Windows, Operating System, Security, Networking, Malware, Support, Forum, Help Site Check Our Facebook Page!
Notices
Firefox, Thunderbird & SeaMonkey Post your questions about Mozilla based products (Firefox, Thunderbird & SeaMonkey) here.


Register your FREE account to unlock additional features at WindowsBBS.com
   
 
 
LinkBack Thread Tools
Old 5th June 2009   #1
Senior Member
THREAD STARTER
Lifetime Subscription
 
jorjab's Avatar
 
Profile:
Join Date: Jul 2004
Location: Pennsylvania
Posts: 287
Computer Experience:
intermediate
jorjab Reputation Leveljorjab Reputation Level

My System
Question

What is file name beginnning with etilsq_


What is the following file. Created by Firefox vers 3.0.10.

etilqs_jqMl70mCVku4gjq4B7fM

File like this, always same beginning letters created by Firefox every time I start it up. Goes away when I close Firefox. In folder C:\Documents and Settings\my name \Local Settings\Temp.

Starts out at zero and eventually ends up at 29 KB or more in size.

Have to not been able to track when it is written to and did not used to be there. Virus checkers etc not find anything wrong with it. Should I be concerned or not? did a search on it and found mostly foreign language references and have no idea what it is.

Thanks,

jorjab is offline  

 

Register
to remove this ad.
 
 

Old 5th June 2009   #2
Staff
 
TonyT's Avatar
 
Profile:
Join Date: Jan 2002
Location: Fairfax, VA
Posts: 7,800
Computer Experience:
echo $experienced;
TonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation Level

My System
etilqs is sqlite backwards. Firefox uses sqlite. These are temp database files that usually are emptied when FF closes and sqlite stops.

TonyT is offline  

Did you find this post helpful? Yes | No
Old 5th June 2009   #3
Senior Member
THREAD STARTER
Lifetime Subscription
 
jorjab's Avatar
 
Profile:
Join Date: Jul 2004
Location: Pennsylvania
Posts: 287
Computer Experience:
intermediate
jorjab Reputation Leveljorjab Reputation Level

My System
Tony,

Thank You


never noticed it till recently

jorjab is offline  

Did you find this post helpful? Yes | No
Old 13th June 2009   #4
SuperGeek
Lifetime Subscription
 
mailman's Avatar
 
Profile:
Join Date: Jan 2004
Posts: 1,897
Computer Experience:
Intermediate Tinkering
mailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Level

I was going to start a new thread about this issue since I recently discussed it with Westside.

However, this etilqs_ issue seems to be quickly resolved as far as jorjab is concerned, so I hope nobody minds I am adding valuable information to this thread (not really "hijacking" ) by posting more details below. Maybe I'll get lucky and get some answers too.

WinPatrol's dog occasionally startingly barks and presents me with a "New Program Alert" window that displays the above-mentioned etilqs_???????? file as the "new program". The path to the file is displayed right below that.

Here's what WinPatrol's "PLUS" Information (available to paid users) says about the alerts.

Quote:
Path: C:\Documents and Settings\mailman\Local Settings\Temp\etilqs_t2ZBTd4jEVs5a4AbPVWM

SQLite Temp Files – ETILQS_

Etilqs_7uskvgpey8hw3blgg9nk and other files starting with etilqs_?????? (where ?? are random letters and numbers) may be found in your c:\Documents and Settings\Owner\Local Settings\Application Data\ folder (Windows 95/NT/98/ME/2000/XP) or c:\Users\\AppData\Local\ (Windows Vista, Windows 7). The word etilqs is SQLite spelled backwards. These appear to be SQLite related temp files that appear when using a Mozilla browser. These files started cropping up after a recent sqlite update. You'll find more information at http://www.sqlite.org/changes.html.

SQLite is a in-process library that implements a self-contained, serverless, zero-configuration, transactional SQL database engine. The code for SQLite is in the public domain so it is found in a number of programs including Mozilla Firefox, Skype, the Adobe Acrobat reader and more. You'll find more information at http://www.sqlite.org/famous.html.

It is likely that this issue will be addressed in a future update. In the meantime, it's safe to delete these files.
  • Safe


SQLite.org
Sometimes I will get only one alert. Other times I will get three or four alerts in quick succession as I delete the files via WinPatrol. I have not yet determined a pattern such that I can reproduce the alerts at will. (This time I did have several Firefox tabs. Some tabs were created by links. Other tabs were created with Ctrl-T. I wonder whether that has something to do with the SQLite temp files being created or not.)

The WinPatrol alerts are beginning to annoy me though.

Westside stated he has never seen these WinPatrol alerts. Therefore, I wonder whether it's because his browsing style differs drastically from mine or malware might actually be causing WinPatrol's dog to get excited in my computer.


EDIT: My OS: Windows XP Home SP3 | My WinPatrol: PLUS v16.0.2009.6
WinPatrol Alert issue occurs with at least Firefox versions 3.0.11 and 3.0.10 (and maybe earlier?).

EDIT#2: I searched http://www.sqlite.org/changes.html for "WinPatrol" and found nothing. I searched for "etilqs" and found only one mention (of the date SQLite started naming it's temp files backwards). In other words, I did not fin ANY mention of WinPatrol's "New Program Alert" popup windows.
  1. Does anyone know WHY WinPatrol occasionally alerts about these etilqs_?????? files?
  2. Does anyone else here see these WinPatrol alerts too?
  3. Can anyone else here produce the WinPatrol alerts at will? If so, then how?


Last edited by mailman; 13th June 2009 at 04:23.
mailman is offline  

Did you find this post helpful? Yes | No
Old 13th June 2009   #5
Staff
 
TonyT's Avatar
 
Profile:
Join Date: Jan 2002
Location: Fairfax, VA
Posts: 7,800
Computer Experience:
echo $experienced;
TonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation LevelTonyT Reputation Level

My System
Originally Posted by mailman View Post
1. Does anyone know WHY WinPatrol occasionally alerts about these etilqs_?????? files?
2. Does anyone else here see these WinPatrol alerts too?
3. Can anyone else here produce the WinPatrol alerts at will? If so, then how?
1. Probably the WinPatrol app flags the file because of how the file is named coupled with the fact that the file gets created via a browser sub process (thread).. Random character strings are commonly used by maleware.

TonyT is offline  

Did you find this post helpful? Yes | No
Old 13th June 2009   #6
SuperGeek
Lifetime Subscription
 
mailman's Avatar
 
Profile:
Join Date: Jan 2004
Posts: 1,897
Computer Experience:
Intermediate Tinkering
mailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Level

Thanks, Tony.

WinPatrol might also alert because the file is flagged as Hidden. After I have a better handle on these alerts, I may contact the WinPatrol author for verification (and perhaps a program fix).

Yet, also seems possible malware could create/modify those "etilqs_????????" files (knowing that legitimate software also creates them). Might help malware slip "under the radar" and avoid detection.

Also seems strange Westside (and anybody else who has viewed this discussion so far) has never seen a related WinPatrol alert.

The only non-default WinPatrol configuration option I recall (with certainty) ever making is "Display original Scotty Taskbar icon". I also have enabled "Warn if changes are made to my Internet HOSTS and critical System files." (which might be a default setting).

I just got another alert after opening this thread in a new tab via my WindowsBBS Control Panel and the file size is currently 0 bytes (when I view its properties in Windows Explorer). I did not delete the file and I will see if it grows like jorjab mentioned.

I'd sure like to be able to create these "etilqs_????????" WinPatrol alerts on-demand. (So far, they seem rather random.)

Anyway, perhaps more "WinPatrol and Firefox" users will weigh in with their observations (or "lack of" observations ).

Thanks again!

mailman is offline  

Did you find this post helpful? Yes | No
Old 13th June 2009   #7
Senior Member
THREAD STARTER
Lifetime Subscription
 
jorjab's Avatar
 
Profile:
Join Date: Jul 2004
Location: Pennsylvania
Posts: 287
Computer Experience:
intermediate
jorjab Reputation Leveljorjab Reputation Level

My System
after you posted I have been trying to get Winpatrol to bark about this and cannot get it to happen to me.

Have no idea why you get problem and I don't. I do not keep Wi Patrol running all the time but will try it with Firefox for a while to see if ever happens to me.

have fun with the mysteries of the computer. I have one of my own I posted and cannot solve.

Jorjab

jorjab is offline  

Did you find this post helpful? Yes | No
Old 13th June 2009   #8
Alumni
 
Westside's Avatar
 
Profile:
Join Date: Mar 2003
Location: Omaha,NE
Posts: 4,506
Computer Experience:
Intermediate
Westside Reputation LevelWestside Reputation LevelWestside Reputation LevelWestside Reputation LevelWestside Reputation LevelWestside Reputation LevelWestside Reputation LevelWestside Reputation LevelWestside Reputation Level

My System
Quote:
Westside stated he has never seen these WinPatrol alerts.
As a replied to the other thread, I said that I had never heard of WinPatrol. As TonyT said, above WinPatrol is an app, which must be downloaded and installed. So, it is not a case of different browsing style, but rather presence or absence of an external app

Westside is offline  

Did you find this post helpful? Yes | No
Old 14th June 2009   #9
SuperGeek
Lifetime Subscription
 
mailman's Avatar
 
Profile:
Join Date: Jan 2004
Posts: 1,897
Computer Experience:
Intermediate Tinkering
mailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Levelmailman Reputation Level

Thanks, jorjab and Westside.

Westside, I'm sorry I assumed you were a WinPatrol user. We know what happens when one assumes.

Anyway, I did some more digging tonight about this sqlite thing and found a Wilders Security thread that made me dig deeper for my WinPatrol settings.

"tbay2athome" stated,
Quote:
I got a reply from Bill Pytlovany, developer of WinPatrol and he told me that by default the option to monitor hidden files is turned off because a lot of legitimate programs create hidden files. He also said the main reason for having this feature is to help clean up malware which does include partner programs which are hidden.
That made me start looking for a "monitor hidden files" setting and I discovered it under WinPatrol's Options tab by clicking the "Hide Alert Messages" button. Appears I had made a non-default setting change long ago and forgot about it. (I had even forgot there were options under that button.) I had "Show All Alerts (for temporary usage)" enabled.

I think I have this WinPatrol "New Program Alert" problem solved.

Thanks again, everyone, for your patience and efforts!

mailman is offline  

Did you find this post helpful? Yes | No

Having problems with your computer? Does it crash or freeze? Is your pc slow? Our technicians can identify any issues and fix your PC quickly and reliably.

 

THIS THREAD HAS EXPIRED.

Are you having the same problem? Please post a new thread, but first you'll have to join us by Registering (FREE).



Discussion Forums
Operating Systems
Windows 8 Windows 8
Windows 7 Windows 7
Windows Vista Windows Vista
Windows XP Windows XP
Windows Server System Windows Server System
Legacy Windows OS Legacy Windows OS
Internet & Networking
Networking (Hardware & Software) Networking
Internet Explorer Internet Explorer
Microsoft Mail Microsoft Mail
Firefox, Thunderbird & SeaMonkey Firefox, Thunderbird
      & SeaMonkey

Web Applications & Cloud Web Applications & Cloud
General Internet
Security
Malware and Virus Removal Malware and Virus
     Removal

Security and Privacy Security and Privacy

Other
Other PC Software Other PC Software
Test Posts Test Posts
Hardware
PC Hardware PC Hardware
Mobile Devices Mobile Devices
Community
Introductions Introductions
General Discussions General Discussions
Site Comments & Suggestions Site Comments
      & Suggestions

News News @ WindowsBBS

Thread Tools


Find us on Facebook   Web Of Trust Rating

All times are GMT. The time now is 23:35.


Recent Discussions
No Boot Device Listed In Windows 8... (8)
Computer Slow to Boot and Files Cor.. (18)
MS expected to unveil Win 9 on Sept.. (4)
Window Live Mail error, now cannot .. (11)
Invalid IP address error, fixed but.. (2)
[Cannot open Standard User, open wo.. (1)
[Which] windows server 2012 edition.. (1)
Impact of defrag command on SSD? (7)
Excel Macro help (2)
What is giveio.sys and how to get r.. (31)
Need shortcut/hotkey for MSDOS and .. (3)
My Passport Back Up and Remove data (2)
Brother QL500 labelmaker (3)
Extremely Slow File moving/copying/.. (10)
Windows 8.1 Update 2 (18)
How do I stop Windows Explorer pers.. (12)
Backup Software Recommendation (9)
Upgrading to Windows 8.1 can mean l.. (20)
IE opens, then shuts down immediate.. (12)
Microsoft July 2014 Security Bullet.. (1)


Donate!
Support Windows BBS!



Powered by vBulletin® Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO
Copyright 2002 - 2013 WindowsBBS.com. All rights reserved.
FDMA Media LLC
Terms of Use, Legal Information & Privacy Policy
Page generated in 0.14311 seconds with 7 queries