PCbanter

PCbanter (http://www.pcbanter.net/index.php)
-   Windows 8 Help Forum (http://www.pcbanter.net/forumdisplay.php?f=50)
-   -   What is this (http://www.pcbanter.net/showthread.php?t=1090984)

F Murtz July 5th 14 04:49 PM

What is this
 
fst_au_92 and fst_94
The first one appeared recently and I deleted it, then it came back and
now the second one has appeared.
what are they and how important are they?
At the same time client connect LTD infected the laptop I uninstalled it
and ran malwarebytes.
I just checked the laptop and they are gone also, so I might have fixed it.
Ps is there anything else in the pic sus?
It is not the whole add remove page as a pic of the page is hard to read


http://tinypic.com/r/2rgho5t/8

Good Guy[_2_] July 5th 14 05:55 PM

What is this
 
On 05/07/2014 16:49, F Murtz wrote:
fst_au_92 and fst_94 The first one appeared recently and I deleted
it, then it came back and now the second one has appeared. what are
they and how important are they? At the same time client connect LTD
infected the laptop I uninstalled it and ran malwarebytes. I just
checked the laptop and they are gone also, so I might have fixed it.
Ps is there anything else in the pic sus? It is not the whole add
remove page as a pic of the page is hard to read


http://tinypic.com/r/2rgho5t/8



It is some form of malware according to this:

http://www.herdprotect.com/fst_au_94.exe-10a7ca95e26e646274cf62a3804372bd13b479af.aspx

Good luck.




s|b July 5th 14 06:32 PM

What is this
 
On Sun, 06 Jul 2014 01:49:18 +1000, F Murtz wrote:

It is not the whole add remove page as a pic of the page is hard to read


Why not use PrintScreen, paste and save it as PNG in Paint or Irfanview
and then upload it. Quality will be much better and you'll be able to
show more programs in Programs and Features.

BTW do you really need both Java versions?

--
s|b

John Doe[_8_] July 5th 14 06:43 PM

What is this
 
F Murtz haggisz hotmail.com wrote:

fst_au_92 and fst_94


http://tinypic.com/r/2rgho5t/8


The picture shows the very next entry is "Intel Collaborative
Processor Performance Control" that is using the same icon.

That's the first clue IMO. It has to do with your Intel performance
control software/utility.




--
I haven't viewed the other replies.

s|b July 5th 14 07:07 PM

What is this
 
On Sat, 5 Jul 2014 17:43:27 +0000 (UTC), John Doe wrote:

http://tinypic.com/r/2rgho5t/8


The picture shows the very next entry is "Intel Collaborative
Processor Performance Control" that is using the same icon.

That's the first clue IMO. It has to do with your Intel performance
control software/utility.


That's not a clue. It's the default icon Windows uses when the program
hasn't an icon itself.

--
s|b

. . .winston July 5th 14 07:28 PM

What is this
 
John Doe wrote, On 7/5/2014 1:43 PM:
F Murtz haggisz hotmail.com wrote:

fst_au_92 and fst_94


http://tinypic.com/r/2rgho5t/8


The picture shows the very next entry is "Intel Collaborative
Processor Performance Control" that is using the same icon.

That's the first clue IMO. It has to do with your Intel performance
control software/utility.




Probably not an accurate assessment. The same icon is not relevant, it
only indicates that those items don't have a icon assigned thus Windows
chooses its own default value.


--
...winston
msft mvp consumer apps

John Doe[_8_] July 5th 14 07:32 PM

What is this
 
The original poster's uploaded picture looks great in my browser.

What's the problem?

--
"s|b" me privacy.invalid wrote:

Path: eternal-september.org!news.eternal-september.org!feeder.eternal-september.org!feeder.erje.net!eu.feeder.erje.net!f u-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: "s|b" me privacy.invalid
Newsgroups: alt.comp.os.windows-8
Subject: What is this
Date: Sat, 05 Jul 2014 19:32:37 +0200
Organization: XXII
Lines: 12
Message-ID: c1qr5dFc2csU1 mid.individual.net
References: 53b81e7d$0$9626$c3e8da3$e408f015 news.astraweb.com
Reply-To: sb.nospam belgacom.net
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Trace: individual.net +YAVdcxZubL/lioVmLhoQAaKQzRISZEdbW0AVYA5g7P5GGwiw7
Cancel-Lock: sha1:hUSMI5UwHbIXOYY4V+p0H6yRN+E=
User-Agent: ForteAgent/8.00.32.1244
X-Face: j0\WO?Dcjo^V#d7Q,H$9^8N{Z|fy50vxQkToel)jNR3hmCMV8k ai(fMVJ:Yk}q?t:xHu2D )?CJ[c|zu]%I!fKb7-4~$&Mx|GT=ux^*,A:5Cdek,y4A(DSX=oXRv7-)/AcgHiWf
Xref: news.eternal-september.org alt.comp.os.windows-8:16131

On Sun, 06 Jul 2014 01:49:18 +1000, F Murtz wrote:

It is not the whole add remove page as a pic of the page is hard to read


Why not use PrintScreen, paste and save it as PNG in Paint or Irfanview
and then upload it. Quality will be much better and you'll be able to
show more programs in Programs and Features.

BTW do you really need both Java versions?

--
s|b



John Doe[_8_] July 5th 14 07:34 PM

What is this
 
How is it probably not an accurate assessment? Even if it is the
default icon, the icons are grouped together. Why do you say it's
not part of Intel's utility?

--
". . .winston" winstonmvp gmail.com wrote:

Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: ". . .winston" winstonmvp gmail.com
Newsgroups: alt.comp.os.windows-8
Subject: What is this
Date: Sat, 05 Jul 2014 14:28:34 -0400
Organization: A noiseless patient Spider
Lines: 24
Message-ID: lp9g4k$n0j$2 dont-email.me
References: 53b81e7d$0$9626$c3e8da3$e408f015 news.astraweb.com lp9dfu$9ep$1 dont-email.me
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sat, 5 Jul 2014 18:28:36 +0000 (UTC)
Injection-Info: mx05.eternal-september.org; posting-host="a911e6a1d373d17089cf29ed541ecd17"; logging-data="23571"; mail-complaints-to="abuse eternal-september.org"; posting-account="U2FsdGVkX19pXPYEl3Jwqi60YtNtayM4AAzsKTcpu mE="
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 SeaMonkey/2.26
In-Reply-To: lp9dfu$9ep$1 dont-email.me
Cancel-Lock: sha1:nIwcHHS4r/PEGf+WtbireR8m17Q=
Xref: news.eternal-september.org alt.comp.os.windows-8:16135

John Doe wrote, On 7/5/2014 1:43 PM:
F Murtz haggisz hotmail.com wrote:

fst_au_92 and fst_94


http://tinypic.com/r/2rgho5t/8


The picture shows the very next entry is "Intel Collaborative
Processor Performance Control" that is using the same icon.

That's the first clue IMO. It has to do with your Intel performance
control software/utility.




Probably not an accurate assessment. The same icon is not relevant, it
only indicates that those items don't have a icon assigned thus Windows
chooses its own default value.


--
...winston
msft mvp consumer apps



. . .winston July 5th 14 07:38 PM

What is this
 
F Murtz wrote, On 7/5/2014 11:49 AM:
fst_au_92 and fst_94
The first one appeared recently and I deleted it, then it came back and
now the second one has appeared.
what are they and how important are they?
At the same time client connect LTD infected the laptop I uninstalled it
and ran malwarebytes.
I just checked the laptop and they are gone also, so I might have fixed it.
Ps is there anything else in the pic sus?
It is not the whole add remove page as a pic of the page is hard to read


http://tinypic.com/r/2rgho5t/8


In the meantime while fixing fst* issues, it might be a good idea to
update both 32 and 64 bit Java...the current installed versions (55 and
40 respectively shown in your pic) are vulnerable. In fact, if using
Windows 7 or 8 it would be prudent to ditch version 7 in its entirety
and upgrade to version 8.

Latest JRE versions
Java 7 = Java SE 7u60
Java 8 = Java SE 8u5

This page provides links to the latest versions
http://www.oracle.com/technetwork/ja...ads/index.html


--
...winston
msft mvp consumer apps

Gene E. Bloch[_2_] July 5th 14 08:00 PM

What is this
 
On Sat, 5 Jul 2014 18:34:17 +0000 (UTC), John Doe wrote:

How is it probably not an accurate assessment? Even if it is the
default icon, the icons are grouped together. Why do you say it's
not part of Intel's utility?


Mainly because they know more than you do.

When a program has no icon of its own, Windows provides a default icon
(do you know the meaning of "default" in this context?), from its (i.e.
Windows's) own supply, which has *no* (i.e., not any) relationship to
the file.

--
Gene E. Bloch (Stumbling Bloch)

s|b July 5th 14 08:21 PM

What is this
 
On Sat, 5 Jul 2014 18:32:32 +0000 (UTC), John Doe wrote:

The original poster's uploaded picture looks great in my browser.

What's the problem?


You're the problem. Stop adding newsgroups to your follow-up.

--
s|b

Nil[_5_] July 5th 14 08:43 PM

What is this
 
On 05 Jul 2014, F Murtz wrote in
alt.comp.os.windows-8:

fst_au_92 and fst_94
The first one appeared recently and I deleted it, then it came
back and now the second one has appeared.
what are they and how important are they?
At the same time client connect LTD infected the laptop I
uninstalled it and ran malwarebytes.
I just checked the laptop and they are gone also, so I might have
fixed it. Ps is there anything else in the pic sus?
It is not the whole add remove page as a pic of the page is hard
to read

http://tinypic.com/r/2rgho5t/8


I suspect a virus or other malware. I see a few references to this file
on the Internet, but nothing definitive. The behavior of the file
reappearing after you kill its process is one that is typical of many
viruses.

I would start off with some research...

- find the exact path location of the file, not just the name. It it's
installed in \Program Files, it might be easier to glean what it is or
where it comes from. When you right-click on the file, check out its
properties - that might give you additional clues.

If the file resides in %TEMP% or somewhere in %USERPROFILE% it's more
likely to be something suspicious. Executable programs are not normally
installed there, as that bypasses many of Windows' security features.

- use Sysinternals Autoruns to examine what programs automatically
start with the computer. You can disable them from there, but be
careful because you can disable critical system processes if you don't
know what you're doing.

- start the computer up in Safe Mode and run thorough virus and malware
scans.

. . .winston July 5th 14 10:25 PM

What is this
 
John Doe wrote, On 7/5/2014 2:34 PM:
How is it probably not an accurate assessment? Even if it is the
default icon, the icons are grouped together. Why do you say it's
not part of Intel's utility?


Duh! Look closely g

They're grouped together in that pic because that column is sorted
alphabetically by name(i.e. I comes after F in the alphabet).



--
...winston
msft mvp consumer apps

Nil[_5_] July 5th 14 10:29 PM

What is this
 
On 05 Jul 2014, ". . .winston" wrote in
alt.comp.os.windows-8:

John Doe wrote, On 7/5/2014 2:34 PM:
How is it probably not an accurate assessment? Even if it is the
default icon, the icons are grouped together. Why do you say it's
not part of Intel's utility?


Duh! Look closely g


That's not gonna happen.

They're grouped together in that pic because that column is sorted
alphabetically by name(i.e. I comes after F in the alphabet).


Paul July 5th 14 10:34 PM

What is this
 
F Murtz wrote:
fst_au_92 and fst_94
The first one appeared recently and I deleted it, then it came back and
now the second one has appeared.
what are they and how important are they?
At the same time client connect LTD infected the laptop I uninstalled it
and ran malwarebytes.
I just checked the laptop and they are gone also, so I might have fixed it.
Ps is there anything else in the pic sus?
It is not the whole add remove page as a pic of the page is hard to read


http://tinypic.com/r/2rgho5t/8


My guess is, you'll find this key present in the Registry (look using "regedit")

HKLM\Software\Free_soft_today

The FST stands for Free_soft_today, the next two letters are the
country code. The numbers are likely a revision. Just a guess,
by looking at the only hit I could find that came close to
matching. Once I had the key name, I fed that back into
the search engine, and found this example.

http://forums.techguy.org/all-other-...-108-free.html

You can get Adwcleaner here. Do a scan and see
what it finds.

http://www.bleepingcomputer.com/download/adwcleaner/

Paul


All times are GMT +1. The time now is 10:45 PM.

Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright © 2004 - 2006 PCbanter
Comments are property of their posters