xXOXx Posted January 5, 2014 Share Posted January 5, 2014 Well, i've noticed that a couple of .rar files contain a strange RR file. The size of the file varies from container to container. I still remember my norton antivirus (paid/daily updated) detected some strange activity the moment i connected to the internet. And at the moment I wasn't doing much other than extracting some previously downloaded rar files. Strange thing is my antivirus didn't detect anything until i went online. So i'm not sure which file was to be blamed.I'm targeting the RR file only cuz it seems strange. Never seen this before.Does anyone have any idea about it.Just let me know.I'll be glad to know that the RR file is something harmless.ThanxTwo nsane forums file that contains the RR file are:MiniTool Partition Wizard 8.1 Server Edition:http://www.nsaneforums.com/topic/189235-minitool-partition-wizard-server-edition-811/?do=findComment&comment=654900AndCyberLink YouCam 6.0.2326 Upgrade from Trial to Deluxe Edition:http://www.nsaneforums.com/topic/200335-cyberlink-youcam-602326-upgrade-from-trial-to-deluxe-edition/?do=findComment&comment=712708Don't know how many else contains that strange (at least to me) file. Quote Link to comment Share on other sites More sharing options...
STEEL Posted January 5, 2014 Share Posted January 5, 2014 Up-Load to Virus-total, and reply. Iam not gonna download & UN-Pack this Software, for I do not use this & to much P.T. ;) Quote Link to comment Share on other sites More sharing options...
SlimRock Posted January 5, 2014 Share Posted January 5, 2014 Details of the .rr file extension Check Here Quote Link to comment Share on other sites More sharing options...
xXOXx Posted January 5, 2014 Author Share Posted January 5, 2014 Details of the .rr file extension Check HereIt's an extensionless file. It's 'RR' and not RR.rr or something.rr Quote Link to comment Share on other sites More sharing options...
FreeRyde Posted January 5, 2014 Share Posted January 5, 2014 (edited) Possibly DNS resource records? Edited January 5, 2014 by FreeRyde Quote Link to comment Share on other sites More sharing options...
SlimRock Posted January 5, 2014 Share Posted January 5, 2014 Details of the .rr file extension Check HereIt's an extensionless file. It's 'RR' and not RR.rr or something.rrTry to open it with notepad to see what the whole fuss is all about, else upload it here! :s Quote Link to comment Share on other sites More sharing options...
xXOXx Posted January 5, 2014 Author Share Posted January 5, 2014 Details of the .rr file extension Check HereIt's an extensionless file. It's 'RR' and not RR.rr or something.rr Try to open it with notepad to see what the whole fuss is all about, else upload it here! :sVirus total says its clean. But i'm still suspicious about it. Please have a look and let me know if u figure out what the hell it is.Here's the link:http://www49.zippyshare.com/v/68777209/file.html Quote Link to comment Share on other sites More sharing options...
SlimRock Posted January 5, 2014 Share Posted January 5, 2014 Details of the .rr file extension Check HereIt's an extensionless file. It's 'RR' and not RR.rr or something.rr Try to open it with notepad to see what the whole fuss is all about, else upload it here! :sVirus total says its clean. But i'm still suspicious about it. Please have a look and let me know if u figure out what the hell it is.Here's the link:http://www49.zippyshare.com/v/68777209/file.htmlI could not find anything in the rr file unless someone knows Mandrin/Japanese as the whole content of the file while opening with the notepad are in either Chinese OR in Japanese :huh: FYI there is no RR file in http://www.nsaneforums.com/topic/189235-minitool-partition-wizard-server-edition-811/?do=findComment&comment=654900 Quote Link to comment Share on other sites More sharing options...
xXOXx Posted January 5, 2014 Author Share Posted January 5, 2014 (edited) 020202Details of the .rr file extension02Check HereIt's an extensionless file. It's 'RR' and not RR.rr or something.rr0202Try to open it with notepad to see what the whole fuss is all about, else upload it here! :sVirus total says its clean. But i'm still suspicious about it. Please have a look and let me know if u figure out what the hell it is.Here's the link:http://www49.zippyshare.com/v/68777209/file.html0202I could not find anything in the rr file unless someone knows Mandrin/Japanese as the whole content of the file while opening with the notepad are in either Chinese OR in Japanese :huh:02FYI there is no RR file in02http://www.nsaneforums.com/topic/189235-minitool-partition-wizard-server-edition-811/?do=findComment&comment=654900You didn't find the rr file in the mini partition rar cuz u r viewing it through windows. It's not visible through windows. View it through linux or copy that rar file to your phone and view it through xplore.I accidently saw that rr file when i was copying some photos to my memory card from my old nokia 5233. I'll upload some snapshots. Hold on. Edited January 5, 2014 by xXOXx Quote Link to comment Share on other sites More sharing options...
STEEL Posted January 5, 2014 Share Posted January 5, 2014 Details of the .rr file extension Check HereIt's an extensionless file. It's 'RR' and not RR.rr or something.rr Try to open it with notepad to see what the whole fuss is all about, else upload it here! :sVirus total says its clean. But i'm still suspicious about it. Please have a look and let me know if u figure out what the hell it is.Here's the link:http://www49.zippyshare.com/v/68777209/file.html I could not find anything in the rr file unless someone knows Mandrin/Japanese as the whole content of the file while opening with the notepad are in either Chinese OR in Japanese :huh: FYI there is no RR file in http://www.nsaneforums.com/topic/189235-minitool-partition-wizard-server-edition-811/?do=findComment&comment=654900You didn't find the rr file in the mini partition rar cuz u r viewing it through windows. It's not visible through windows. View it through linux or copy that rar file to you phone and view it through xplore.Hold on, what,s U,r O.S. & if its Windows, download Panda Cloud Scan http://pandacloudcleaner.pandasecurity.com/facebook/ + Norton Power Eraser http://za.norton.com/support/DIY/ . Install and run!!! Give feedback please. ;) Quote Link to comment Share on other sites More sharing options...
xXOXx Posted January 5, 2014 Author Share Posted January 5, 2014 0202020202Details of the .rr file extension02Check HereIt's an extensionless file. It's 'RR' and not RR.rr or something.rr0202Try to open it with notepad to see what the whole fuss is all about, else upload it here! :sVirus total says its clean. But i'm still suspicious about it. Please have a look and let me know if u figure out what the hell it is.Here's the link:http://www49.zippyshare.com/v/68777209/file.html0202I could not find anything in the rr file unless someone knows Mandrin/Japanese as the whole content of the file while opening with the notepad are in either Chinese OR in Japanese :huh:02FYI there is no RR file in02http://www.nsaneforums.com/topic/189235-minitool-partition-wizard-server-edition-811/?do=findComment&comment=654900You didn't find the rr file in the mini partition rar cuz u r viewing it through windows. It's not visible through windows. View it through linux or copy that rar file to you phone and view it through xplore.02Hold on, what,s U,r O.S. & if its Windows, download Panda Cloud Scan02 http://pandacloudcleaner.pandasecurity.com/facebook/ Norton Power Eraser http://za.norton.com/support/DIY/ . Install and run!!! Give feedback please. ;)My OS... Aah it's windows. And I use paid norton antivirus. And i scan my system after every 3-4 days. So basically my system is clean. Or it should be :D when i first extracted the file, i didn't see the rr file. It's invisible for windows. I saw it when i opened the rar file on my old symbian phone. Here are the snapshots:Links:Youcam file:http://www15.zippyshare.com/v/27230091/file.htmlMini partition:www53.zippyshare.com/v/34546491/file.html Quote Link to comment Share on other sites More sharing options...
Yorel Posted January 5, 2014 Share Posted January 5, 2014 (edited) xXOXx, there is no point in quoting the whole post ;) .BTW, if you publish links with shareware soft, please use Sharecode (how to work with in my signature). Edited January 5, 2014 by Yorel Quote Link to comment Share on other sites More sharing options...
xXOXx Posted January 5, 2014 Author Share Posted January 5, 2014 xXOXx, there is no point in quoting the whole post ;) .BTW, if you publish links with shareware soft, please use Sharecode (how to work with in my signature).Alright. Point taken :) will do that. Quote Link to comment Share on other sites More sharing options...
STEEL Posted January 5, 2014 Share Posted January 5, 2014 xXOXx, there is no point in quoting the whole post ;) .BTW, if you publish links with shareware soft, please use Sharecode (how to work with in my signature).Alright. Point taken :) will do that.Bro understand that Norton Power Eraser is far more sensitive and open then the A/V product, so is Panda, Please Dude install this /Scan & let me Know. Iam waiting for reply please. If something comes-up; I would like to take it further at my Base I.T. Office. Thanx. Quote Link to comment Share on other sites More sharing options...
xXOXx Posted January 5, 2014 Author Share Posted January 5, 2014 xXOXx, there is no point in quoting the whole post ;) .BTW, if you publish links with shareware soft, please use Sharecode (how to work with in my signature).Alright. Point taken :) will do that. Bro understand that Norton Power Eraser is far more sensitive and open then the A/V product, so is Panda, Please Dude install this /Scan & let me Know. Iam waiting for reply please. If something comes-up; I would like to take it further at my Base I.T. Office. Thanx. Alright... I'll do it. Thanx. I'll let you know when i'm done. Will take some time. Quote Link to comment Share on other sites More sharing options...
STEEL Posted January 5, 2014 Share Posted January 5, 2014 Roger/roger Quote Link to comment Share on other sites More sharing options...
masterupc Posted January 5, 2014 Share Posted January 5, 2014 if I'm not mistaken, RR is the recovery record in rar files...You can check it in the properties tab of the rar file (if it has recovery information or not). Quote Link to comment Share on other sites More sharing options...
STEEL Posted January 5, 2014 Share Posted January 5, 2014 if I'm not mistaken, RR is the recovery record in rar files...You can check it in the properties tab of the rar file (if it has recovery information or not).I thought so as well, but just want him to make a complete sweep, to make sure no malware- install took place in general ;) Quote Link to comment Share on other sites More sharing options...
SnakeMasteR Posted January 5, 2014 Share Posted January 5, 2014 http://en.wikipedia.org/wiki/Rock_Ridge Quote Link to comment Share on other sites More sharing options...
STEEL Posted January 5, 2014 Share Posted January 5, 2014 http://en.wikipedia.org/wiki/Rock_RidgeAgreed. Just want to hear his reply after scanning his system. Just for general purpose, about the worries his got Quote Link to comment Share on other sites More sharing options...
xXOXx Posted January 5, 2014 Author Share Posted January 5, 2014 Scan is on. Nothing detected as of now. Downloading the mini partition file all over again. But this time on my symbian phone. So this time it has got nothing to do with my laptop. Lets see, what we got now. I'll report back in about 10 mins. Thanx for showing interest. I really appreciate it. Quote Link to comment Share on other sites More sharing options...
STEEL Posted January 5, 2014 Share Posted January 5, 2014 Scan is on. Nothing detected as of now. Downloading the mini partition file all over again. But this time on my symbian phone. So this time it has got nothing to do with my laptop. Lets see, what we got now. I'll report back in about 10 mins. Thanx for showing interest. I really appreciate it.Remember panda as-well please Bro Quote Link to comment Share on other sites More sharing options...
xXOXx Posted January 5, 2014 Author Share Posted January 5, 2014 Hey bro look, this time i downloaded the file all over again on my phone. I haven't even copied the file onto my laptop. So it doesn't matter if my pc is infected or not. And apparently the rr file is even there inside the rar file.Here's the snapshot:www75.zippyshare.com/v/76853424/file.htmlJust for the record, the last time my laptop was infected, i did disinfect it. First my antivirus blocked some rogue service. Then i went to safe mode and deactivated those service and deleted those infected files. So i am sure that my laptop in not infected.Anyways, i'm still scanning it.Will let you know the final report. Quote Link to comment Share on other sites More sharing options...
Peet Posted January 5, 2014 Share Posted January 5, 2014 If you open the pwse811_softwarerchive.net Rar file and check the Info button, it shows that the Recovery record is 666,112 bytes in size - I believe this is the RR file you're seeing when you view it on an operating system other than Windows.I'd say you don't need to worry about it :-) Quote Link to comment Share on other sites More sharing options...
xXOXx Posted January 5, 2014 Author Share Posted January 5, 2014 If you open the pwse811_softwarerchive.net Rar file and check the Info button, it shows that the Recovery record is 666,112 bytes in size - I believe this is the RR file you're seeing when you view it on an operating system other than Windows.I'd say you don't need to worry about it :-)I guess you're right. I shouldn't worry about it. Even the virus total scan came out clean. Thanks Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.