Strange file in my root folder

From: Daren (pearcy_at_-removethis-gmail.com)
Date: 02/27/05 

Date: Sun, 27 Feb 2005 16:45:32 +0000

Hello,

I'm running windows 2k server. It's patched with all hotfixes, etc. Also
has Norton AV and Kerio Personal Firewall.

It is running a web site under IIS, so port 80 is open.

I've discovered a file in the root of the c drive, called
ur_tunnel_profile.log, at about 2mb in size. It was created at a time
when no one was using the PC. Below are the first and last few lines of
the file. Has anyone got an idea as to what this is? Has someone gained
access to my PC?

First few lines:-
17:31:08:031 (168) (768023843)
17:31:08:031 (168) ( 0) ------------------
17:31:08:046 (168) ( 16) open
17:31:08:046 (168) ( 0) ------------------
17:31:08:125 (2472) ( 137.67) win32_locking_callback enter
17:31:08:125 (2472) ( 0.05) win32_locking_callback enter
17:31:08:125 (2472) ( 0.02) win32_locking_callback enter
17:31:08:140 (2472) ( 17.67) win32_locking_callback enter
17:31:08:140 (2472) ( 0.06) win32_locking_callback enter
17:31:08:140 (2472) ( 1.62) win32_locking_callback enter
17:31:08:140 (2472) ( 0.05) win32_locking_callback enter
17:31:08:140 (2472) ( 0.70) win32_locking_callback enter
.
.
.
.
Last few lines of file:-
17:45:50:078 (904) ( 0.03) begin statistics
17:45:50:078 (904) ( 0.09) end statistics
17:45:50:078 (904) ( 0.02) before select
17:45:50:250 (904) ( 167.27) select completed 1
17:45:50:250 (904) ( 0.06) << before read from remote side
17:45:50:250 (904) ( 0.12) << 17 bytes read
17:45:50:250 (904) ( 0.02) << before write to local side
17:45:50:250 (904) ( 0.28) << write completed
17:45:50:250 (904) ( 0.03) before select
17:45:50:343 (904) ( 107.95) select completed 1
17:45:50:343 (904) ( 0.06) >> before read from local side
17:45:50:406 (904) ( 56.58) >> -2 bytes read
17:45:50:453 (904) ( 50.33) before select
17:45:50:921 (904) ( 461.96) select completed 1

Thanks,

Daren

Relevant Pages

  • Re: aspnet_regiis.exe -ir -enable destroys perf counters?
    ... be enabled in the IIS security console. ... You shouldn't run that command on servers running Windows 2000. ... on computers where the web service is supposed to be installed. ... If I look into this log file, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Website to share and distribute photos
    ... It's the easiest of the bunch to use. ... web site really doesn't make it clear. ... But even if you're not running Windows or install ... the DropZone client, you can upload 12 pics at a time without even ...
    (rec.photo.digital)
  • Securing IIS 5.0
    ... I am running Windows 2000 Server with IIS 5.0 and I used ... the instructions on a document named secure IIS 5.0 ...
    (microsoft.public.inetserver.iis.security)
  • Cannot reach my own web server using dynamic IP
    ... In your IIS settings, is the the ip address set to all ... >Running Windows 2000 Professional and using IIS, ... >no local network, ... >Config info follows.. ...
    (microsoft.public.inetserver.iis)
  • IIS 5.1 and Office 2003
    ... Ever since I installed Office 2003 last evening, ... I am running Windows XP ... or a partial HTML display (as ... IIS, adding and removing virtual IIS folders. ...
    (microsoft.public.inetserver.iis)