Help with a boot file that I found and want to know what it is

Page 1 of 2 12 LastLast

  1. Posts : 472
    Windows 10 Pro x64
       #1

    Help with a boot file that I found and want to know what it is


    Hi. I found this file in Boot folder in my windows HD, the only info I got is something related to linux. I am on Windows pro x64. Just want to make sure It's nothing malicious. As you can see, it's missing from my other OS HD with the same version of windows. I don't know what the partition called ESP even is. This partition is super hidden and only diskgenius found it.

    Help with a boot file that I found and want to know what it is-skaermbild-2023-02-14-124319.pngHelp with a boot file that I found and want to know what it is-skaermbild-2023-02-14-124031.png

    - - - Updated - - -

    Found this in a forum that is related to dual boot ubuntu linux and windows, to dual boot windows and linux or ubuntu? But it was related to dual booting with those 2, and that file name was in there. I never had linux, it has never been o my system.

    I'm fearing the worst, like something that is hidden that dual boots into linux that uses something/that file from this super hidden partition, maybe some rootkit or what ever. However, no rootkit scanners find anything, but still, it might be because it's encrypted? And hidden, and because of that, it bypasses the scanners? This is not impossible, hence why I'm asking.

    Help with a boot file that I found and want to know what it is-skaermbild-2023-02-14-125431.png
      My Computer


  2. Posts : 4,772
    several
       #2

    hidden esp partition is standard for efi booting windows.

    bootx64.efi is a windows file

    I dont recognize the names of the other two, are you booting something else ? Just looked it up, apparently something to do with wubi.
      My Computer


  3. Posts : 472
    Windows 10 Pro x64
    Thread Starter
       #3

    SIW2 said:
    hidden esp partition is standard for efi booting windows. Looks normal to me.

    bootx64.efi is a windows file

    Presumably those other two are linux files.
    Weird, why do I have linux files? And the BOOT folder is only on my HDD where 1 of my OS is installed, the other HDD OS Installation as seen in the image does not have the BOOT folder neither the file EASWINPE.DAT. I made a backup on that drive that has that folder and file with EaseUS Todo backup, but i cant find anything related to easeUS and that file, and also its linux based so what does that have to do with EaseUS?

    - - - Updated - - -

    Is it safe for me to delete that BOOT folder? That folder like I said is not present in my other OS installation on other HDD. So I can't see how it's needed. And I would love to know what the hell has installed that and why and what It's used for.
      My Computer


  4. Posts : 4,772
    several
       #4

    that could be an easeus file.

    for example, if you select reboot to diskgenius winpe, you will find a file in there called DGRebootRun.ini


    Weird, why do I have linux files?
    have you any other programs ( partitioning/imaging etc ) which use linux boot media ?
      My Computer


  5. Posts : 472
    Windows 10 Pro x64
    Thread Starter
       #5

    SIW2 said:
    hidden esp partition is standard for efi booting windows.

    bootx64.efi is a windows file

    I dont recognize the names of the other two, are you booting something else ? Just looked it up, apparently something to do with wubi.
    The files you are talking about is not what I am interested in, ignore those files you see in the image. It's the EASWINPE.DAT I am talking about. Is that a linux file? What I gathered, the image you see is from a forum where they talk about dual boot from Ubuntu and windows. So I am guessing the file is related to that. I never had linux ever, so why is it there?
      My Computer


  6. Posts : 4,772
    several
       #6

    have you any other programs ( partitioning/imaging etc ) which use linux boot media ?
      My Computer


  7. Posts : 472
    Windows 10 Pro x64
    Thread Starter
       #7

    SIW2 said:
    that could be an easeus file.

    for example, if you select reboot to diskgenius winpe, you will find a file in there called DGRebootRun.ini




    have you any other programs ( partitioning/imaging etc ) which use linux boot media ?
    i guess what i could do is, make a backup of my other os disk and see if easeUS will put that file on the disk. If not then its not related to that.

    - - - Updated - - -

    SIW2 said:
    have you any other programs ( partitioning/imaging etc ) which use linux boot media ?
    I have AOEMI Disk Partition, Disk Drill. I don't know if they use linux boot media though.
      My Computer


  8. Posts : 3,037
    Windows 10 Pro for the Bro
       #8

    If you can make a copy of the file that you can see in Windows, make the copy and upload it to VirusTotal to see if anyone else made an upload of that exact file and see if there are any virus scanners that see it as a suspicious file, or if people left any comments about that file.
      My Computer


  9. Posts : 472
    Windows 10 Pro x64
    Thread Starter
       #9

    pepanee said:
    If you can make a copy of the file that you can see in Windows, make the copy and upload it to VirusTotal to see if anyone else made an upload of that exact file and see if there are any virus scanners that see it as a suspicious file, or if people left any comments about that file.
    Nothing found and no comments BUT it says its EASLINUX.DAT

    Help with a boot file that I found and want to know what it is-skaermbild-2023-02-14-163955.png
      My Computer


  10. Posts : 3,037
    Windows 10 Pro for the Bro
       #10

    Yea, it looks like a really old EaseUS file (last first person who submitted a copy of this file was almost 11 years ago).
    It has something to do with Linux for sure. Like stated above, a double boot into Linux. One of your apps probably installed that file in one of your hard drives, not as a virus or a security threat or anything.

    I think your drive should be fine without that file.

    It's up to you (I'm not 100% sure): You can rename it (add like a 1 to the end of the filename), restart the computer, and see if your drive is still accessible. Most likely will be. But like I said, not 100% sure. Make sure you have a data recovery app just in case.
    If it's accessible, then move that file to a different folder. Restart. If you can see all the file in your drive still, then delete it. It looks like a pointless file.

    But be aware I'm not 100% sure about all this.
    If I had the same issue, I would have a data recovery app handy, JUST IN CASE anything happens when I get rid of that file.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 06:34.
Find Us




Windows 10 Forums