Downloaded active x control question

[Guest]

Hi,
In Advance Tools-System Explorer-Downloaded Active X Controls, there is the
following listing:
SysInfo Module
This is an unknown ActiveX
File path: c:\windows\downlo~1\sysinfo.dll
Description: SysInfo Module
Publisher: Rapidigm Inc
Last modified: Tue, 03 Aug 2004 21:34:11 GMT
Installed version: 1,0,0,2
Download location: http://ipgweb.cce.hp.com/rdqcpc/downloads/sysinfo.cab
Installed files include:
C:\WINDOWS\system32\msvcp60.dll
C:\WINDOWS\Downloaded Program Files\LogInfo.dll

Googled Rapidigm Inc-think it might be spyware. Should I block it??
PC seems to work fine, except 2 nights ago, when I logged into my Earthlink
emai, I noticed that the IE icon name had changed to my email password!--I
changed it back. I had downloaded the trial version of Cubis Gold 2 from
Yahoo Games on 9/27, removed it 9/29, otherwise nothing new added.

Have WinXP, IE 6.0, Norton Security 2005 Antispyware Edition, Microsoft
AntiSpyware Version: 1.0.615. , All up to date including Windows Updates,
all scans clean. Any info re the above active x control would be appreciated.
thanks, Kathy

 

[Bill Sanderson]

What have you got installed from HP--in particular, is there something
called "HP Instant Share Software?"

 

[Guest]

Hi Bill,
No HP instant share software-checked installed programs and did a hard drive
search. Have my HP printer program, Easy internet access (came with pc),
Compaq Connections and Compaq Organize (don't use them), Compaq Help and
Suppport--don't se anything else from HP. Have a Compaq Presario 1426NX.
Don't do photos, download videos/music or instant chat stuff. Yesterday
found several listings for PeoplePCin Norton Program Controls-was set as
automatic internet access, so I removed it as don't use it. Everything else
installed in Programs looks legit.
Kathy

 

[Bill Sanderson]

Ad-aware has, at least at some times, thought your Rapidigm, Inc,
sysinfo.dll was spyware.

Myself, I'm more inclined to think that it is a false positive.

If you have Ad-Aware, or would like to install it, and update to the latest
definitions, and see what it thinks, that might be useful. It might either
give you a clean bill of health (perhaps they've fixed a false positive)--or
it might say whether there's anything else on your machine that matches the
threat profile that sysinfo.dll is supposed to be part of.

You could also get a reading on sysinfo.dll via:

http://virusscan.jotti.org

or

http://www.virustotal.com

There's a browse box at the top of each of these pages--browse to the dll
file and send it in--see if any of the vendors represented think it is bad.



--

 

[Guest]

Will try your suggestions and keep you posted. Thanks for the advice!

 

[Guest]

Hi again,
The 2 suggest websites read sysinfo.dll. as negative for spyware. Tried
blocking it with MS Antispyware beta, pc got rel slow to load any
program/website, so unblocked it-works fine now! Must be needed, so will
leave it. Thanks again for your help.
K

 

[Bill Sanderson]

You could look through add or remove programs and try removing things that
you don't use and see if it goes away. I'm inclined to see it as harmless,
but obviously it is hooked in somewhere hence your experience of performance
decline with it blocked. If you aren't using whatever owns it, removing it
would be a good thing.

--