The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Conime.exe problems if no Asian language used?

    Discussion in 'Security and Anti-Virus Software' started by RWUK, Jan 22, 2011.

  1. RWUK

    RWUK Notebook Evangelist

    Reputations:
    254
    Messages:
    591
    Likes Received:
    0
    Trophy Points:
    30
    I caught 4 of these processes running in task manager a few minutes ago, all using about 112K-150K of memory. Google searching says it's either a backdoor trojan or a normal Microsoft file.

    Comodo's logs show it was created when I installed Microsoft Security Essentials and there are 2 locations, Windows/System32 and Windows/sysWOW64.

    The syswow location was where this was running from. These are said to be the real locations of the files but I do not have any Asian languages installed on my computer so that's why I'm not trusting the process's appearance.

    MSE and MBAM scans turn up nothing unusual but I've blocked the file in Defense + until I figure out what's going on.

    Anyone have any experience with MSE and conime.exe together?

    Thanks in advance.
     
  2. hakira

    hakira <3 xkcd

    Reputations:
    957
    Messages:
    1,286
    Likes Received:
    0
    Trophy Points:
    55
    Chinese keyboard support is installed by default on many (most?) computers sold recently. You should doublecheck your language settings, and remove the chinese keyboard under control panel>keyboards, the second tab iirc. If you press ctrl+space and get some funky chinese popup, you have chinese keyboard support active.

    4 of them running does raise flags though, only a few processes are supposed to be replicated (svchost) if they are working properly. Chances are though, that they are harmless and are little more than bloat.
     
  3. RWUK

    RWUK Notebook Evangelist

    Reputations:
    254
    Messages:
    591
    Likes Received:
    0
    Trophy Points:
    30
    Thanks for the response. I have 2 languages installed (European) but the language bar has been 'broken' for me for a while and cannot switch so I've got English only now.

    Ctrl+shift doesn't show anything at all, neither does the usual alt+shift.

    Apparently when the conime.exe is the trojan version, there is a startup registry entry made and a few other processes running and located in the System32 folder. I don't have any of these so I seem to be clean. I'm still trying to figure out why MSE installed this thing to begin with. :confused: