New
#1
RestartByRestartManager?
Can someone please explain what this is? Some process created this file in C:\ .
RestartByRestartManager?
-
-
New #2
Sounds suspicious and I found an (equally suspicious) online "guide" that identifies it as a virus-related item: (TIPS!) How to REMOVE VIRUS?. Probably want to run a scan using Malwarebytes AntiMalware (MBAM) or Trend Micro Housecall, if your own built-in anti-malware solution finds nothing.
HTH,
--Ed--
-
New #3
EdTittel, you and I read the same articles.
. This was an empty folder where the word RestartByRestartManager followed by a very long braced hexadecimal number. In any case, I deleted it. Did several very thorough virus scans. First with AdwareCleaner, then MBM, then Avast boot time scan which found some corrupt WindowsApp .zip files but nothing in the way of a threat. This process shortened my life by about 90 minutes but at least I feel better and more secure with a clean Macrium mirror. 
-
New #4
Now: keep your fingers crossed and hope for the best. If your scanning turned nothing up, you should probably be OK.
Thanks for following up: good work!
--Ed--
-
New #5
This is not a virus. That command line may be added to some application (program) that was restarted by the Windows Restart Manager (after a reboot, a system crash, or if the application itself was terminated unexpectedly.) The exact command line parameter that is added when the app is restarted usually looks like this:
/RestartByRestartManager:F2BD12FB-8985-4f48-8CA3-473CAABA1B76
where that crazy number at the end is a GUID that is used by the application to reload its documents. (It makes sense only for the logic in that application.)
So if some misconfigured app that didn't know how to handle that restart parameter assumed it to be a file path, it might have created a file or a folder with that name. This may happen with some old application that was written before Restart Manager was a thing and the developers weren't aware of it (or didn't test for it.)
Quote