Maleware found using DesktopX
SDMCP.exe
from
Stardock Forums
I found while analysing my HDD, that there was that file with the word -server- in my list of openned files in Windows that was executing itself. Thought i should investigate. The file name is SDMCP.exe and it shown as MCPServer as said up.
I found also that that file was started by winlogon.exe. The file was clean and was in it supposed folder. All good up. But using some prg I've dloaded ealier I deleted and entry in the startup list of the MCPServer and had to unregister 3 dlls using regsvr32.
Any anwser as of what is the purpose of this running server that -IS- still running up good even after an uninstall of your stardock product. Any f. good reply is -really- appreciated.
As far as I know it is the
Stardock MCP Core Services (System Extensions and Hooks)
What's it purpose running even after uninstall? Hook in the winlogon startup list. As good as I know the daily user of Windows may not be aware of how to unregister dlls, and delete an entry in the winlogon startup list.
How do you f. explain this?
Integrate it in the uninstaller?
I'm not aware of the developement issues but I just think this is a weird behavior. The server shouldn't hook onto the winlogon else if needed and I'm not aware of.
Well, I'm here for a good explanation...
Thks in advance!
OnKn0wn.
I found also that that file was started by winlogon.exe. The file was clean and was in it supposed folder. All good up. But using some prg I've dloaded ealier I deleted and entry in the startup list of the MCPServer and had to unregister 3 dlls using regsvr32.
Any anwser as of what is the purpose of this running server that -IS- still running up good even after an uninstall of your stardock product. Any f. good reply is -really- appreciated.
As far as I know it is the
Stardock MCP Core Services (System Extensions and Hooks)
What's it purpose running even after uninstall? Hook in the winlogon startup list. As good as I know the daily user of Windows may not be aware of how to unregister dlls, and delete an entry in the winlogon startup list.
How do you f. explain this?
Integrate it in the uninstaller?
I'm not aware of the developement issues but I just think this is a weird behavior. The server shouldn't hook onto the winlogon else if needed and I'm not aware of.
Well, I'm here for a good explanation...
Thks in advance!
OnKn0wn.