Computing.Net > Forums > Security and Virus > What's $ncsp$.inf ?

What's $ncsp$.inf ?

Reply to Message Icon

Original Message
Name: Steve Hopper
Date: January 28, 2006 at 19:04:47 Pacific
Subject: What's $ncsp$.inf ?
OS: XP Home SP2
CPU/Ram: 1.6Ghz with 512Mb RAM
Comment:

Hi everybody,

M$ knowledge database shows nothing on this, my googling merely hits on this as an unidentified program, and its located in system32 as a driver dated sometime before the laptop was manufactured.

Even the driver properties offer no info on it other than it is 333 bytes.

Creepy because my windows 'sys info' (soware enviro>startup progs) shows the program twice as a startup program with command(s) of "$ncsp$.inf", user name(s)
"NT\AUTHORITY\SYSTEM" and "DEFAULT", and of course locations of "startup".

Any body have a genuine take on this thing (i.e.; sources of legimacy)?

Sabertooth replied one time to this post on the XP forum, but only recommends deleting it (the so called 'program'), but as he hasn't replied back to my asking what he seems to know about "$ncsp$.inf", I'm left to chancing a tongue lashing for re-posting this.


Regards and hap-e-trails, Steve Hopper


Report Offensive Message For Removal


Response Number 1
Name: Steve Hopper
Date: January 28, 2006 at 19:07:08 Pacific
Reply: (edit)

Also, this thing doesn't show up on my add/remove programs list, so whatever it is I'd sure appreciate knowing.

Regards and hap-e-trails, Steve Hopper


Report Offensive Follow Up For Removal

Response Number 2
Name: Johnw
Date: January 28, 2006 at 19:55:31 Pacific
Reply: (edit)

Read these pages & follow the instructions, if you are still having problems, post your HiJackThis log.
Make sure you do Not install HiJackThis in a Temp folder.
If possible run HJT in Normal mode ( not Safe ) with all your normal startup's working.
Malware Removal and Prevention: Introduction
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
Malware Removal and Prevention: Overview
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview


Report Offensive Follow Up For Removal

Response Number 3
Name: Steve Hopper
Date: January 29, 2006 at 19:11:14 Pacific
Reply: (edit)

Tanks 4 ur reply, but I've read quite a bit on means to protect and cleanse an os, I was hoping somebody could give me the skimmy on this thing ($ncsp$) before doing a HJT regiment which after all the time and fuss, is really a pain especially if $ncsp$ turns out to be a legimate something or other.

I'd prefer to save everybody the hassle of a HJT disection if just someone here could identify it.


Regards and hap-e-trails, Steve Hopper


Report Offensive Follow Up For Removal

Response Number 4
Name: Johnw
Date: January 29, 2006 at 20:30:02 Pacific
Reply: (edit)

Like you say googling, dos'nt show up something relevent, unless you have something Nokia installed. Have another look using my link.

http://www.google.com.au/search?hl=en&q=%24ncsp%24&btnG=Google+Search&meta=


Report Offensive Follow Up For Removal

Response Number 5
Name: Steve Hopper
Date: January 29, 2006 at 21:49:56 Pacific
Reply: (edit)

Thanks for the lead. I drilled down quite a bit into your link's results and found nothing I would have installed or used.

Seems the $ symbols are a mask for something and I suppose they are omitted in any search engines.

I did find a little useful info at filext.com (on the extension of .inf). Unfortunately its used both as a program file and an information file extention, so I still don't have enough to safely delete the program/info file in quastion.

I suppose I could have simply removed the file from from my c's os and see if everything still works, etc., but a little more digiging by opening the files which have driver like icons, revealed that the one on my c drive is/was created just before my computer was marketed and this lead me to leaning towards believing that the so called program (as indicated only by my os's startup programs list) are not programs per say, and instead they're looking more like actual information files.

Both the subject files listed in my 'startup programs') read in notepad as...

[params.ms_tcpip_Adapter01]
DefaultGateway=""
DefaultGatewayMetric=""
DNSDomain=""
DHCP="Yes"
IPAddress=0.0.0.0
DNSServerSearchOrder=""
IpAllowedProtocols=0
SubnetMask=0.0.0.0
TcpAllowedPorts=0
UdpAllowedPorts=0
DisableDynamicUpdate="No"
EnableAdapterDomainNameRegistration="No"
WINSServerList=""
NetBIOSOptions="0"

..and as such, along with these file's locations of c:/windows/system 32/ and the other location is in a backup file on my external HD (copied before I formatted the os) strongly points to the file being a working info file (most likely necessary to my os in some respect).

As to what the info file actually is doing on an XPHome system, I'm guessing only a real programmer might know.

And lastly, before I continue searching for what $ncsp$ info files are used for (in my spare time), whatever the $ symbols are being used for in computer-eese, despite my failure there too at hitting on what they're used for, I seem to recollect reading that they're used by code writers for something, and until I get some confirmation, judging by your removal of the symbols (in your googling), I must assume the symnols are used in lieu of the spacer for run-on text (i.e.; _), but then what do I know.

Again any more help is appreciated.


Regards and hap-e-trails, Steve Hopper


Report Offensive Follow Up For Removal


Response Number 6
Name: Johnw
Date: January 29, 2006 at 22:33:06 Pacific
Reply: (edit)

This gives you a picture of $ & inf files.

http://www.fileformat.info/ext/index.htm

http://www.computeruser.com/resources/dictionary/filetypes.html

http://www.zingel.de/extn.htm

=====================================

I would run some cleaners & like I say I use them all, suggest you start with CCleaner, RegSeeker & BinMan.

You may need to print this.

I use all these cleaners for W2K/XP, each one specialises in a different area.

Do not be supprised if hundreds of files are found.

Files are either removed to the programs backup or the Recycle Bin ( make sure the Recycle Bin is empty, before using the cleaners, that way you know the files you have removed )

All ( except DustBuster ) allow you to restore them back into the system, either by right clicking on the reg file in the programs folder ( example Regclean & OleClean > Windows Explorer > Unzipped, click on either RegClean or OleClean ) & clicking on Merge.

jv16 PowerTools, RegCleaner & RegSeeker both store in Backup on their main page.
Opening Backup allows you to either Restore or Delete.

EasyCleaner removes to the Recycle Bin & by opening the Recycle Bin, right clicking on the files & clicking Restore.
Has an Update button. Checks you have the latest version & blacklist.

CCleaner, one advantage of this cleaner is, when Issues is clicked & the boxes ticked, it will tell you before you fix ( doing one file at a time ) why the file is there.
Configure the Windows, Applications & Issues panels to suit.

RegScrub
Click on Restore, click the backup to be restored, click on Restore Selected backups.

DustBuster
Very quick, if you want to know what it cleaned, takes about 1 min to clean ( depends on the speed of your comp ) you have about 4 seconds to read the message displayed, when it is finished. Don't use whilst online.

Find Junk Files
I use only > Find Dead Links, which is part of Find Junk Files. Start > Programs.

Backups
Once you are sure they are not needed again ( about one week ) they can be deleted.

=============================

jv16 PowerTools 1.3.0.195, which doesn't expire.
http://spazioinwind.libero.it/puntocr/dwl/jv16pt_setup.exe
http://down.hengshui.com/download.asp?downid=1&id=726
http://www.321download.com/LastFreeware/page7.html
http://www.321download.com/LastFreeware/index.html#jv16
http://www.pricelessware.org/thelist/sys.htm
Click on Registry tool > Tools > Registry Cleaner > Continue > Start.
When finished, Click on Select > Special select > Items that should be safe to remove > Remove.

Or, the renamed later version ( dos'nt hurt to use both )
RegCleaner
http://www.321download.com/LastFreeware/
http://www.321download.com/LastFreeware/dload/RegCleaner.zip
RegCleaner 4.3.0.780 ( last freeware version ) OS: Win9x/NT/ME/2000/XP
Click on Tools > Registry Cleanup > Do them All
When finished, click on Select > All, then down the bottom, click on > Remove Selected.

==================================

RegClean
http://www.majorgeeks.com/download458.html
http://www.download.com/3000-2094-881470.html
http://www.pcworld.com/downloads/file_description/0,fid,4666,00.asp
Microsoft's RegClean ( freeware ) very conservative.
By default it puts the 3 files into Windows Temp.
I prefer them in Unzipped.
Right click in an empty space in Unzipped, select Folder & name it RegClean.
Now when you click unzip ( during install ) select the new folder.
To use, you can either open up the folder & doubleclick on RegClean or right click & make a shortcut to your desktop & then put it anywhere you like.

===========================

OleClean ( Freeware. I tick all 8 boxes in Options )
http://www.majorgeeks.com/OleClean_d452.html
http://www.geocities.com/maurizioferreira/oleclean.html
http://www.webgrid.co.uk/system_13.html
http://www.webgrid.co.uk/index.html
http://www.google.com/search?hl=en&q=oleclean

===============================

CCleaner
http://www.ccleaner.com/
CCleaner (Crap Cleaner) is a freeware system optimisation tool. That removes unused and temporary files from your system - allowing it to run faster, more efficiently and giving you more hard disk space. The best part is that it's fast! (normally taking less that a second to run) and Free. :) Windows 95/98/NT4/ME/2000/XP/2003
Myth - "Deleting the contents of the Prefetch directory in Windows XP will speed up the boot process"
http://mywebpages.comcast.net/SupportCD/XPMyths.html
Warning - Recently CCleaner has added a performance slowing cleaning option, cleaning "Old Prefetch Data".

=================================

RegSeeker
http://www.hoverdesk.net/freeware.htm
RegSeeker is a perfect companion for your Windows regsitry!
RegSeeker includes a powerful registry cleaner and can display various informations like your startup entries, several histories (even index.dat files), installed applications and much more! With RegSeeker you can search for any item inside your registry, export/delete the results, open them in the registry. RegSeeker also includes a tweaks panel to optimize your OS! RegSeeker is FREE for personal use only!
Click on Clean the Registry & tick ( new version 1.45 has this already ticked > Scan Drives for old exe entries in the registry. Click OK.
My personal use, is to, delete only the Green entries.
Click on Select All and choose > Select all Green items.
Right click to delete.

=========================================

EasyCleaner
http://personal.inet.fi/business/toniarts/
http://personal.inet.fi/business/toniarts/ecleane.htm
Click on Unnecessary.
I tick > Normal types, Extra types & Temp directories.
Don't use Duplicate files unless you really know what your doing.
If you try & remove a file that is being used, it will after about a 15 second delay, inform you so & will not delete.

==================================

RegScrubXP
http://www.majorgeeks.com/download.php?det=2048
http://www.sofotex.com/RegScrubXP-download_L7528.html
Registry Cleaner for Windows XP/2000 Systems (under development is a version that will run in
Windows 98/ME/NT/2000/XP)
I have made it very easy for you to backup the registry prior to using RegScrubXP. This backup process uses Microsoft's reg.exe program. Follow these directions:
Go into the folder where RegScrubXP was installed.
Double-click on these two programs: HKLM.cmd and HKCU.cmd
You should see two files created: HKLM.reg and HKCU.reg
Copy these two files to a safe place.
If you ever need to fully restore your registry back to normal, double-click on HKLM.reg and HKCU.reg to fully restore your registry as it was before you used RegScrubXP.

==================================

DustBuster
http://www.majorgeeks.com/downloadget.php?id=1182&file=11&evp=bfd7730c44fba586eaed019edd92d63c
http://www.majorgeeks.com/downloadget.php?id=1182&file=10&evp=bfd7730c44fba586eaed019edd92d63c
http://www.majorgeeks.com/downloadget.php?id=1182&file=12&evp=bfd7730c44fba586eaed019edd92d63c
http://www.majorgeeks.com/downloadget.php?id=1182&file=9&evp=bfd7730c44fba586eaed019edd92d63c
http://www.majorgeeks.com/downloadget.php?id=1182&file=13&evp=bfd7730c44fba586eaed019edd92d63c
http://majorgeeks.com/downloadget.php?id=1182&file=14&evp=bfd7730c44fba586eaed019edd92d63c
DustBuster is a garbage file removing utility for Microsoft Windows operating systems. It searches for junk files and temp files that are of no use and are just taking space on your hard drive. Based on a "common sense" scanning technology, DustBuster now cleans over 1500 different types of useless temp files and directories in a single click, detecting and deleting all these unneeded files automatically. This will increase hard disk space on Windows 98/ME/2000/XP/2003.

==================================

Find Junk Files
http://www.majorgeeks.com/Find_Junk_Files_d1953.html
Find Junk Files is a user-friendly utility designed to free up disk space by deleting useless junk files.
Each time you use your PC, unwanted files are created that increasingly use more space on
your hard drive.
Find Junk Files can find more than 165 types of junk files with ease. Unlike many other programs Find Junk Files will let you choose which drive or drives to clean, which file types to search for, and what folders to include or exclude.

==================================

Binman
http://steveseymour.0catch.com/
http://anothermirror.tripod.com/free.htm
Seeks out the rubbish left behind by other programs. Use regularly it will save space. It can auto run at times set by you. Cleans automatically at boot up.

Or, ( dos'nt hurt to use both )

XP
Auto Delete Temporary Folder
http://www.tweakxp.com/display.aspx?id=2021

First go into gpedit.msc ( only available in the Pro version of XP )

Start > Run, type in > gpedit.msc & press Enter.

Next select -> Computer Configuration/Administrative Templates/Windows Components/Terminal Services/Temporary Folder

Then right click "Do Not Delete Temp Folder Upon Exit"

Go to properties and hit disable.

Now next time Windows puts a temp file in that folder it will automatically delete it when its done!



Report Offensive Follow Up For Removal

Response Number 7
Name: Steve Hopper
Date: January 29, 2006 at 23:54:04 Pacific
Reply: (edit)

Holy smokes, while I really appreciate the effort you made, I'm afraid that except for my saving this stuff for potential use in the years that come (as slow as I pick up new skills), I'm afraid it's much easier for me (at least at this time) to format the machine and reinstall, even though I again need some help doing that as easily as it can be done (given the necessary expertise that allows that in about 2 or 3 hours).

I bought an EHD (Retrospect, by Hammer) some 4 months ago and I still am not confident enough to clearly use it's capability to restore my os after formats.

An old friend of mine years ago, doesn't even run AV becsuae he simply formats and reinstalls using a backup copy of his os.

That seems clearly the easier thing to do given my 'expertise', not to mention my patience and the time needed to learn all this stuff, plus use it.

But again, I see your effort as very helpful and informative to those reading this string. I just can't for too many reasons get into it to the extent that you are able to.

In this case, I'm simply am trying to weed out anything odd that I can safely and readily do.

Regards and hap-e-trails, Steve Hopper


Report Offensive Follow Up For Removal

Response Number 8
Name: Johnw
Date: January 30, 2006 at 00:15:12 Pacific
Reply: (edit)

You have nothing to lose, if formatting is 1 of your options. Good chance to learn new skills.


Report Offensive Follow Up For Removal






Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: What's $ncsp$.inf ?

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge