BleepingComputer.com: Confused by results in startup database

Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Confused by results in startup database is ULCDRSvr.exe OK, or not?

#1 User is offline   usafrox 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 1
  • Joined: 15-November 08

  Posted 15 November 2008 - 10:56 PM

I did a search on the windows startup programs database here for ULCDRSvr.exe, to see if it was OK, since I found it in my windows defender list, and got two returns. One said it is a vital program that needs to be allowed to run, and the other says it is malware and should be deleted. I'm confused. I'm a computer idiot, so I need help. What say you?

:thumbsup:

#2 User is offline   Grinler 

  • Bleep Bleep!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Admin
  • Posts: 36,175
  • Joined: 24-January 04
  • Gender:Male
  • Location:USA

Posted 16 November 2008 - 08:44 AM

When using the startup database you have to look at all the info, not just the filename. The malware version is located in the C:\Windows\System32 folder. The legitimate one is located in the C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe folder.
Lawrence Abrams
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!

#3 User is offline   kristjan84 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 1
  • Joined: 24-July 08

Posted 12 January 2009 - 06:55 PM

When using Autoruns, I always start by disabling Microsoft entries, to shorten the list. Then I browse through the list and google the names of the files that do not have a publisher. You will find out if the file is malware or not. Its also a good idea to google the file name with the full path, this might give you better results

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users