BleepingComputer.com: Legit or Dirty????

O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

Thank you so much to anyone who may be able to give me a little advice

My concern is with the first three items. I ran hijackthis and they were there when they hadn't been before. I also
find it a little disconcerting that they don't show in task manager. I checked around online and found that the three of them
are sometimes legit and sometimes bad. I'm pretty sure I have the dirty ones but how can I tell the difference??
Thanks again!!

Run SuperAntiSpyware

http://www.superantispyware.com/download.html

and

Malwarebytes

http://www.malwarebytes.org/mbam.php

On the SuperAntiSpyware Main Page,
you can also click on link at the bottom:

"Find out what's running on your computer!"

Very useful information; you can send in unknown
files for analysis; feedback if you supply email address
and there's a problem file or files.

If you still have doubts you should post the problem in the Forum

"Security - Am I infected? - What do I do?"

In the links below are BC's comments on those files.

http://www.bleepingcomputer.com/startups/imjpmig-2171.html
http://www.bleepingcomputer.com/startups/TINTSETP-5758.html

It appears you have installed Microsoft IME (Input Method Editors) recently.

Quote

http://www.microsoft.com/windows/ie/ie6/do...me/default.mspx

IMJPMIG.EXE and TINTSETP.EXE are both Microsoft programs related to IME.

Thanks for the help. I'm gonna go ahead and remove it. It may be harmless for all I know but what I do know is
1. Nobody knowingly installed IME and it was never there before
2. Some kind or another of garbage disguises itself as the IME programs I found
3. It certainly wouldn't be the first time we've had a piggyback issue. I can't tell you how many times I've reinstalled XP....
and I even recently had to replace my HD due to the fact that it was shot by viruses...etc which hubby was unwittingly infecting us with
by constantly downloading everything from retarded plugins to everybody's favorite havoc wreaking purple ape (I didn't even know he was avail. anymore)
3. It's not a required program and is certainly not worth the risk.


Thanks Again!!