1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Active X controlls

Discussion in 'Legacy Windows' started by dmorg, 2003/08/27.

Thread Status:
Not open for further replies.
  1. 2003/08/27
    dmorg

    dmorg Inactive Thread Starter

    Joined:
    2003/01/26
    Messages:
    4
    Likes Received:
    0
    i have recently noticed the following ActiveX controlls in my Downloaded Programs folder....
    Can anyone tell me what they are... and if i need them ... can i remove them?

    Spybot-S&D ActiveX report, 27/08/2003 01:37:39

    Microsoft XML Parser for Java
    Download location: file://C:\WINDOWS\Java\classes\xmldso.cab
    Name: Microsoft XML Parser for Java
    Version: 1,0,9,2

    DirectAnimation Java Classes
    Download location: file://C:\WINDOWS\SYSTEM\dajava.cab
    Name: DirectAnimation Java Classes
    Version: 5,1,15,1014

    {CEBC955E-58AF-11D2-A30A-00A0C903492B}
    Class file: WUV3IS.DLL
    Attributes:
    Date: 20/06/2002 14:57:52
    MD5: 7D1FE2201906594E17147E02A208DBD4
    Path: C:\WINDOWS\SYSTEM\
    Short name: WUV3IS.DLL
    Size: 221184 bytes
    Version: 0.5.0.4
    Class name: CV3 Class
    CLSID database: legitimate software
    Description: Windows Update
    Filename: WUV3IS.DLL
    Contains file: wupdmgr.exe
    Attributes:
    Date: 24/10/2001 17:44:36
    MD5: C0BD5DD43517FD5BA98C46CE7D7C8F3F
    Path: C:\WINDOWS\
    Short name: WUPDMGR.EXE
    Size: 71168 bytes
    Version: 0.5.0.3
    Contains file: wuv3is.dll
    Attributes:
    Date: 20/06/2002 14:57:52
    MD5: 7D1FE2201906594E17147E02A208DBD4
    Path: C:\WINDOWS\SYSTEM\
    Short name: WUV3IS.DLL
    Size: 221184 bytes
    Version: 0.5.0.4
    Download location: http://windowsupdate.microsoft.com/R1097/V31Controls/x86/mil/en/actsetup.cab
    Last modified: Tue, 09 Jul 2002 23:59:05 GMT
    Version: 5,4,5440,0

    {D27CDB6E-AE6D-11CF-96B8-444553540000}
    Class file: FLASH.OCX
    Attributes:
    Date: 30/07/2002 05:36:30
    MD5: 4B0E1E4A5AB745711B5312CB3AEF7B67
    Path: C:\WINDOWS\SYSTEM\MACROMED\FLASH\
    Short name: FLASH.OCX
    Size: 806912 bytes
    Version: 0.6.0.0
    Class name: Shockwave Flash Object
    CLSID database: legitimate software
    Description: Macromedia Shockwave Flash Player
    Download location: http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    Last modified: Tue, 06 Aug 2002 18:01:27 GMT
    Version: 6,0,47,0

    {9F1C11AA-197B-4942-BA54-47A8489BB47F}
    Class file: IUCTL.DLL
    Attributes:
    Date: 15/11/2002 14:37:24
    MD5: F533D9FE2EB93F8CB9B61D03B642DB64
    Path: C:\WINDOWS\SYSTEM\
    Short name: IUCTL.DLL
    Size: 109168 bytes
    Version: 0.5.0.3
    Class name: Update Class
    CLSID database: legitimate software
    Description: Windows Update
    Filename: %WINDIR%\System32\iuctl.dll,iuengine.dll
    Contains file: iuctl.dll
    Attributes:
    Date: 15/11/2002 14:37:24
    MD5: F533D9FE2EB93F8CB9B61D03B642DB64
    Path: C:\WINDOWS\SYSTEM\
    Short name: IUCTL.DLL
    Size: 109168 bytes
    Version: 0.5.0.3
    Contains file: iuengine.dll
    Attributes:
    Date: 15/11/2002 14:37:30
    MD5: 69785FD25560E6010ED3983556CAF103
    Path: C:\WINDOWS\SYSTEM\
    Short name: IUENGINE.DLL
    Size: 186992 bytes
    Version: 0.5.0.3
    Download location: http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37631.8182523148
    Last modified: Tue, 19 Nov 2002 22:17:21 GMT
    Version: 5,3,3716,1

    {26FD5192-A97C-4B48-A5D7-2420CFDCFDF2}
    Class file: MCINSTL.DLL
    Attributes:
    Date: 11/02/2003 20:24:00
    MD5: 73E8E8F32C33E2AAC7436AA0E51BBBFE
    Path: C:\WINDOWS\DOWNLOADED PROGRAM FILES\
    Short name: MCINSTL.DLL
    Size: 40960 bytes
    Version: 0.1.0.0
    Class name: Loader Class
    CLSID database: confirmed malware
    Description: Xupiter
    Contains file: MCInstL.dll
    Attributes:
    Date: 11/02/2003 20:24:00
    MD5: 73E8E8F32C33E2AAC7436AA0E51BBBFE
    Path: C:\WINDOWS\Downloaded Program Files\
    Short name: MCINSTL.DLL
    Size: 40960 bytes
    Version: 0.1.0.0
    Contains file: MCInstL.exe
    Attributes:
    Date: 11/02/2003 09:13:56
    MD5: 84F3CF98250213810F69A8945ABCCD2E
    Path: C:\WINDOWS\Downloaded Program Files\
    Short name: MCINSTL.EXE
    Size: 24576 bytes
    Version: 0.1.0.0
    Download location: http://www.tnc4u.com/MCInst.cab
    Last modified: Wed, 19 Feb 2003 01:51:13 GMT
    Version: 1,0,0,1

    {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}
    Class file: QTPLUGIN.OCX
    Attributes: archive
    Date: 15/04/2003 14:32:18
    MD5: 428AF871AAECE123B8121268ABB31D01
    Path: C:\WINDOWS\SYSTEM\
    Short name: QTPLUGIN.OCX
    Size: 323640 bytes
    Version: 0.6.0.0
    Class name: QuickTime Object
    CLSID database: legitimate software
    Description: Apple Quicktime
    Filename: QTPLUGIN.OCX
    Download location: http://www.apple.com/qtactivex/qtplugin.cab
    Last modified: Sat, 21 Sep 2002 00:41:41 GMT
    Version: 6,0,2,1

    {F57D17AE-CE37-4BC8-B232-EA57747BE5E7}
    Class file: EPLUGIN.OCX
    Attributes:
    Date: 25/04/2003 01:30:52
    MD5: 12B423470DA0238770DC82C7C8733361
    Path: C:\WINDOWS\DOWNLO~1\
    Short name: EPLUGIN.OCX
    Size: 40960 bytes
    Version: 0.1.0.0
    Class name: EPlugin Control
    CLSID database: confirmed malware
    Description: ePlugin dialer
    Contains file: EPlugin.ocx
    Attributes:
    Date: 25/04/2003 01:30:52
    MD5: 12B423470DA0238770DC82C7C8733361
    Path: C:\WINDOWS\Downloaded Program Files\
    Short name: EPLUGIN.OCX
    Size: 40960 bytes
    Version: 0.1.0.0
    Download location: http://www.phonesys.net/EPlugin.cab
    Last modified: Thu, 24 Apr 2003 22:31:39 GMT
    Version: 1,0,0,6

    Cheers hope this helps got the info from spybot:confused:
     
  2. 2003/08/27
    Lonny Jones

    Lonny Jones Inactive Alumni

    Joined:
    2002/12/16
    Messages:
    2,252
    Likes Received:
    0
    dmorg
    I dont understand your question completly


    Leave the first two normally these are hidden and necessary
    Microsoft XML Parser for Java
    DirectAnimation Java Classes
    You can remove all others from the downloaded program files folder) they get put back the next time called for,,
    But why manually ?
    You need to let SpyBot fix
    those confirmed spyware mail ware items, there is more to it than just removing the active X controls.
    "CLSID database: confirmed malware
    Description: Xupiter "
    "CLSID database: confirmed malware
    Description: ePlugin dialer "
    and anything else it finds


    windows update
    I would turn it off from control panel , automatic update ,
    doing that would remove the activex controls, opt to manualy update windows instead, I usaly check about every two weeks.

    I have win me also , I let SpyBot clean(fix) all but
    windows setup (tracks)
    windows
    windows explorer.
    ms search assistant
    ms regedit
    logs
    and cookies I want to keep
    because if I let it I lose the ability to have
    personalized favorites in IE and in the start menu.
    Not sure witch one goofs it up :)
    You can get some info about those confirmed By with spybot
    in advanced mode clicking info & licence then product info then use the drop down and
    http://www.doxdesk.com/
    Lonny
     

  3. to hide this advert.

  4. 2003/08/27
    Welshjim

    Welshjim Inactive

    Joined:
    2002/01/07
    Messages:
    5,643
    Likes Received:
    0
    http://www.tnc4u.com/MCInst.cab and http://www.phonesys.net/EPlugin.cab
    look like things I would delete. The first is Download Plus which is not well regarded.
    http://www.spywareguide.com/spywarelist.html
    IEPlugIn is also in that list, but, while I do not know if it is the same as Eplugin, you can see from the Spybot report that EPlugin and Download Plus are "Confirmed Malware ". You want to use Spybot to delete both programs (not just the ActiveX controls) in their entirety.
    The other items look legitimate. Whether you want to keep them or not is somewhat up to you since it depends on whether you use the associated programs (which are described by the Spybot report). Personally I would not want the Windows Update Manager (WUPDMGR.EXE) since it is always calling the internet to look for Updates. But if you decide to get rid of the ActiveX part of the program, you should uninstall the whole Windows Update Critical Notification program through Control Panel|Add/Remove.
    IUCTL.DLL comes from the Windows Update Troubleshooting program. I guess you must have run it recently?? I would think you could get rid of them since you can always reinstall.
    See
    http://support.microsoft.com/?kbid=243787 and
    http://www.support.gateway.com/s/SOFTWARE/MICROSOF/7509594/FAQ2/7509594faq13.shtml
    for more info. It is possible wuv3is.dll and WUPDMGR.EXE came from use of the Troubleshooting program, also.)
    And while legitimate, I think I would get rid of the QuickTime plug in, too, unless you use Quick Time frequently. If you ever need it, you will be asked to redownload it. QT plug-ins often cause problems with other programs. In fact, there is a chance it might have something to do with the problems you mention in your other post.
    FLASH.OCX is somewhat similar. If you use Shockwave Flash Player frequently, keep it. If you do not, uninstall the Shockwave program in its entirety. It won't work anyway if you just delete FLASH.OCX.
    In closing, I am curious why you posted this message. Are you having a problem other than as posted in the other thread? If yes, tell us more.
     
    Last edited: 2003/08/27
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.