ezSP_Px

I try to keep my computer clean as possible. After cleaning it with chaslang before I still scan occasionally with spybot and adaware. Today I used the online trojan scan from bitdefender and it couldn't remove this item. It was in the system32 folder. Is it bad?

 

Attach the log from the scan and I will take a look.

 

um i just closed the scan. it takes about an hour to complete the scan. Is there another way to look for it?

 

Do you remember the exact file name?

Please see the below thread, then attach a current HJT log.
http://www.majorgeeks.com/images/grenade.gif Downloading, Installing, and Running HijackThis

 

i think i see it in the hijack log. here it is posted

 

That file I believe is part of the Easy Systems CD/DVD Writing Software. It appears to be legit.

 

ok thanks a lot. by the way, are there any other problems in my log?

it was weird because whenever i ran the bitdefender before it wouldn't pick up this Easy Systems thing.

 

No problems, your log looked good. Are you having any problems?

 

no problems, just the weird scan. Thanks again for the help bjgarrick, it took a load off my mind.

 

Your Welcome!

 

bjgarrick, i scanned with bitdefender again and it picked up that same file. it says its infected with Backdoor.Ezpskx.A

i'll post a log

 

Like I said the file is part of the Easy Systems CD/DVD Writing Software. It is a legit file, there is no threat. The detection is a false positive and nothing to worry about.

If your still convinced it's an infection you can delete it but you may have problems with the Easy Systems CD/DVD Writing Software.

 

i trust you, but in the past when i scanned with bitdefender it never picked up this 'infection'.

 

I'm not sure what's going on, it's probably their recent updates detecting this as a baddie.

Locate the file manually, right click and get as much information as possible. Post back with the results. Check for a "Version" tab and see what all info is there.

 

the version is 1.0.0.0

Description: ezSP_Px MFC Application

Copyright: Copyright (C) 2002 Easy Systems Japan Ltd.

what else do you need to know?

 

Okay, that's what I was thinking.

Do you use this software?

 

Nope, didn't even know it existed. So there's nothing wrong with it right?

 

If you don't use it then I would uninstall it.

 

I don't think I use it but it is a process that is running right now. Will uninstalling it mess up my computer?

 

No, it's just a burning program for burning cd's and such.

 

do i just delete the application? its not listed in the "add/remove programs" in control panel

 

Go into C:\Program Files and look for the directory. Once you find it see if you can find the uninstaller if it has one, it will be "unist000.exe" or "uninstall.exe" or something similiar.

 

nope, can't find the directory.

 

Are you familiar with Primo DVD and Drag'n'Drop CD?

 

No, I don't burn CDs or use any of this software.

 

Download, install and run CCleaner to clean any junk files.

After you clean the junk files, select "Tools" and then "Uninstall". Click the button "save to text file" and attach this to your next post.

 

I dont' see a "save to text file"

This is really getting troublesome..should I just leave the program there?

 

On the left side select "Tools" and under "Uninstall" it will be on the bottom right. Be sure you have the newest version.

 

It's not a threat, if you want to leave it that's fine but if you don't use it you can uninstall.

 

If it isn't a threat then maybe I'll just leave it.

here is the CCleaner log

 

ok i guess you're busy at the moment. I think i'll just leave this Easy Systems alone if it is no threat. I'll check back for your instructions later. thanks for the help

 

Look back in Add/Remove programs and uninstall "AutoUpdate". If you want to leave it that's fine, as I previously stated it's no threat but you can safely remove it if you like.

 

"AutoUpdate" isn't in the add/remove programs list. this is driving me crazy. I'll just leave it alone.

 

Okay, it showed in the log so as a precaution I posted that. It's good that isn't in Add/Remove, however you may want to check in C:\Program Files for it and delete IF found.

If things are running good and your not having any problems it's ok to leave it. It's completely up to you.

 

great so is there anything else i need to do at this point?

also what is this "AutoUpdate"? could you fill me in?

 

Basically it’s just an unwanted program that has the potential to deliver popups and such. I believe it comes from P2P applications and probably some others locations as well.