Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Virus & Other Malware Removal Virus & Other Malware Removal
Search Search
Search for:
Tech Support Guy > > >

AmIcoSingLun

(In Progress)
(!)

tirta's Avatar
tirta tirta is offline
Computer Specs
Member with 139 posts.
THREAD STARTER
 
Join Date: Dec 2008
Experience: Intermediate
02-Apr-2010, 02:11 AM #1
AmIcoSingLun
This has turned up in my 'PROGRAMS' folder - uninvited.
Can anyone tell me what it is and does, please?
If it's a 'nasty' - how do i get rid of it?
Thanks.
Cheeseball81's Avatar
Computer Specs
Moderator & Malware Removal Specialist with 83,557 posts.
 
Join Date: Mar 2004
Location: Long Island, NY
Experience: Advanced
02-Apr-2010, 10:39 AM #2
According to Google, it can be both legitamite or mailicious.

It seems to be associated with AlcorMicro Co., an Icon Utility

It also described it as "When different cards are inserted into the card reader, it shows different icons according to the inserted card type."

Do you use a memory card in your computer or have recently?

If not, we will further investigate the file.
__________________
Microsoft MVP - Consumer Security
If we've helped you, please donate to TSG!
tirta's Avatar
tirta tirta is offline
Computer Specs
Member with 139 posts.
THREAD STARTER
 
Join Date: Dec 2008
Experience: Intermediate
02-Apr-2010, 10:13 PM #3
Thanks for this.
I have not used a memory card.
Any further help will be appreciated.
Cheeseball81's Avatar
Computer Specs
Moderator & Malware Removal Specialist with 83,557 posts.
 
Join Date: Mar 2004
Location: Long Island, NY
Experience: Advanced
02-Apr-2010, 10:24 PM #4
Click here to download HJTInstall.exe
  • Save HJTInstall.exe to your desktop.
  • Doubleclick on the HJTInstall.exe icon on your desktop.
  • By default it will install to C:\Program Files\Trend Micro\HijackThis .
  • Click on Install.
  • It will create a HijackThis icon on the desktop.
  • Once installed, it will launch Hijackthis.
  • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  • Come back here to this thread and Paste the log in your next reply.
  • DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

AND -

Run Hijack This and click Open the Misc Tools section.
Click Open Uninstall Manager > Save list and save the log to your Desktop.
A list of programs will open in Notepad. Post the contents of this log.
tirta's Avatar
tirta tirta is offline
Computer Specs
Member with 139 posts.
THREAD STARTER
 
Join Date: Dec 2008
Experience: Intermediate
03-Apr-2010, 03:56 AM #5
This looks good.
Thanks for all your trouble.
I've copied your instructions and will follow them off-line.
Cheeseball81's Avatar
Computer Specs
Moderator & Malware Removal Specialist with 83,557 posts.
 
Join Date: Mar 2004
Location: Long Island, NY
Experience: Advanced
03-Apr-2010, 10:03 AM #6
Okay
tirta's Avatar
tirta tirta is offline
Computer Specs
Member with 139 posts.
THREAD STARTER
 
Join Date: Dec 2008
Experience: Intermediate
04-Apr-2010, 11:07 PM #7
Here's the info you required. Thanks for helping.
Attachment Blocked
Attachments in the HJT forum are often designed to solve a specific issue and not meant to be used without instructions specific to your computer. If you want help specific to your computer, please post a HiJackThis Log. If you started this thread, please make sure you are logged in to be able to view attachments.
Cheeseball81's Avatar
Computer Specs
Moderator & Malware Removal Specialist with 83,557 posts.
 
Join Date: Mar 2004
Location: Long Island, NY
Experience: Advanced
05-Apr-2010, 12:01 AM #8
There it is....Alcor Micro USB Card Reader - so it's definitely legit.

Your log doesn't look too bad. Your AVG is outdated.
I would recommend you upgrade to version 9.

Rescan with Hijack This.
Close all browser windows except Hijack This.
Put a check mark beside these entries and click "Fix Checked".

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O13 - Gopher Prefix:


Close Hijack This and reboot.

Post a new log.
tirta's Avatar
tirta tirta is offline
Computer Specs
Member with 139 posts.
THREAD STARTER
 
Join Date: Dec 2008
Experience: Intermediate
05-Apr-2010, 02:03 AM #9
I find it amazing that you can make sense of these results.
Thanks so very much.
tirta's Avatar
tirta tirta is offline
Computer Specs
Member with 139 posts.
THREAD STARTER
 
Join Date: Dec 2008
Experience: Intermediate
05-Apr-2010, 02:33 AM #10
Here are the latest.
Attachment Blocked
Attachments in the HJT forum are often designed to solve a specific issue and not meant to be used without instructions specific to your computer. If you want help specific to your computer, please post a HiJackThis Log. If you started this thread, please make sure you are logged in to be able to view attachments.
Cheeseball81's Avatar
Computer Specs
Moderator & Malware Removal Specialist with 83,557 posts.
 
Join Date: Mar 2004
Location: Long Island, NY
Experience: Advanced
05-Apr-2010, 09:32 AM #11
The entries are still there. Not that they are harmful. My feeling is SpyBot's TeaTimer is prohibiting the fixes.

Temporarily disable SpyBot's TeaTimer:

Open Spybot and click on Mode and check Advanced Mode
Check yes to next window.
Click on Tools in bottom left hand corner.
Click on System Startup icon.
Uncheck Teatimer box.
Click Allow Change box.

http://russelltexas.com/malware/teatimer.htm

Now refix those same entries with HijackThis and reboot.

And here is the link to the newest AVG: http://free.avg.com/us-en/free-antivirus-download
tirta's Avatar
tirta tirta is offline
Computer Specs
Member with 139 posts.
THREAD STARTER
 
Join Date: Dec 2008
Experience: Intermediate
05-Apr-2010, 11:04 PM #12
Thanks, once more.
I've done as adivsed.
I've attached the lastest files, in case you need to look.
Attachment Blocked
Attachments in the HJT forum are often designed to solve a specific issue and not meant to be used without instructions specific to your computer. If you want help specific to your computer, please post a HiJackThis Log. If you started this thread, please make sure you are logged in to be able to view attachments.
Cheeseball81's Avatar
Computer Specs
Moderator & Malware Removal Specialist with 83,557 posts.
 
Join Date: Mar 2004
Location: Long Island, NY
Experience: Advanced
05-Apr-2010, 11:06 PM #13
Thank you. I see that SpyBot is off now. But did you recheck those entires in HijackThis afterwards?

And the old AVG is still there.
tirta's Avatar
tirta tirta is offline
Computer Specs
Member with 139 posts.
THREAD STARTER
 
Join Date: Dec 2008
Experience: Intermediate
05-Apr-2010, 11:24 PM #14
Yep - all fine now thanks.
Will update AVG - asap.
Cheeseball81's Avatar
Computer Specs
Moderator & Malware Removal Specialist with 83,557 posts.
 
Join Date: Mar 2004
Location: Long Island, NY
Experience: Advanced
06-Apr-2010, 09:33 AM #15
Ok good.
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑