Help - Search - Members - Calendar
Full Version: Nosign.exe
BleepingComputer.com > Bleeping Computer Applications and Guides > Windows Startup Programs Database
   
arioch
Filename: nosign.exe Argus
Registry value name: nosign
Command line: c:\WINDOWS\\nosign.exe /STARTUP
location: C:\WINDOWS\nosign
Description: No version, nothing descriptive from Autoruns or HT, nothing on Google (except several hits on this as an "unknown process")
Status: ? (you tell me!)

The HT log entry is:

O4 - HKLM\..\Run: [nosign] C:\WINDOWS\\nosign.exe Argus

If anyone could tell me what this is, I'd appreciate it. If it matters, I've found a second executable in my C:\WINDOWS path called mrdel.exe, that was created within minutes of the "nosign" file (in April of 2005). I cannot for the life of me figure what "nosign" does. I'm not overly worried about malware (my wife may have installed something I don't know about), but should I delete these, or at least disable the autorun on "nosign?"

I've posted on a few other forums, but no help yet. If anyone could advise, I'd be appreciative.
tg1911
This is all I could find on nosign.exe.
nosign.exe
UNSAFE Application/Process Description

I couldn't find anything on mrdel.exe, which is usually a bad sign.
I suggest you post a HijackThis log for examination, just to be sure you're infection free.

Read How to post a HijackThis Log.
Please read, and follow, all directions carefully.

Then, run a log, and post it in the HijackThis forum, at this link. Do not, fix anything, yet.
A member, of the HJT Team, will help you out.
It may take a while to get a response, because the HJT Team are very busy. Please, be patient, these people are volunteers. They will help you out, as soon as possible.

NOTE:
Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.
arioch
Thanks, I've posted it. I think I'm ok, but it never hurts to let the experts look it over.
tg1911
You're welcome, arioch.
QUOTE
.... it never hurts to let the experts look it over.
Exactly.
Better safe, than sorry. thumbup.gif
Grinler
Actually can you submit the nosign.exe file to http://www.bleepingcomputer.com/submit-malware.php
albundy
argus makes digital cameras... i found this trying to figure out the same thing... i knew what it was [not a clue what it does though sad.gif] as soon as i saw argus... they do make quality cameras but i bought one of their ultra cheap [less than 20usd] sport cameras at walmart... i guess its from their driver cd... if you have something made by argus this would be the common link between us.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.