Minecrafter Posted January 26, 2014 ID:782984 Share Posted January 26, 2014 Hello, just wondering, What is this program? I have no processes for it ever running. So what does this program do? Just wondering. Thanks Link to post Share on other sites More sharing options...
Minecrafter Posted January 26, 2014 Author ID:782991 Share Posted January 26, 2014 Alright, So Should I keep it? I don't have a phone xD Link to post Share on other sites More sharing options...
David H. Lipman Posted January 26, 2014 ID:782994 Share Posted January 26, 2014 Hello, just wondering, What is this program? I have no processes for it ever running. So what does this program do? Just wondering. Thanks What is WHAT program ? If you want answers to a query you must supply facts to support the query so a responder can properly address said query. Your post, which I quoted, contains no facts. Link to post Share on other sites More sharing options...
daledoc1 Posted January 26, 2014 ID:782998 Share Posted January 26, 2014 Hi, Minecrafter: In addition to what DHL has expertly advised, it would be most helpful if you could post back with BOTH logs from the DDS tool attached to your next reply here in this thread. Those logs will assist the staff and experts as a starting point in determining what the process might be, whether or not it can/should be removed from your computer, etc. Thanks, daledoc1 ----------------------DDS InstructionsDownload DDS from one of the locations below and save it to your Desktop:dds.scrdds.comTemporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware ProgramsOnce it is downloaded, you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.Then double click dds.scr or dds.com to run the tool.Click the Run button if prompted with an Open File - Security Warning dialog box.A black DOS console should open and run for a moment. When done, DDS will open two (2) logs:DDS.txtAttach.txtSave both reports to your desktopPlease attach both of the following logs to your next reply: DDS.txt and Attach.txtYou can ignore the note about zipping the Attach.txt file in most cases. Link to post Share on other sites More sharing options...
Minecrafter Posted January 26, 2014 Author ID:783055 Share Posted January 26, 2014 No I mean, the title has the program name, and I meant there is no process, And I posted a thread on a different website at the same time I did here, they said the programs fine so its all good Link to post Share on other sites More sharing options...
David H. Lipman Posted January 27, 2014 ID:783067 Share Posted January 27, 2014 Again - no facts. What you must realize is that any process or program can be named anything and malware authors will often mask the malicious activity of their malware by pretending to be a legitimate process. When you say "the title has the program name" means nothing. What counts is the fully qualified name and path to a program or process. That's a fact that can be responded to as your post is ambiguous and the FQN is unambiguous, it is specific. A perfect example is the "Host Process for Windows Services", SVCHOST.EXE. It is the server of services, the daemon of of daemons. It is also the most often used name by malware. It can be using the name SVCHOST.EXE or a variation of the name such as SCVHOST.,EXE and its not the name of the file that counts it is WHERE the file is executed from.Example:c:\windows\system32\svchost.exe is legitimatec:\windows\temp\svchost.exe is not a legitimate process. By using the name svchost.exe the malicious activity is obfuscated by using a legitimate processes' name. That is why the fully qualified name and path to a program or process must be provided as a fact so a proper response can be made and is why one MUST provide supporting facts. Another example is LSASS.EXE. In MS Windows UPERCASE file names, lowercase file names and MiXeD CaSe file names are all the same. Malicious actors have been known to use the confusion of a "font" to obfuscate their malicious file's activity. LSASS.EXE, which starts with the capitol Letter "L" is not the same as Isass.exe which starts with the capitol letter for "i" which is "I" which can be confused with the lowercase of the letter "L" which is "l". This is why real facts and context are important and MUST be provided when one posts a query, statement or problem. ** Additionally, please do NOT split a post between the subject and the body. A subject for a post in a Forum or on Usenet is just a blurb to the subject matter. It is the body of the post where you must fully describe all facts about the query, problem or statement. Link to post Share on other sites More sharing options...
daledoc1 Posted January 27, 2014 ID:783069 Share Posted January 27, 2014 No I mean, the title has the program name, and I meant there is no process, And I posted a thread on a different website at the same time I did here, they said the programs fine so its all good As DHL suggested, if you don't provide usable information, such as the simple system logs, then no one can really answer your questions or assist you with any certainty. If you have obtained the answer you seek from a cross-post at another forum, then so be it. Cheers! daledoc1 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 27, 2014 Root Admin ID:783120 Share Posted January 27, 2014 @RonnieM You're missing the point here. The point is that one should not "guess" what a program is. If you follow along with David and daledoc1 they're showing you a methodology that should be used to avoid mistakes or create unexpected issues. Thanks Link to post Share on other sites More sharing options...
John L. Galt Posted January 27, 2014 ID:783149 Share Posted January 27, 2014 David and daledoc and Ron are correct. The OP needs to provide more information. *Specifically*, the OP also needs to provide information on whether they have an LG component in their system - e.g. in an LG Blu-Ray burner. If you do, then that file could very well have been downloaded as a part of the software package that was installed with that particular component. Furthermore, if you do not have an LG component now, but have had one in the past, it could have been installed then and just be leftover software. Furthermore, if you have ever had an LG component attached to you computer even temporarily (such as an external burner of some typ made by LG) it could also have been installed then and could also be a leftover product. Furthermore, it could be malware disguising itself as a legitimate and real product. David's point is that your questions need to be more concise and clear, with as much information as you can provide - remember, we are not there to look at your computer physically, so what is basically going on right now is akin to a scenario where you've just called a mechanic you've never met before on the phone and are telling him that you car is making a funny noise, and are asking if that is normal. That mechanic is going to ask you to either give him full details over the phone (highly unlikely, as most mechanics just don't have that sort of downtime) or else going to ask you to bring it in to the shop so he can take a look at it. We don't have the option to ask you to bring it in to the shop, so we need you to be very detailed in providing the information on this file to us in order to make a judgment. As daledoc said, providing logs is not a bad idea as well. HTH Link to post Share on other sites More sharing options...
Minecrafter Posted January 27, 2014 Author ID:783338 Share Posted January 27, 2014 Yes, my burner is a lg product. and as I said I have the problems fixed. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 27, 2014 Root Admin ID:783365 Share Posted January 27, 2014 Okay I'll go ahead then and close this topic now. Thank you Link to post Share on other sites More sharing options...
Recommended Posts