GkSui20.EXE - Possible Threat? [No]

[bollix47]

FYI

I noticed this file in my smp folder on both my Windows 7 installations.

A search of this forum yielded no hits, however google does show some entries for it. The information given is mixed as to whether it's an actual threat.

FAH6.29beta-win32-SMP-mpich, which I downloaded in early May/10, appears to be the source but I can't be 100% certain. I have three windows smp clients running. One is using deino and does not have this file. The other 2 are using mpich and they both had the file.

I haven't noticed any problems and, after deleting the file and deleting references to it in the registry, the client appears to be running okay.

The file only appeared in the smp folder as far as windows search was able to find.

Could others using mpich please check their smp folder to see if anyone else has this file and if anyone knows how or why it was created?

Thanks

[PantherX]

I have installed Folding@Home Windows SMP2 6.29 BETA MPICH. This is what is in my F@H SMP directory:

Code: Select all

D:\F@H SMP>dir
 Volume in drive D is Data Files
 Volume Serial Number is XXXX-XXXX

 Directory of D:\F@H SMP

30-Jun-10  04:27 AM    <DIR>          .
30-Jun-10  04:27 AM    <DIR>          ..
30-Jun-10  12:22 AM               267 client.cfg
21-Jun-10  02:40 AM         9,325,056 FahCore_a3.exe
30-Jun-10  04:27 AM            51,116 FAHlog-Prev.txt
02-Jul-10  03:54 PM            10,941 FAHlog.txt
21-Jan-10  11:32 PM           423,424 Folding@home-Win32-x86.exe
15-Mar-07  06:56 PM           106,496 foo.exe
15-Feb-07  03:32 AM            81,920 GkSui20.EXE
14-Mar-07  06:31 AM                71 install.bat
11-May-10  08:00 AM         1,382,280 libfftw3f-3.dll
31-Jan-07  10:54 PM         1,196,032 mpich2.dll
31-Jan-07  10:54 PM           102,400 mpich2mpi.dll
31-Jan-07  10:54 PM         1,175,552 mpich2shm.dll
31-Jan-07  10:54 PM         1,380,352 mpich2shmp.dll
31-Jan-07  09:29 PM         1,158,144 mpiexec.exe
14-Apr-10  01:37 AM             5,344 MyFolding.html
30-Jun-10  12:44 AM             7,168 queue.dat
28-Jul-08  07:14 PM            16,050 readme.rtf
31-Jan-07  09:29 PM         1,135,616 smpd.exe
14-Apr-10  01:25 AM            13,826 UILANG1.UDB
14-Apr-10  01:25 AM            35,352 UninstallEF28.DAT
02-Jul-10  03:54 PM               161 unitinfo.txt
02-Jul-10  04:05 PM    <DIR>          work
              21 File(s)     17,607,568 bytes
               3 Dir(s)  109,051,711,488 bytes free

D:\F@H SMP>

I don't think that it is any threat as my Microsoft Security Essential didn't notify me of it.

[bollix47]

Thank you for the confirmation and the assurance PantherX. My virus detector did not alert me either.

I would think that Pande would want to know that their installer has a hitchhiker.

[bruce]

I would think that Pande would want to know that their installer has a hitchhiker.

GkSui20.exe is an unstaller. If you have installed Fah SMP and wish to remove it, it will help you by finding the files that were originally installed as part of the Windows v6.2x beta SMP clients.

Any Windows installer is SUPPOSED to give you a tool to allow you to reverse the procedure and remove exactly the files that were installed, putting your system back in the same condition it was before the installation. I've never been impressed with uninstallers. I tend to move files around or duplicate files or folders manually and I can't expect some piece of software to figure out what I did. At best, an unistaller willl work only if nothing else has modified any of the file locations. FAH-SMP and it's data are pretty well confined to one or two folders plus a few registry entries so I can remove most of them manually or let them be overwritten by the files of a newer FAH installation. After that happens, there may be an unnecessary registry entry or two left, but it won't be any worse than what 99% of other programs will leave. Why do you think there's a market for Registry Cleaner software?

[bollix47]

lol ... oh well I don't plan on uninstalling

Strange that GkSui20.exe brings up so many hits that hint it's a virus or malware.

http://www.google.com/search?hl=en&q=Gk ... =&gs_rfai=

[7im]

But many more that say it isn't a virus. For example, one of the top entries from Google: http://www.threatexpert.com/files/gksui20.exe.html

With actual viruses, they don't hint, they just call it a virus, and there are lots and lots more when it's an actual virus.

And if your AV scanner didn't prompt you about this file, what set off this wild goose chase?