lcsrv16.exe

[Doug Main]

My firewall (Sygate) tells me that I have outgoing traffic from my computer
that is interacting with c:\winnt\system32\lcsrv16.exe When I received my
first ask about what I wanted to do, I blocked it; now I'm allowing it.

I am trying to determine what exactly all this is in aid of, but none of the
search engines I have return anything for lcsrv16.exe. The file is there in
my system32 folder, it was created at the same time I fresh installed W2K.

What should I know? What should I do? What should I not do?

Thnx

 

[Jud]

My firewall (Sygate) tells me that I have outgoing traffic from my computer
that is interacting with c:\winnt\system32\lcsrv16.exe When I received my
first ask about what I wanted to do, I blocked it; now I'm allowing it.

I am trying to determine what exactly all this is in aid of, but none of the
search engines I have return anything for lcsrv16.exe. The file is there in
my system32 folder, it was created at the same time I fresh installed W2K.

What should I know? What should I do? What should I not do?

Thnx

--
Doug Main
"It's never too late to have a happy childhood."

A quick search of my 2K install shows no file called

lcsrv16.exe residing anywhere on my C drive, I think it may be something
added by a program that you have and I don't, why dont you try renaming the
file and see if it causes any programs to stop working

Jud

 

[George Hester]

check the properties of the file for version and copyright info. If it was
a bona-fide file you would have found in Google. But check the properties.
If there is no info it is likely not something you want. Move it out of
your path and see if the notice stops or better yet something wants it and
can't find it. Then you might be able to determine where it is called.
Most likely though in your Run keys in the registry..

 

[Doug Main]

check the properties of the file for version and copyright info. If
it was a bona-fide file you would have found in Google. But check
the properties. If there is no info it is likely not something you
want. Move it out of your path and see if the notice stops or better
yet something wants it and can't find it. Then you might be able to
determine where it is called. Most likely though in your Run keys in
the registry..

The properties items (descrition and origin) are all blank, however I did
find it in the registry in three places, including under
HKU|default|software|microsoft|windows|current version|run It's there as a
"Microsofts Service" Sounds fishy. I've backed up the reg, deleted the
keys and will continue down this path. Thnks

(BTW, I had earlier renamed the file, blocked it thru my firewall, and have
noticed nothing strange in terms of machine operation.)

 

[George Hester]

Yeah services do NOT occur under the run key. You will need to get it out
of:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

to remove it as a service. Blank version copyright usually means "it's
blank because we don't admit making it."