, not about Indy :p
ASKER
I do not use that indy component !
Will start a full scan tonight
Will start a full scan tonight
ASKER
Sorry about that, I found I use that tidipwatch !
I will modify the properties and watch what happens
I will modify the properties and watch what happens
ASKER
I change the property and indeed the file was that one !
Many thanks
Many thanks
I stopped using Avast since 2006. I am using Avira and I believe it's much more powerful than Avast.