SnyTPLpr.exe - malicious? Zonelabs says yes and maybe

HI,
and first off, thanks to you volunteers!!! You are what makes this world liveable!

A big thank you.

Now...

Zonelabs says .. but only in the log of Alerts... that the SynTPLpr.exe thing "is malicious ". Then, when i go to their site for more info, their page says "may be malicious ".

Well, any idea if it really is or is not malicious?

I have the "kill" choice in effect, for Zone's Program Control page, on this Syn thing. So Zone logs each startup, a "blocked" log entry for this Syn thing.

Windows Malicious Code Removal Tool checks monthly, and has not mentioned anything about it or anything at all, for my entire six months with this laptop. Its notepad log says "zero" returns for its little searches each month.

If this Syn thing is indeed a keylogger, how can i remove it? Zone gives no clue.

Again, a mighty huge thank you to you tireless and wonderful volunteers. I dont know how you have the time, but i sure am glad that you do!!!

sincerely,
ignorant johnjj

 

John:

Please check the spelling of the file that you are inquiring about. The file listed in your title (SnyTPLpr.exe) is different then the file listed in your message (SynTPLpr.exe).

The following link explains what syntplpr.exe is http://www.liutilities.com/products/wintaskspro/processlibrary/syntplpr/

Is this the file that Zone Labs is referring to?

 

Syn is what i meant to say

Syn both places... sorry .

 

Did my post answer your question?

 

thanks rod, it answered most of my doubt.

but i still wonder...

why might Zone have said "malicious" in the alert log? And "maybe" in their online site library of stuff.?

Any ideas in your expert mind?

Ps yes, your link was right on the thing i am interested in today.

THANKS for helping, you are great for my peace of mind, and i mean that to the max.

john

 

I'm not for sure where it is on Zone Lab's site that you are reading that this file "maybe malicious ". I have searched both thier on-line virus information list and thier spyware information list, but neither list contains this file.

If you post a link to where you are reading about this file on thier site I'll take a look at it.

 

got the link

http://osalerts.zonelabs.com/osanal...00-1043/402e11010d06d189d0001a95&tab=overview

see the last paragraph in that link above.

i will also paste the more alarming "is malicious " alert in a sec

 

here's the paste of "is malicious" from my own cpr's Zone alert logs

Description SynTPLpr.exe is a malicious program and was prevented from running on your computer
Rating High
Date / Time 2006/08/13 08:22:44-5:00 GMT
Type Process
Subtype Startup Process
Data
Program SynTPLpr.exe
Action Taken Blocked (once)
Count 1

 

John:

I've taken a look at the link you posted. It would appear that the syntplpr.exe file has attempted to create a process that runs each time the computer is rebooted, which I would expect this type of program to do, and that Zone Alarm blocked this from occurring.

Given the purpose of syntplpr.exe ( "syntplpr.exe is a process installed alongside the Synaptics TouchPad for laptop computer touchpads. It provides additional configurations and support. This program is a non-essential process, and is installed for ease of use ") I would suggest that you continue to allow Zone Alarm to block it as it is a non-essential process.

 

thank you rod! so good to get some advice from

an expert!!!

Your idea seems very wise to me. And well based in the idea of it being nonessential anyhow.

Any idea how to uninstall or overwrite or both, to annihalate it to atoms?

LOL

Zone oddly gives no way to do anything to it. Doesnt even offer to quarantine it. Windows also gives no way to uninstal or extract it.

odd. Turkeys, they be.

thanks for any further ideas!

your eternal servant and etc,
ignorant pesant john

 

Ps going to sleep, be patient if i delay replying till tomorrow

thanks!

john

 

The file is part of your system because you have a touchpad. As such you shouldn't worry about uninstalling or removing it. Zone Alarm has blocked it from starting as a process so you also don't need to worry about it using any of the your system resources. As such I wouldn't give it another thought.