Unvise32.exe (1 Viewer)

davids · Nov 28, 2006

Reading Delia's problems regarding spyware prompted me to do a scan with Spybot. The scan revealed nothing unusual with just the usual cookies being highlighted.

However I also ran Spyware Doctor. This highlighted a file called unvise32.exe in my Windows directory. Risk type was high and it was described as a NetObserve used to monitor and log user activity.

When I looked at the file in the Windows directory it seems to be an unistaller created by Mind Vision. I am a bit sceptical about Spyware Doctor's results because it was a free download but was indicating I should register (i.e buy) the package for the file to be deleted automatically.

Any advice on whether this is really a malicious file and if I should attempt to unistall would be appreciated.

Thanks

David

SiG · Nov 28, 2006

unvise32.exe is the uninstall file that can be "installed" from several different spyware bundles with different characteristics, including tracking web-based email, taking and mailing screenshots, etc: some benign, others really quite nasty!

Advice from symantec (here) is to run the uninstaller and see what happens, if not use your av software to remove.

SiG · Nov 28, 2006

Hmmm. Not sure I've got all that correct. unvise.exe (without the 32) is a generic uninstaller. On further googling various places have unvise32.exe described as such, and as a rat trojan.

davids · Nov 28, 2006

SiG said:
Hmmm. Not sure I've got all that correct. unvise.exe (without the 32) is a generic uninstaller. On further googling various places have unvise32.exe described as such, and as a rat trojan.

SiG

Thanks for your help. I haven't run the file yet (don't want to until I understand what it is). If it is malicious software i am not sure I understand why there is an uninstall file.

David

Ben M · Nov 30, 2006

Just because it's named as such, doesn't mean it will uninstall anything. Spyware is often intentionally named with common filenames in an attempt to avert your suspicions. If it is anything to worry about, there's a very high chance it can be picked up by a good up-to-date virus scanner.

My advice: Download the free non-commercial AVG virus protection software. Register, run, update and scan... it will do the rest.

davids · Nov 30, 2006

Ben M said:
Just because it's named as such, doesn't mean it will uninstall anything. Spyware is often intentionally named with common filenames in an attempt to avert your suspicions. If it is anything to worry about, there's a very high chance it can be picked up by a good up-to-date virus scanner.

My advice: Download the free non-commercial AVG virus protection software. Register, run, update and scan... it will do the rest.

Thanks Ben I already use AVG and it has not detected anything.

David

PS I see free support to AVG 7.1 is ending in January

davids · Nov 30, 2006

davids said:
Thanks Ben I already use AVG and it has not detected anything.

David

PS I see free support to AVG 7.1 is ending in January

I meant to say I am still unsure whether this file is malicious. I cannot see any registry entries which the Norton site refers to.

http://www.symantec.com/security_response/writeup.jsp?docid=2004-062914-3155-99&tabid=3

Ben M · Nov 30, 2006

davids said:
Thanks Ben I already use AVG and it has not detected anything.

David

PS I see free support to AVG 7.1 is ending in January

Have you tried scanning the actual file with AVG (i.e. using right-click)? If it's not reporting anything suspicious, then I'd not be worried personally, but who knows!

Unvise32.exe (1 Viewer)

More options

davids

Well-known member

SiG

Well-known member

SiG

Well-known member

davids

Well-known member

Ben M

Well-known member

davids

Well-known member

davids

Well-known member

Ben M

Well-known member

Similar threads

Users who are viewing this thread