Computer Hope
Other => Other => Topic started by: SLucia on July 02, 2008, 09:33:14 PM
-
I'm really dumb when it comes to computers, but I noticed some (what I am assuming are) programs that I don't remember installing, have never used and have no idea what they do. I'm afraid they might be bad programs or something designed to crap my computer out. Can someone explain to me what they are and how to get rid of them if they are bad?
Here's the list:
Nic's FourCC Changer
Nick's MiniCalc
Koepi's OGMCalc
StatsReader 2.1
ThreatWork
Vidc.Cleaner
Thanks!
-
http://www.google.com/search?hl=en&q=Nic%27s+FourCC+Changer&btnG=Google+Search
http://www.google.com/search?hl=en&sa=X&oi=spell&resnum=0&ct=result&cd=1&q=Nic%27s+MiniCalc&spell=1
http://www.google.com/search?hl=en&sa=X&oi=spell&resnum=0&ct=result&cd=1&q=Koepi%27s+OGM+Calc&spell=1
http://www.google.com/search?hl=en&q=StatsReader+2.1&btnG=Google+Search
http://www.google.com/search?hl=en&q=ThreatWork&btnG=Google+Search
http://www.google.com/search?hl=en&q=Vidc.Cleaner&btnG=Google+Search
Google is your friend.
The results for ThreatWork weren't appealing...
I don't think it would hurt to post a HijackThis log.
http://www.snapfiles.com/reviews/HijackThis/hijackthis.html
-
I did google them, but being as I really don't know much about this stuff, it didn't help me. :-\
But thanks.
-
Download HijackThis:
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download (http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download)
Click on Download HijackThis Installer
Post HijackTHis log.
We'll check, if your computer is in any danger.
-
Here is the log that I got.
(Side note - I got some kind of trojan or malware a few months back. I don't recall what it was called, but I remember it caused bugs to eat away at my screen savor (if that helps). I went online and downloaded a series of programs and followed another computer forums instructions for how to remove them, which is why I have Ad-Aware and SuperAnti-Spyware and Malwarebytes installed)
_______________________________________ ____________________
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:57, on 2008-07-02
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O3 - Toolbar: TextAloud - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - C:\PROGRA~1\TEXTAL~1\TAForIE.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [AskSBar Uninstall] rundll32 C:\PROGRA~1\UNINST~1.DLL,O -3
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Wireless Connection Manager.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file://C:\Program Files\Monopoly\Images\stg_drm.ocx
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file://C:\Program Files\Monopoly\Images\armhelper.ocx
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
--
End of file - 4209 bytes
-
The log looks clean, but there is no any antivirus program running. Why?
-
My cousin put my computer together and never installed one. I haven't been able to buy one, yet.
-
Immediately, download, and install one of two free antivirus programs:
- Avast! free antivirus: http://filehippo.com/download_avast_antivirus/
- Avira free antivirus: http://www.free-av.com/en/download/index.html
-
AVG Free (http://free.avg.com/ww.download-avg-anti-virus-free-edition) ain't bad.
-
Carbon, don't push, please.
We all know, ver 8.0 has been having a lot of problems. Personally, I don't recommend it anymore.
It works fine for some people, but since it doesn't work fine for others, to me, it's a bad program.
-
Hmmm....another good point.
I'll keep that in mind. ;)
-
Fair enough :)
-
Possibly you or someone you know has been doing some video copying? As Broni says, to be sure that these files are virus free, get a good antivirus package and scan your system.
Nic's FourCC Changer
Nick's MiniCalc
Koepi's OGMCalc
StatsReader 2.1
Vidc.Cleaner
These 5 apps are usually included in the XviD video codec package. They are utilities to help with various aspects of video encoding and (cough) DVD ripping. Even if you haven't been doing that, but just wanted the XviD codec so you can watch MPEG4 AVI video files, then those apps get installed.
ThreatWork
Component of Lavasoft Ad-Aware
Lavasoft ThreatWork is a feature of Ad-Aware that allows you to submit suspicious files for analysis via ThreatWork, an alliance of global anti-spyware security volunteers actively fighting online threats. After a scan, you can use ThreatWork to submit detected suspicious files directly to Lavasoft research analysts for an in-depth evaluation of a possible threat.
Slucia, how did you come to find out these programs were on your computer? Are they in the Start Menu, or the desktop, or what?
-
hey there I know this is really old but just found that nic's fourcc on my computer as well it was because i downloaded Xvid and its in my start menu i uninstalled it from my program and features and scanned and computer is clean