Coinstaller log file and contet

[Rick]

While doing a little file cleaning I ran across this log file
coinlog.log

CO Installer log ?
I am thinking it is/was from one of the installs
I did in the past week

But the file date is from a day that I didn't install anything
The content of this log file can not answer any of my questions

Like where it came from or how it got there ( windows/temp)



Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF Code: 21
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA
Coinstaller.cpp - Coinstaller: ---DIF_DESTROYPRIVATEDATA


Something about this file doesn't smell right

The last program I installed was on the 14th
The above file shows a date of the 16th

any ideas ???????????????????????

[Budfred]

It appears to be a MS function to allow more efficient use of resources:

http://msdn.microsoft.com/en-us/library/ms793170.aspx

[Rick]

Thanks
That tells me a lot more.
Must have been during or left over from a hardware update/driver install

I didn't search for the DIF_DESTROYPRIVATEDATA
I searched for everything else :)

[Budfred]

With all the security work I do, I have done a lot of searching!!

I actually wrote a tutorial on using Google for malware searching that is used in a few of the schools...

[Rick]

Sounds good.

Unfortunately I am on the road and wifi in hotels is unreliable at best
Then finding that log file and not having anything but the laptop to run and search with makes it just that much more interesting

Oh well .. Time to get back to work
Thanks again