Spyware found in System Configuration Utility on the Startup tab



Robert
07-09-2005, 11:53 PM
I opened the System Configuration Utility and on the Startup tab I found an
unknown item designated as ”ALCXMNTR”. Pacman’s Portal says the following
regarding this item, “Realtek AC97 Audio - Event Monitor. Sypware file used
to surreptitiously monitor one's actions. It is not a sinister one, like
remote control programs, but is being used by Realtek to gather data about
customers.” I always use ZoneAlarm, Ad-Aware Plus, Norton AntiVirus, and
Microsoft AntiSpyware. Can anyone tell me how this item got on my computer,
and how I can remove it from my computer? Thank you, Robert

--
Robert

PA Bear
07-09-2005, 11:53 PM
Do you have a Realtek audio device (driver) installed?
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

Robert wrote:
> I opened the System Configuration Utility and on the Startup tab I found
> an unknown item designated as ?ALCXMNTR?. Pacman?Ts Portal says the
> following regarding this item, ?oRealtek AC97 Audio - Event Monitor.
> Sypware file used to surreptitiously monitor one's actions. It is not a
> sinister one, like
> remote control programs, but is being used by Realtek to gather data about
> customers.? I always use ZoneAlarm, Ad-Aware Plus, Norton AntiVirus,
> and Microsoft AntiSpyware. Can anyone tell me how this item got on my
> computer, and how I can remove it from my computer? Thank you, Robert

Robert
07-09-2005, 11:53 PM
A file search shows only C:\hp\drivers\audio_realtek and
C:\hp\drivers\lan_Realtek. A Device Manager search shows "Realtek AC'97
Audio".
--
Robert


"PA Bear" wrote:

> Do you have a Realtek audio device (driver) installed?
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE/OE) & Security
>
> Robert wrote:
> > I opened the System Configuration Utility and on the Startup tab I found
> > an unknown item designated as â?ALCXMNTRâ?. Pacmanâ?Ts Portal says the
> > following regarding this item, â?oRealtek AC97 Audio - Event Monitor.
> > Sypware file used to surreptitiously monitor one's actions. It is not a
> > sinister one, like
> > remote control programs, but is being used by Realtek to gather data about
> > customers.� I always use ZoneAlarm, Ad-Aware Plus, Norton AntiVirus,
> > and Microsoft AntiSpyware. Can anyone tell me how this item got on my
> > computer, and how I can remove it from my computer? Thank you, Robert
>
>

PA Bear
07-09-2005, 11:53 PM
Well, one of 'em installed it by default. It's not really spyware though it
does "phone home" to Realtek about your use of their product.
--
~PA Bear

Robert wrote:
> A file search shows only C:\hp\drivers\audio_realtek and
> C:\hp\drivers\lan_Realtek. A Device Manager search shows "Realtek AC'97
> Audio".
>
> > Do you have a Realtek audio device (driver) installed?
> > --
> > ~Robear Dyer (PA Bear)
> > MS MVP-Windows (IE/OE) & Security
> >
> > Robert wrote:
> > > I opened the System Configuration Utility and on the Startup tab I
> > > found
> > > an unknown item designated as â?ALCXMNTRâ?. Pacmanâ?Ts Portal
> > > says the following regarding this item, â?oRealtek AC97 Audio -
> > > Event Monitor. Sypware file used to surreptitiously monitor one's
> > > actions. It is not a sinister one, like
> > > remote control programs, but is being used by Realtek to gather data
> > > about customers.� I always use ZoneAlarm, Ad-Aware Plus, Norton
> > > AntiVirus,
> > > and Microsoft AntiSpyware. Can anyone tell me how this item got on my
> > > computer, and how I can remove it from my computer? Thank you, Robert

rjdriver
07-09-2005, 11:53 PM
"Robert" <Robert@discussions.microsoft.com> wrote in message
news:D862806D-7B01-48E8-85B8-60B942E9CD9C@microsoft.com...
>A file search shows only C:\hp\drivers\audio_realtek and
> C:\hp\drivers\lan_Realtek. A Device Manager search shows "Realtek AC'97
> Audio".
> --
> Robert
>
>
> "PA Bear" wrote:
>
>> Do you have a Realtek audio device (driver) installed?
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE/OE) & Security
>>
>> Robert wrote:
>> > I opened the System Configuration Utility and on the Startup tab I
>> > found
>> > an unknown item designated as ?ALCXMNTR?. Pacman?Ts Portal says
>> > the
>> > following regarding this item, ?oRealtek AC97 Audio - Event Monitor.
>> > Sypware file used to surreptitiously monitor one's actions. It is not a
>> > sinister one, like
>> > remote control programs, but is being used by Realtek to gather data
>> > about
>> > customers.? I always use ZoneAlarm, Ad-Aware Plus, Norton AntiVirus,
>> > and Microsoft AntiSpyware. Can anyone tell me how this item got on my
>> > computer, and how I can remove it from my computer? Thank you, Robert
>>
>>

Sounds like it came with your system, installed by HP along with all
the other drivers for your motherboard. The AC97 audio chip is usually part
of a built in sound package on motherboards. He's right though. It's not
that sinister. But if it really bothers you, you might be able to buy a
sound card and activate it for your system and turn off the Realtek chip in
the BIOS or the device mamager. Then you can delete the drivers. I say
"might" because Im not sure how flexible your system is. Check the manual
or with tech support. First uncheck it in the start up group. If it stays
unchecked - problem solved.


Bob


Spyware found in System Configuration Utility on the Startup tab