I've discovered an interesting folder inside the Recycle Bin in a hard drive image NPROTECT. I have found the file NPROTECT.log inside, which seems to be the index for the rest of the files contained in this folder. However, I've been surfing the web to find a specification for its structure and haven't been able to find anything. Has anyone ever parsed a file like this or has used any log viewer for this file? The information inside is surely quite interesting (actual file names, deletion date/time…) but at the moment I'm not able to extract that information from inside.
Any ideas? Thanks.
Try opening the NProtect.log file in notepad you should be able to read it. This is a file that is used to protect against hackers and viruses. Norton used to be a good product but now it installs all kinds of odd files on a system it even installs rootkits. I hope this helps.
Symantec released a utility as part of System Works and Norton Utilities which added additional protection to the recycle bin for file deletion. The Recycle bin does not catch all forms of deletion, so Symantec added an extra layer to catch deletions by automatic processes and other applications. The files are stored and indexed in the NProtect.log so that they can be restored by the user if necessary. It works in a similar way to INFO2 files. The file structure is different to an INFO2 file though. There are numerous utilities out there which will extract NProtect.log data.
It has nothing to do with protecting files against hackers or viruses??
Could you please rcw8892 point out one of those utilities? I haven't been able to find any!!
Thanks
DataLifter®.Net Bonus Tools can parse NProtect.log
_http//
rcw8892,
> There are numerous utilities out there which will extract NProtect.log data.
Such as? I'm interested, as well…I'd like to write a parser myself.
H
Harlan
Off the top of my head, Datalifter bonus tools has a parser. I have seen a couple of others somewhere.
I wrote one myself about three years ago which did INFO2 and Norton Protect Logs. I intended it to be part of a suite of tools which I never released. I will dig it out and compile it and post a link. We use it in the office here. I also have an extractor which goes with it which will carve out deleted entries from the disk.
Is everybody finding the same problems as me to access the official website of that product?? –>
Every time I try to visit the page I found an error.
I forgot the link in case anybody else wants to try
link
http//datalifter.com
working for me )