Npkcsvc.exe - What Is It?

[opalhort]

when I checked for running processes with msconfig, I found an unknown item "npkcsvc" by INCA Internet Co., Ltd.

did a google and it appears to be a nasty item. neither AVG, SpyBot S&D or Spyware Terminator detected anything bad.

Is "npkcsvc" really something bad and if so, how can I get rid of it?

during my search I came across "Uniblue RegistryBooster", downloaded the program and ran a free scan - found 430 problems, but have not yet corrected them.

Is this program trustworthy and really free or are there some hidden things that may come up when I run a cleaning process?

opalhort

[cdnvic]

when I checked for running processes with msconfig, I found an unknown item "npkcsvc" by INCA Internet Co., Ltd.

did a google and it appears to be a nasty item. neither AVG, SpyBot S&D or Spyware Terminator detected anything bad.

Is "npkcsvc" really something bad and if so, how can I get rid of it?

during my search I came across "Uniblue RegistryBooster", downloaded the program and ran a free scan - found 430 problems, but have not yet corrected them.

Is this program trustworthy and really free or are there some hidden things that may come up when I run a cleaning process?

opalhort

It's an annoyance, but it's not destructive that I can see. I'm looking for some removal instructions I had for it, gimme a few minutes.

[cdnvic]

Download VundoFix.exe to your computer.

Double-click on VundoFix.exe

Put a check next to Run VundoFix as a task.

You will receive a message saying Vundofix will close and re-open in a minute or less. Click OK

When VundoFix re-opens, click the Scan for Vundo button.

Once it's done scanning, click the Remove Vundo button.

You will receive a prompt asking if you want to remove the files, click YES

Your desktop will go blank as it starts removing the trojan.

When completed, you will be prompted shutdown the computer. Click OK.

Restart and you should be good, but re-scan anyways.

[opalhort]

Download VundoFix.exe to your computer.

Double-click on VundoFix.exe

Put a check next to Run VundoFix as a task.

You will receive a message saying Vundofix will close and re-open in a minute or less. Click OK

When VundoFix re-opens, click the Scan for Vundo button.

Once it's done scanning, click the Remove Vundo button.

You will receive a prompt asking if you want to remove the files, click YES

Your desktop will go blank as it starts removing the trojan.

When completed, you will be prompted shutdown the computer. Click OK.

Restart and you should be good, but re-scan anyways.

Thanks. I just downloaded and ran VundoFix. nothing was found. The file npkcsvc.exe does exist in the Windows\System32 folder and appears to be a legit file with file version and origin etc. yet according to what I found on google it is a trojan. the description in properties shows it as "nProtect KeyCrypt Service"

opalhort

[lopburi3]

Google also seems to say it is a normal file from INCA anti virus software from Korea so that is probably what you have. nProtect products. http://eng.nprotect.co.kr/

[opalhort]

Google also seems to say it is a normal file from INCA anti virus software from Korea so that is probably what you have. nProtect products. http://eng.nprotect.co.kr/

yes I saw this as well but most of the hits indicate it is a Trojan down loader that's why was concerned.

so far I've not seen any negative effects and it appears this file has been on one PC for two years already, so I think I just let it be - whatever it is.

But I still have the question regarding "Uniblue RegistryBooster".

Is this program trustworthy and really free or are there some hidden things that may come up when I run a cleaning process?

opalhort

[cdnvic]

If you had the trojan version, it would be giving you popups.