What is the "d3d9caps.dat" ? Variant 3645725
Our database contains single file for filename d3d9caps.dat. Agregate rating is 3(3) stars - based on 4 reviews.
- Product:
- (Empty Value)
- Company:
- (Empty Value)
- Description:
- (Empty Value)
- Version:
- (Empty Value)
- MD5:
- 37d82768051fb5a65f683d889f245252
- SHA1:
- 98142215f7a218df64bdcc5e546376fb748c7355
- SHA256:
- fda87c4ebfccb8d6fb41fa2df5f5c010c4094ba4ff35434cc50d6823f1c8a79f
- Size:
- 664
- Directory:
- C:\Windows\System32
- Operating System:
- Windows XP
- Occurence:
- Low
Is the "d3d9caps.dat" Safe or Threat ?
50% of reviewed files are marked as Threat .
Click Here to Download System Explorer for Free.
User Reviews of the "d3d9caps.dat"
-
THREATrating from user Guru (Variant: 3645725)
By the way MikeOne, if you go to the link you offered published by MSDN, you will notice that they have a link to https://msdn.microsoft.com/en-us/library/windows/desktop/bb172513%28v=vs.85%29.aspx
BUT this is giving an explanation to D3DCAPS9 structure and not D3D9CAPS.dat which is the malware. You notice that MSDN has the number 9 at the end of the file and the malware has the number 9 next to the second D. It is definitely a highly advanced malware as no one seems to know how to get rid of it without it replicating itself. It does have a header of d3d9caps.h but that is not the actual same program in the system 32 file. -
THREATrating from user Guru (Variant: 3645725)
It is a modified malware file supposedly under direct 3dX in the registry key tree that prevents users of Internet browsers like Firefox, Waterfox or Palemoon from watching any videos that whoever installed it onto your system does not want you to see. If visit a website like RT.com or any non-western based site, try watching a video with any of the above browsers, d3d9caps.dat will create a new file called d3d9caps.tmp and will let it run for approx 10 seconds, then block the content with no basic explanation. If however you delete this file, it still recreates itself and will cause you screen to flicker and wont allow you to watch the content. If however you use IE or Google Chrome, it will not block your content. It genuinely will keep recreating itself even if you remove all associated registry keys. I would advise installing Clam Sentinel, so as to see which files are being modified in the background as this is always the best way to understand the behavior of a hidden program. No matter what you do, it always recreates itself within a few seconds. Definitely a malware program as even if you try to locate the d3d9caps.tmp which is created by d3d9caps.dat, it disappears literally 2 seconds after you locate it in the c:WINDOWSsystem32 folder.
-
SAFErating from user Pawel
-
SAFErating from user MikeOne (Variant: 3645725)
This file should be a part of the Direct3D graphical system for MS Windows, in this case the D3DCAPS9 procvessing unit. Complete info for this function can be found on MSDN page : http://msdn.microsoft.com/en-us/library/windows/desktop/bb172513(v=vs.85).aspx