Page 1 of 1


PostPosted: Sun Sep 04, 2011 5:03 pm
by sckpsn
Yesterday, I received a prompt to back up my Encrypting File System (EFS) certificates. I don't use EFS and I had never seen this prompt before, so this was a major surprise (not of the good kind). What I read online led me to believe I or a program used EFS. Malware was mentioned. So last night I scanned my computer. Clean.

More research today: legit programs use EFS. I found the certificate's create date and time and went into the logs and saw EFS was changed from demand to auto at the same time. And I finally found ReverseGeocache.dat, which has the same time. It is encrypted. It is in this folder: ...AppData\Roaming\FastPictureViewer\Geocache.

I had installed FastPictureViewer Pro 1.6 (Build 211) 64-bit Edition the day before. I used it yesterday. I believe I went into Options yesterday. I believe I checked out the IPTC Editor (but did not use it) yesterday as well.

Is ReverseGeocache.dat legit?

What does ReverseGeocache.dat do?

Maybe an FAQ on this would be helpful.

Thank you.

Re: ReverseGeocache.dat

PostPosted: Sun Sep 04, 2011 6:41 pm
by Axel
ReverseGeocache.dat is a file created and used by the FastPictureViewer IPTC Editor reverse geo-coding feature to store the result of reverse-geocoding queries. Reverse-geocoding is the process of finding the nearest street address or place name from GPS latitude/longitude coordinates.

The database is created the first time the IPTC Editor is launched but remains empty until the reverse-geocoding feature is actually used (which requires the configuration of a reverse-geocoding provider, such as or

The program caches the query results and re-uses them for subsequent queries of nearby GPS coordinates: for example if a user shoots 100 pictures on some location it does not make sense to go online and retrieve the same place name 100 times. Instead the program looks in the cache first, and if an already known place name is found within a given (configurable) radius of the current image's location then the place's name/address is retrieved from the cache instead of going online to the reverse-geocoding provider to retrieve it again (the online provider meters, throttles and charge on a per-request basis).

Since this information is stored on the computer's hard disk and constitutes potentially sensitive user data (GPS coordinates and nearby addresses), FastPictureViewer encrypts the data in the cache so only the user in question has access to said data. The encryption is automatic and invisible, and the user owning the data has full access to the file without doing anything special.

This data is encrypted using the mechanisms built in the operating system (Encrypting File System in this case) and cannot be accessed or recovered by any mean without knowledge of the user's password and actually logging-in using his/her credentials: for all practical purposes, this user-private data remains private and no one can access it except the user that created it, which is nothing but vanilla Data Privacy 101.

The program has a "Clear Geocache" command that wipes out the content of the reverse-geocache database if a user wants to erase all traces of the GPS coordinates and addresses stored in FPV's reverse-geocoding cache on his behalf.

Re: ReverseGeocache.dat

PostPosted: Sat Jan 11, 2014 2:49 pm
by Head4Heights
I've been using FPV for years now and suddenly I got the same odd message about encryption. I note that the original post is dated back in 2011... it's now 2014. Have I inadvertently turned geocaching on?
I too did the detective work and found the encrypted file. I have decrypted it now btw - this won't, I hope, cause any problems.

Re: ReverseGeocache.dat

PostPosted: Wed Jan 15, 2014 6:24 pm
by gavind
I would also like to know please, if there are plans in enabling this in the future versions perhaps? Image