Resolved NCPluginUpdater.exe

Winpatrol and spybot indicate this process to be spyware, but the process cannot be deleted or disabled. It reappears.

I'm reading pros and cons about this executable and not able to resolve if it is a virus or malware.

I've sent request for help to HP support with no resolve.

Does anyone know if this executable is safe?

 

HI Suzette, is your computer an HP Model?

You haven't filled in your System Details under UserCP (Top left). Don't forget to scroll down to the bottom of the page and SAVE before closing. Neil.

 

Sounds like a legitimate program to me from what I can dig up. Have you tried a Malware Bytes scan?

Try disabling it with CCleaner (under the tools selection > Startup) for the time being since you are concerned about it.

 

There are no answers forthcoming from HP regarding this James. More than one person is asking for verification from HP. Neil.

 

Any kids using your PC to download and play games? This may be related to PlayNC. It is installed with games such as Guild Wars by NC Soft of South Korea. Many of these games are on Facebook. Look for C:\Program Files\PlayNC. If you can't get the updater to quit I would uninstall any games and anything related to NC Soft. You may want to get Broni's assistance in the malware section of the forums.

NCSOFT

 

Great suggestions and questions.

"Whiskeyman "-there are no games played on this computer. It is a business desktop.

"retiredlearner "-Yes, it is an HP 8000 Elite Convertible MiniTower for business environment. It has Windows 7 Pro. (It is not my desktop but our system administrator.)

I'm glad to see there are more people experiencing this problem. I was hoping HP would be aware of this problem and respond to emails and/or posts with resolution.

 

Quote: (It is not my desktop but our system administrator.)

This a "standalone" comp - not a Server?
NCPluginUpdater.exe - where is this located in your comp?

I take it that it has not been "Run" and has been isolated/quarantined by WinPatrol and Spybot?

If the comp is running OK - probably best to leave it until we get confirmation from HP.
If there is no reply - then Whiskeyman's suggestion to seek help from Broni in the Malware Forum will be the answer.
Here is the latest report:https://www.virustotal.com/en/file/...5feaf72b93049aab3e1d73ad046bb113e05/analysis/
It may be harmless but HP should confirm in my opinion. Neil.

 

Wouldn't be a first where someone used a business computer to log into Facebook and play the games when they shouldn't. Even system admins.

 

retiredlearner,

This a "standalone" comp - not a Server? Not a server.
NCPluginUpdater.exe - where is this located in your comp? C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe Update

I take it that it has not been "Run" and has been isolated/quarantined by WinPatrol and Spybot? Yes

 

It's an Update monitor. It checks for HP Updates on start up. It can also be found in the registry. H_KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce. It's on all of my HP Computers. The only computer it is not on is the desktop that I built. All of my computers have Norton 360 Premier Edition and it hasn't alerted me to anything bad on any of them.

 

With all the information I have compiled from several forums, sites and software support, (HP excluded) we've determined this to be a legitimate process from HP and have instructed to reply accordingly.

I appreciate this forum more than others due to the amount of knowledge shared, the people with honest concern to help, and the lack of complaining members.

This thread has been "Solved" and "Kudos" to all that have helped either through the forum or emails.

Thank You All!

 

Broni states that it is legit when he helped someone else. Some anti-malware programs will detect updaters as threats.

I Think I'm having a Virus or Malware Emergency