Copyright: FileMap by BB® Copyright Bernie-Built Manufacturing® 2003-2004  www.dogkennels.net/filemap                   bernie@testrun.cjb.net


FILEMAP BY BB®

This is a FREE full working version with no Adware or Spyware which requires just one Visual Basic 6 runtime library (Msvbvm60.dll) to already be on your system.

Help me monitor how many people are using my software by visiting www.dogkennels.net/filemap888 and receiving a FREE password to stop any NAG screens from appearing. This gives more accurate indication of how many people are really using the program, instead of relying on the download figures from software libraries across the World.

Please note: You are not required to leave any email address, it is just a simple way for me to learn how many people are actually using the program by the number of page hits.

To get the password, simply type www.dogkennels.net/filemap888 into your browser’s address bar, or use the shortcut link by clicking REGISTER on the drop down HELP menu.

Software vendors may disclose the password with the program on any sites which are not written in English, without seeking permission.

The password may also be disclosed on any magazine cover disks with the program (or any other CD’s), without seeking permission.

This will allow all users to benefit from this program even if they do not understand this text file.

Thanks for participating,

regards Bernie Madigan (BB®)

bernie@testrun.cjb.net

THIS PROGRAM IS INTUITIVE

 FileMap by BB®

Have you ever noticed how the number of files in your windows and system directories seem to mysteriously grow over time?  Or, you might have already heard from victims of hijack programs describing how phantom files had taken control of their browsers, with no idea where they came from.

It’s times like that when it would be handy to have a record of files before and after, so you could determine which files do not belong.

Don't become complacent with Internet security. Firewalls are great - but never think they are perfect. There could be times when your firewall is out-smarted. FileMap by BB is a tiny program that helps you pick up the pieces if your firewall ever becomes penetrated, or other secret files mysteriously invade your hard disk. It's a layer of security you cannot afford to be without which downloads in just a few seconds.

FileMap by BB lets you take control of the growing number of files  on your system by making an inventory record of those in the Windows, the System, and the Disk Root directories so that you can constantly check what has been added (or removed).

FileMap by BB is a tiny program designed to help you pick up the pieces if your firewall ever becomes penetrated or other secret files mysteriously invade your hard disk.

OVERVIEW

1.        FileMap by BB uses one of the most basic methods of determining which files have been added or removed from your computer, by comparing before and after lists. Lists can be created at any time and are stored in a folder named FILEMAP-BY-BB created in the directory being monitored, either the Disk Root, the Windows or the System directories.

2.        When the program is first run it automatically records the names of all the files in each of those three directories and saves the record as a text file in the FILEMAP-BY-BB directory described above.

3.       If it detects the file count in the monitored directories has changed the next time you run the program, you will be prompted to create a new record then compare it with any of the earlier ones to determine which changes have occurred.

4.        Whilst comparing the records, you have the option to quarantine files you suspect do not belong. Files are quarantined to a new, unique sub-folder in FILEMAP QUARANTINE also created in the monitored directory.

5.        You also have the option to save the results after comparing before-and-after records as a text file inside an extra sub-folder named FILEMAP-MAP-BB\COMPARED LISTS.

6.        You can run Filemap by BB at any time to monitor changes as they occur in the monitored directories, or...

7.        By arming Boot Alert, the file count of each of the monitored directories is silently compared with that from the latest record each time the computer boots up. If there is no difference the Boot Alert closes again without ever being noticed. Boot Alert adds about 1/10 second to the boot time, but provides a valuable layer of protection by warning you of any extra files which could have been added without your knowledge.

8.        If Boot Alert detects changes to the file counts, you are given the option to run FileMap to update the latest record of the list of files (allowing you to compare files later), or do nothing. It is totally up to you.

9.        Additional help is provided on the forms by clicking on any of the blue text, which reveals dialogue box help snippets.

CONTROLS ON FRONT FORM

10.        When FileMap is first run, a record list of the files in the Disk Root directory, the Windows and the System directories is saved into the FILEMAP-BY-BB directory described above at item 1.

Save current file list

11.        Click this button to create a new file list record. The newest list will appear at the top of a collection. Each time you save a list, you are also given the option of adding your own comments with a free text note for convenience during later comparisons.

*(The list is saved with a name in the form YYMMDD~hhmmss~number of files.txt (that is: year month day ~ hour minute second ~ number of files) to guarantee a coded unique name, sorted in alphabetical order.)

Open this records folder

12.        Click this button to open the FILEMAP-BY-BB folder used to hold the file record lists. This gives you easy access to the folder for editing or managing.

Compare two records

13.        Select any two records from a collection then click this button to compare them.

Read selected records

14.        Click this button to open the selected file records with your computer’s text reader.

Delete selected records

15.        Click this button to delete the selected records.

Refresh

16.        It is important to realise the monitored directory files are sampled each time the program starts. They are not sampled again, even if the directory contents change, unless you click REFRESH. You will be prompted to click refresh whenever a procedure is carried out which may change the recorded file count with the true file count.

Boot Alert ON

17.        Check this box to automatically launch Boot Alert each time your system boots up. This is a valuable layer of security which quickly indicates a change to the file counts in monitored directories each time the computer is booted. Use this feature to alert you of any malicious files infecting your system inadvertently downloaded from the Internet, which are often installed to one of the monitored directories.

HINTS

18.        Click on any blue text on the forms to get dialogue box help snippets.

19.        Flashing red indicators display when it is recommended to click a button to update the latest file record.

20.        Search all record lists for the occurrence of a file in the FILE pull down menu. This feature is handy to determine when a particular file first appeared on your system.

THE COMPARE FORM

20.        Check any two records in a collection then click COMPARE TWO RECORDS to open the Compare Form. This list is provided for your information, it is entirely up to you how you use it. If, you suspect your computer may have been infected by a virus or a hijacker you will find this information very useful.

Determine if file exists

21.        Highlight any file to determine if it still exists on the computer

Do Quarantine

22.        ONLY IF YOU WISH TO, you can quarantine a file by moving it out of its current directory into a separate folder instead of deleting it. Click this button to quarantine the file into its own unique sub-directory of FILEMAP QUARANTINE created in the monitored directory.

Quarantine folder

23.        Click this button to open the quarantine folder giving you access to the files.

Copy results to clipboard

24.        Click this button to copy the results to the clipboard which can be then pasted into any text document.

Save As

25.        Click this button to save the results as a text file. Files are saved into the sub-folder  FILEMAP-BY-BB\COMPARED LISTS by default. By default, unique file names are generated in the format of “YYMMDD-hhmmss Date.txt” to provide a unique alphabetically sorted name.

Previous results

26.        Click this button to open the sub-folder FILEMAP-BY-BB\COMPARED LISTS in the monitored directory.

VIEW REGISTRY RUN KEYS FORM

Overview of Registry Run Keys

27.         Trojan programs may be run, once they have been installed on your hard disk, by starting them from special registry keys actioned during boot-up. Keys which can do this are displayed on the View Registry Run Keys form.  You can simply quarantine values of which you are suspicious. This allows you to restore them later if you wish, and is the safest way to experiment with registry run values.

28.        Amongst the files you should be suspicious of are executables in the form "xxxxxx32.exe" which have been installed in the windows or system directory and are started at boot-up. You should also be particularly suspicious of .DLL's which are run at start-up in association with RUNDLL32.exe (Please note: Rundll32.exe is a legitimate Microsoft File used to execute .DLL’s). For example, "Rundll32 Webinfo.dll"  becomes executable, and may be a registry entry used to execute a secret program.

29.        If FileMap has detected some secretly added files, then there is a good chance that one of them will be started from a registry run key. In this case, you should definitely quarantine that run value.

INSTALLATION and REMOVAL

Instal and Uninstal

30.        Installation and operation makes no changes to the system registry and adds no runtime libraries. All the extracted files are put in the program's own directory during the drag-and-drop instal. The file record lists created by FileMap are stored in a folder called FILEMAP-BY-BB in the Windows, the System and Disk Root directories, which are NOT removed on uninstal. A Readme.txt file is written to each of these folders to remind you.

31.        Quarantined files are NOT removed when the program is uninstalled and can be found in the FILEMAP QUARANTINE folder ( the Windows\FILEMAP QUARANTINE, the System\FILEMAP QUARANTINE and the Disk Root\ FILEMAP QUARANTINE).

32.        Compared lists are held in the FILEMAP-BY-BB\COMPARED LISTS folders inside each of the three monitored directories.

33.        Please note, the FILEMAP-BY-BB folder and the FILEMAP QUARANTINE folder are not removed from the monitored directories when the program is uninstalled as a safety measure. You can remove these folders if you wish, but you should be sure that files previously quarantined will not be needed.

34.        To delete the program, simply use the uninstaller provided, or just delete its folder and any shortcuts to it.

About the Author

This program is copyright of Bernie Madigan, Sydney  Australia, but can be freely distributed, published on any media or uploaded to any web site without seeking permission, provided no files are altered or deleted.

I make timber dog kennels for a living, but I write software for relaxation and applause, that is why it is free.  Please send me an email, and let me know what you think. Keep up-to-date, visit www.dogkennels.net/filemap

And, if you're after a decent timber dog kennel which will last forever (*lol*), visit my site at www.dogkennels.net

Email me at bernie@testrun.cjb.net

Regards Bernie (BB®)