Tech Support Forum banner

Unknown programs in Program Files folder, is it virus?

16K views 12 replies 4 participants last post by  Gary R  
#1 ·
Hi, I was looking through my Program Files folder and Program Files (x86) folder and I noticed that there are many unknown applications, some of them look really suspicious and I don't remember downloading them at all. The first image is a screenshot of the Program Files folder while the second image is a screenshot of the Program Files (x86) folder.


Image


Image
 
#3 ·
I have problems pasting the FRST.txt file though, kept getting this error message:

Oops! We ran into some problems. Please try again later. More error details may be in the browser console.

I tried attaching the FRST.txt file instead but the file does not attached properly too.

Please kindly advise is there any other ways which I can provide the FRST.txt details? Thank you!
 
#5 ·
Most of these programs are part of the Windows OS. Or are Bloatware that came preinstalled to your computer.

1. The RUXIM Interaction Campaign Scheduler (RUXIMICS.EXE) is used by the Windows Update. When is started the data collected is used to help keep Windows up to date and performing properly.
2. Rempl folder is located in C:\Program Files\rempl. The folder contains several executables which are able to improve Windows Update Service components in your machine and make sure your Windows Update run smoothly.
3. UNP stands for Universal Notification Platform and usually applies to computers on a domain, a good example being a work computer. If is developed by Microsoft and it is a legitimate application that cannot harm your computer system
4. Conexant is the Audio Driver for your computer
5. Microsoft Build Engine (ie) MSBuild is a platform for building applications.
6. Reference assemblies are usually distributed with the Software Development Kit (SDK) of a particular platform or library as a part of Windows
7. Windows NT is the base of the Windows OS. That folder is there for compatibility reasons with older versions of Windows
8. the ‘ModifableWindowsApps’ folder contains installation files for Windows
9. PowerShell is made up of a command-line shell, (Command Prompt) PowerShell runs on Windows, Linux, and macOS
10. Bonjour is an Apple app that allows devices running both Windows and Apple operating systems (like macOS and iOS) to connect and share resources without any configuration settings.
11. Cyberlink comes bundled with your DVD player, for playing and burning CD/DVD's
12. Microsoft Works is a word processing software program usually comes bundled as bloatware on your computer,
13. Vulkan Runtime Libraries is a cross-platform graphics API that aims to improve performance in 3D applications as part of Windows
14. ArcSoft Software Suite is a program also bundled with CD/DVD players and offers Backup program and CD Label making.
15. .NET Framework Windows included in the default installation. Or An application that required a particular version might install it during its own installation
16. Wondershare Studio is a software that allows creating photo collages and video editing. The software Wondershare Studio belongs to Wondershare Helper Compact or Wondershare Video Converter package, or Pinnacle software of the original company Wondershare. If you didn't install it, it may be a Trial versioin.
17. AudioWizard is a software program developed by ICEpower for Enhanced Audio in Windows.
18. AmUStor.sys is part of Alocr Micro USB Mass Storage Driver. For external USB HDD's.
19. Kingsoft Antivirus is a completely free antivirus solution for detecting, cleaning trojan virus, and protect your computer. It can be a standalone product, and can also work along with other AV.
 
#6 ·
Most of these programs are part of the Windows OS. Or are Bloatware that came preinstalled to your computer.

1. The RUXIM Interaction Campaign Scheduler (RUXIMICS.EXE) is used by the Windows Update. When is started the data collected is used to help keep Windows up to date and performing properly.
2. Rempl folder is located in C:\Program Files\rempl. The folder contains several executables which are able to improve Windows Update Service components in your machine and make sure your Windows Update run smoothly.
3. UNP stands for Universal Notification Platform and usually applies to computers on a domain, a good example being a work computer. If is developed by Microsoft and it is a legitimate application that cannot harm your computer system
4. Conexant is the Audio Driver for your computer
5. Microsoft Build Engine (ie) MSBuild is a platform for building applications.
6. Reference assemblies are usually distributed with the Software Development Kit (SDK) of a particular platform or library as a part of Windows
7. Windows NT is the base of the Windows OS. That folder is there for compatibility reasons with older versions of Windows
8. the ‘ModifableWindowsApps’ folder contains installation files for Windows
9. PowerShell is made up of a command-line shell, (Command Prompt) PowerShell runs on Windows, Linux, and macOS
10. Bonjour is an Apple app that allows devices running both Windows and Apple operating systems (like macOS and iOS) to connect and share resources without any configuration settings.
11. Cyberlink comes bundled with your DVD player, for playing and burning CD/DVD's
12. Microsoft Works is a word processing software program usually comes bundled as bloatware on your computer,
13. Vulkan Runtime Libraries is a cross-platform graphics API that aims to improve performance in 3D applications as part of Windows
14. ArcSoft Software Suite is a program also bundled with CD/DVD players and offers Backup program and CD Label making.
15. .NET Framework Windows included in the default installation. Or An application that required a particular version might install it during its own installation
16. Wondershare Studio is a software that allows creating photo collages and video editing. The software Wondershare Studio belongs to Wondershare Helper Compact or Wondershare Video Converter package, or Pinnacle software of the original company Wondershare. If you didn't install it, it may be a Trial versioin.
17. AudioWizard is a software program developed by ICEpower for Enhanced Audio in Windows.
18. AmUStor.sys is part of Alocr Micro USB Mass Storage Driver. For external USB HDD's.
19. Kingsoft Antivirus is a completely free antivirus solution for detecting, cleaning trojan virus, and protect your computer. It can be a standalone product, and can also work along with other AV.
Hi spunk.funk, thank you so much for the list, really appreciate it. I have gone through them and it seems like none of the apps are malicious so I presume I need not delete any one of them?
 
#8 ·
No obvious signs of an active infection in your logs.

There are a few things we could "tidy up" if you wish, but nothing of any real concern.

Why are you using Kaspersky ??? W10 has Windows Security, which is perfectly serviceable as an AV, and will be far lighter on your system resources. IMO there is absolutely no reason for anyone to use a 3rd party AV these days.

You also have a seriously out of date version of Malwarebytes installed (4.3.0.98) (Apr 21), latest version is 4.5.11 (July 22).
 
#11 ·
Hi Gary, thank you for your advise, will take note of the 3rd party software as well as upgrading Malwarebytes.

You also have Kingsoft, which is another Anti-Virus you don't need and should be uninstalled.
Why do you think you have a Virus?
Hi spunk.funk, I don't remember installing Kingsoft at all so I was wary why it was installed in my system in the first place. I will proceed to uninstall this AV.

Since you admitted to poking around in your Program Files folder and asking about "deleting" things that you didn't think you needed, I need to strongly advise to not manually "delete" anything from your Program Files (x86) folder. Same goes for the Program Files and Windows folder.

As Windows loads, installed software often looks for files that are supposed to load and run in the background. If you delete a folder from either of the two Program Files folders without properly uninstalling the associated program, not only will you not be able to uninstall it using the program's uninstaller but your computer might give you error notices on startup because it can no longer access files that are supposed to be there. These type of missing file errors can be tracked down by someone who knows how but it will cost you to have someone look at your computer.

If there's something in Program Files that you no longer want to be there, uninstall the software from Control Panel. The uninstaller will remove associated registry entries, automated startup tasks and then finally remove the folder in Program Files. My general advice is to stay out of those folders and scrutinize the Programs list in Control Panel's "Uninstall a program" window. You can Google what a program does and uninstall it from that interface.
Hi Sgayres, thank you for your advise. Yes you are right, I will uninstall those programs from Control Panel instead of manually deleting the unwanted files from Program Files instead. I was wary as I don't remember downloading some of the files recently but somehow these files appear in my Program Files. I just want to make sure this was not due to a virus infection which causes the suspicious files to appear.

Thank you everyone once again
 
#10 ·
Since you admitted to poking around in your Program Files folder and asking about "deleting" things that you didn't think you needed, I need to strongly advise to not manually "delete" anything from your Program Files (x86) folder. Same goes for the Program Files and Windows folder.

As Windows loads, installed software often looks for files that are supposed to load and run in the background. If you delete a folder from either of the two Program Files folders without properly uninstalling the associated program, not only will you not be able to uninstall it using the program's uninstaller but your computer might give you error notices on startup because it can no longer access files that are supposed to be there. These type of missing file errors can be tracked down by someone who knows how but it will cost you to have someone look at your computer.

If there's something in Program Files that you no longer want to be there, uninstall the software from Control Panel. The uninstaller will remove associated registry entries, automated startup tasks and then finally remove the folder in Program Files. My general advice is to stay out of those folders and scrutinize the Programs list in Control Panel's "Uninstall a program" window. You can Google what a program does and uninstall it from that interface.
 
#12 ·
Most of the files you highlighted come with the Windows OS.
Kingsoft AV may have been bundled with some "Free" Software that you downloaded. When you installing the software, there should be a checkbox saying you agree to installing the AV software along with other programs. You have to be diligent and not just go next, next, next and read what your installing with a "Free" app from the internet.
 
#13 ·
A long time ago I wrote an article on how to avoid bundled software for another forum.

It's a bit dated now, but the process remains essentailly the same