<![CDATA[Latest posts for the thread "WDC.exe........keylogger or safe? "]]> http://www.dakkadakka.com/dakkaforum/posts/list/54.page JForum - http://www.jforum.net WDC.exe........keylogger or safe?
I am trying to become more computer literate. In part of doing so I looked up all the running programs on task manager and researched them. WDC.exe has me a little worried as there is a divided opinion on it being a keylogger or a legitimate ASUS product (note: my computer is an ASUS). So, what do you say? I looked it up in the program files and I couldn't find its program path specifically but I found the ASUS ATK package. To be more helpful.....I got this computer in 2011 so maybe its newer and the ATK package includes WDC.exe in there? If this is not safe.....how do I remove it?


Automatically Appended Next Post:
..........Anyone?]]> http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5855938.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5855938.page GMT WDC.exe........keylogger or safe? http://lmgtfy.com/?q=WDC.exe]]> http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5855974.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5855974.page GMT WDC.exe........keylogger or safe? http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5855978.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5855978.page GMT Re:WDC.exe........keylogger or safe?
You have a couple of options open to you. I'm assuming you're running on Windows - I'm not sure if all versions have this option, but certainly on 7, the easiest (though least thorough) test is to go into Task Manager, Processes tab, right-click the process and choose "Open File Location". That should give you a hint of whether it's coming from a valid installed program - if it's coming from a seemingly randomly named folder or some kind of temp folder like Temporary Internet Files then it's bad.

Another way - though I would consider this a last resort - would be to rebuild the PC completely by formatting and reinstalling the OS, and loading on all your drivers. Then check to see if the process is still there.

(added) ...seeing as you're already Googling for it, I can only suggest you register for a more tech-centric forum or two and post there as well. We do have some really smart technical people here but we can only help so far...!!]]> http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856026.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856026.page GMT WDC.exe........keylogger or safe?
Exactly my fear. When I tell it to "open file location" it doesn't do anything. And it won't let me end any processes or anything.

Never mind I opened the properties and its file location is as follows:

C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey]]> http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856075.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856075.page GMT Re:WDC.exe........keylogger or safe? I would also suggest seeing if you can find it in the registry, if you're comfortable looking there. Unfortunately I don't seem to be able to find a confirmed location for registry entries for the legitimate process - only mentions of removing the keylogger versions. So this will largely be trial and error - I'd suggest looking under HKEY_CURRENT_USER and if not there, then HKEY_LOCAL_MACHINE.]]> http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856100.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856100.page GMT WDC.exe........keylogger or safe? http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856101.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856101.page GMT WDC.exe........keylogger or safe?
 Krellnus wrote:
http://lmgtfy.com/?q=WDC.exe


That's unhelpful at best. This legitimately could be safe or not. The poster has clearly done his research to determine as such. If you're not going to lend a hand, don't get in the way.

Grndhog, I recommend seeing if you can find a place to obtain the package for the application from ASUS's website. Download it, extract the binary you're asking about, and then compare file sizes. That's something you can modify to mask, but it would take a lot of effort.

If that's not something you can handle, I recommend looking for help at a more technically minded website. For all the nerds present here, Dakka is not exactly renown for it's meaningful or helpful tech answers.]]> http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856278.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856278.page GMT WDC.exe........keylogger or safe?
 daedalus wrote:
 Krellnus wrote:
http://lmgtfy.com/?q=WDC.exe


That's unhelpful at best. This legitimately could be safe or not. The poster has clearly done his research to determine as such. If you're not going to lend a hand, don't get in the way.

Grndhog, I recommend seeing if you can find a place to obtain the package for the application from ASUS's website. Download it, extract the binary you're asking about, and then compare file sizes. That's something you can modify to mask, but it would take a lot of effort.

If that's not something you can handle, I recommend looking for help at a more technically minded website. For all the nerds present here, Dakka is not exactly renown for it's meaningful or helpful tech answers.


Thank you for the kind advice. I was on a tech forum and they were talking about the files path. The path I found matched it. Hell even the date uploaded or whatever matched (12/22/08). Here is the corresponding thread:

http://forum.notebookreview.com/asus/466838-wdc-exe-does-belong-asus-keylogger.html


Addendum and Off-topic: I am very pleased and surprised by people's (mostly) amicable behavior here on dakka. Very nice change from Warseer.]]> http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856433.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856433.page GMT Re:WDC.exe........keylogger or safe?

Microsoft FCIV program to check MD5 sums
The FCIV utility runs on Microsoft Windows 2000, Windows XP, and Windows Server 2003.

fciv.exe c:\ -r
FCIV -md5 -sha1 path\filename.ext
FCIV -md5 -sha1 c:\windows\system32\shdocvw.dll

For further information please check out the “Availability and description of the File Checksum Integrity Verifier utility” Article 841290 at the Support.Microsoft.com site.

Source: http://www.linuxquestions.org/linux/answers/LQ_ISO/Checking_the_md5sum_in_Windows

Compare it with the MD5 posted in your link. If they match, I'd rest easy. If not, well, maybe you might want to ask ASUS how to prove your copy is legit. For what it's worth, I think you're probably safe, especially reading what the purpose of the software is and given you're using an ASUS laptop.


Automatically Appended Next Post:
Obviously, replace path\filename.ext with the wdc.exe path.]]> http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856443.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856443.page GMT WDC.exe........keylogger or safe? http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856485.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5856485.page GMT Re:WDC.exe........keylogger or safe? Virus Total? (It's owned by Google)

It scans with 46 different anti viruses.

Grndhog89 wrote:

Addendum and Off-topic: I am very pleased and surprised by people's (mostly) amicable behavior here on dakka. Very nice change from Warseer.


We get the odd jackass here and there, but it's tons better than warseer, yes

Welcome to Dakka btw!]]> http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5857380.page http://www.dakkadakka.com/dakkaforum/posts/preList/540510/5857380.page GMT