Perplexed :lsburnwatcher

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by korvorka, Mar 14, 2005.

  1. korvorka

    korvorka Private E-2

    I found a startup item under misconfig titled lsburnwatcher google search info was a trojan I contacted Hp just to make sure they thought it was some kind of dialer I run norton antivirus and also spybot pro niether has picked this up so I was directed to your site and have been going thru "do this first" I have run the two scans stinger and cc clean & adware nothing is picking this up the reason I contacted hp is in startup items under command lsburnwatcher :
    c:\hp\drivers\hplsbwa... after visiting HP disabled this item along with a few others and now run a selective startup.What is this Am I ok just disabling in startup should i try to remove it was is it whats it doing thanks in advance for any attention given this post let me alsp state never noticed any real problems except delayed startups which is how I found this Item anyways
    {hp compaq presario} XP home edtion sp2
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Still sounds like it belongs to HP? Possibly something to do with CD or DVD burning software. Did you try right clicking on the EXE and getting some of the version info to see who created it?
     
  3. korvorka

    korvorka Private E-2

    this is what it says in startup when I run msconfig under startup tab :
    {} lsburnwatcher c:\hp\drivers\ hplsbwa... SOFTWARE\Microsoft\CurrentVersion\Run

    I tryed right clicking nothing happened are you talking about doing that else where I am in System Configuration Utility
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Run Windows Explorer and locate the file. Right click on it in Windows Explorer. This is where you get Properties and Version tab information.
     
  5. korvorka

    korvorka Private E-2

    The file is in my prefetch folder listed as a pf file :lsburnwatcher.exe-1c6739b7.pf opens with...unknown application size:12.4kb (12,736 bytes)
    size on disk :16.0 (16,384 bytes)
    Created feb 9 (date I purchased computer)
    Modified march 13 (?) maybe the day I disabled in startup?
    Accessed Today March 16
    Attributes (niether box is checked
    Nothing under sumarry
    don't know what a pf file is?
    I 'm about to believe this is a file that came with pc considering it was created the day of purchase. If you know of a good site that has a good glossary of terms espicially file extension and such would be greatly appreciated
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Are you saying that is the only file you can find? You can delete the one in Prefetch. But there should be a real .EXE file somewhere you can get properties on. Unless it is already deleted.

    It is often find here: C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
     
  7. korvorka

    korvorka Private E-2

    Yep its hp here is what is does :LightScribe automatic labeller launcher; waits to see when you've written a music CD and helps you create the LightScribe label for it. Whoopee!!! ;) Thanks for the help but Ive got one more question for you since you have been keeping up with my post whats up with Wild tangent games came preinstalled come to find out its spyware how serious is this type of spyware the kids have been enjoying some of the games.Of course they only give you so many sessions, than it buy this and buy that.I guess I don't understand why hp or compaq would send out a pc with spyware ? :confused: later
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I knew it was part of HP! ;)

    Many computer have WildTangent on them because it comes when AOL is installed. More crap that you don't need. It is not a major problem but we always suggest removing it because of the history of issues around it. Plus those kind of sites always lead the users to bad stuff.

    Unless you really have to have it (and like be watch/tracked) you should uninstall it.
     
  9. korvorka

    korvorka Private E-2

    Thanks doc I will and thanks again for your help now I'm off to find a new antivirus and firewall program they only give you 60 days with these new pc's
    I always kinda liked norton but can't afford the sticker right now even thou is a resorce hog at times oh should I still remove that pf file in my prefetch folder its not needed to use that program if I decide to use it later is it? or should I just leave it be
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds