Mirsky
December 7th, 2005, 02:43 AM
This is for those of you that have MSI video cards and have installed their drivers.
If you decide to use DOT (Dynamic Overclocking Technology) be aware that three files are added to the registry to run at windows startup
winsys.exe
sw20.exe
sw24.exe
The problem is that winsys.exe is detected by many trojan scanners as either part of various worms or a keylogger from BC Technologies. Please note that if you have an MSI video card and see winsys.exe in the system32 directory with the following properties it is NOT a trojan or keylogger but part of the MSI driver set.
Install path %windir%\system32\winsys.exe
Size 132 KB (135,168 bytes)
Version 1.0.0.1 or 1.0.02
Description DOT MFC Application
Copyright 2003
NOTE: Any other program called winsys.exe without these properties is likely a trojan/keylogger and the appropriate steps should be taken
I hope this will save someone the evening of trojan/virus/adware scanning that I just had (as well as the mini heart attack at finding a potential keylogger on your PC)
If you decide to use DOT (Dynamic Overclocking Technology) be aware that three files are added to the registry to run at windows startup
winsys.exe
sw20.exe
sw24.exe
The problem is that winsys.exe is detected by many trojan scanners as either part of various worms or a keylogger from BC Technologies. Please note that if you have an MSI video card and see winsys.exe in the system32 directory with the following properties it is NOT a trojan or keylogger but part of the MSI driver set.
Install path %windir%\system32\winsys.exe
Size 132 KB (135,168 bytes)
Version 1.0.0.1 or 1.0.02
Description DOT MFC Application
Copyright 2003
NOTE: Any other program called winsys.exe without these properties is likely a trojan/keylogger and the appropriate steps should be taken
I hope this will save someone the evening of trojan/virus/adware scanning that I just had (as well as the mini heart attack at finding a potential keylogger on your PC)