thinkpads.com Support Community Forum Index Bill Morrow's thinkpads.com Open Forum - The Original Thinkpad Support Forum
Follow ThinkpadsForum on Twitter
 Support this forum, shop at newmodeus.com
 Support the forum, shop at newmodeus.com
System backups occur about 7:00 am EDT and last about 10 minutes. This will slow performance. RSS feeds have been added to the forum.
Donate if you wish to:
bill at thinkpads dot com

It is currently Thu Jul 24, 2014 6:00 pm

All times are UTC - 5 hours




Post new topic Reply to topic  [ 5 posts ] 
Author Message
 Post subject: LFOGRPOW.EXE
PostPosted: Tue Mar 06, 2012 2:13 am 
Offline
Freshman Member

Joined: Wed Nov 14, 2007 12:52 pm
Posts: 84
Location: New York, NY
Can anyone tell me the origin of LFOGRPOW.EXE, how it's loaded and what's doing? It's shown as a process on all my TPs, a T43 included. The file resides in the \system32 folder together with two similarly named .dll files. Thanks, CBA


Top
 Profile  
 
 Post subject: Re: LFOGRPOW.EXE
PostPosted: Tue Mar 06, 2012 5:05 am 
Offline
ThinkPadder
ThinkPadder

Joined: Sat Feb 09, 2008 6:19 pm
Posts: 1099
Location: Newcastle upon Tyne, UK
A quick Google search indicates it may be a rogue antispyware program.

The link includes a specific removal program too. I see from reading other posts that it can reappear after it's been removed, and in this case run the removal program in safe mode (press F8 immediately after the welcome screen disappears). Safe mode runs the OS in minimum mode and such programs won't run in this mode.

Also suggest making a restore point before running the removal program in case it upsets something else when removed.


Top
 Profile  
 
 Post subject: Re: LFOGRPOW.EXE
PostPosted: Tue Mar 06, 2012 5:45 am 
Offline
Freshman Member

Joined: Wed Nov 14, 2007 12:52 pm
Posts: 84
Location: New York, NY
Hi Nick,

I did a search too and came across these links, however, most are not very reliable imo. The link you refer to seems like 'one of those' .. and the removal program you are asked to download (http://www.removespywaretips.com/RegUtility_Setup.exe) appears to be a link to a reg-cleaner or similar. I'm staying away from those...

In addition to NAV 2012 I have several on demand antispyware scanners and none flag this file as bad or similar. And, I did upload the file to VirusTotal for a check and the file came out clean. This link shows an earlier scan, like my scan, also clean: https://www.virustotal.com/file/bf7f0a3 ... /analysis/

I think the file could be an old Thinkpad support program, but, as it's attached to spoolsv.exe (strange) I really don't know. If I knew how, I could upload a print-screen image from Process Explorer showing the LFOGRPOW.EXE file...

Best, CBA


Top
 Profile  
 
 Post subject: Re: LFOGRPOW.EXE
PostPosted: Tue Mar 06, 2012 6:28 am 
Offline
RBS10000
RBS10000

Joined: Mon Sep 18, 2006 5:17 am
Posts: 13259
Location: Mt. Cobb, PA USA
Just run AntiMalware from http://www.malwarebytes.org/
Make sure to update the signature file first, before you run it.
If it's a baddie, AMW will get rid of it.

_________________
Lovely day for a Guinness! (The Real Black Stuff)

Check out The Board Room for:
- LED-mods for the 15" T60/R60/R61
- SATA-mods for any T43/R52 with ATI GPU
- other Services


Top
 Profile  
 
 Post subject: Re: LFOGRPOW.EXE
PostPosted: Tue Mar 06, 2012 10:39 am 
Offline
Freshman Member

Joined: Wed Nov 14, 2007 12:52 pm
Posts: 84
Location: New York, NY
Checked the file with MBAM and other AntiMalware progs and no hit. It's clean, and, after prying inside the file, I think I know why. The file belongs to a Ricoh MFP 1100S USB printer driver (Laser Pro LL2), which I installed recently on two of my TPs during a visit to a hotel. They came from the Ricoh OEM CD .. so I'm sure they are fine. Except, I don't like the fact that they load even when my default print driver is not Ricoh. Typically, imho, software sloppily written...

At any rate, issue resolved. Thanks for the input. Best, CBA


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC - 5 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group