PC Review Forums Newsgroups Hardware Anti-Virus ALCH ?

Reply

ALCH ?

 
Thread Tools Rate Thread
Old 10-11-2004, 11:04 AM   #1
Ginger
Guest
 
Posts: n/a
Default ALCH ?


Five application files have appeared in My Documents folder recently. They
are named ddd, ps, psxx, wini and yyy. Looking at their properties they are
all from a company named alch with a product name of Project 1. I do not
know of anything that I have loaded recently to put them there, are they
dangerous?
Ginger.


  Reply With Quote
Old 10-11-2004, 02:33 PM   #2
pp hammer
Guest
 
Posts: n/a
Default Re: ALCH ?

if its 5 copies of the same application all with random names then theres a
clue

if they were dangerous good chance your pc wouldnt be working anymore, or
missing a lot of files

suppose u could call password stealers and backdoors dangerous too ;p

rename them n reboot, see if you have 5 more appear soon, or something you
didnt install and dont use begins to nag u that files are missing (not the
likely outcome)



  Reply With Quote
Old 10-11-2004, 11:08 PM   #3
David H. Lipman
Guest
 
Posts: n/a
Default Re: ALCH ?

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Dowload the Trend Pattern File by obtaining the ZIP file.
For example; lpt244.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDo...eSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point

* * * Please report your results ! * * *

Dave





"Ginger" <ginger@btinternet.com> wrote in message news:cmsskp$12a$1@titan.btinternet.com...
| Five application files have appeared in My Documents folder recently. They
| are named ddd, ps, psxx, wini and yyy. Looking at their properties they are
| all from a company named alch with a product name of Project 1. I do not
| know of anything that I have loaded recently to put them there, are they
| dangerous?
| Ginger.
|
|


  Reply With Quote
Old 11-11-2004, 01:21 AM   #4
Ginger
Guest
 
Posts: n/a
Default Re: ALCH ?


"pp hammer" <bill@microsoft.com> wrote in message
news:gFpkd.71$Iq1.58@newsfe6-win.ntli.net...
> if its 5 copies of the same application all with random names then theres
> a
> clue
>
> if they were dangerous good chance your pc wouldnt be working anymore, or
> missing a lot of files
>
> suppose u could call password stealers and backdoors dangerous too ;p
>
> rename them n reboot, see if you have 5 more appear soon, or something you
> didnt install and dont use begins to nag u that files are missing (not the
> likely outcome)
>
>
>

All five files have different times on them and they all have the same icon.
Four are the same size. I renamed them and rebooted the machine and they
have not yet reappeared. Nothing has yet complained of a missing file and I
see no reason for any application files to be in the My Documents folder.
Ginger


  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off