Im using processexpl on my vista and i found this AmIcoSinglun 64.exe on it and it isnt verified can someone tell me what this is and if its bad for my laptopThanks

1. Follow to the letter all the directions in this thread: How to get rid of malware 2. If still no joy you can find Microsoft MVPs and other trained analysts at the following help sites: Aumha.org Atribune.org SpywareHammer BleepingComputer Safer-Networking 3. If you need more help with virus-related issues, contact Microsoft Product Support Services. For information about Security updates, visit the Microsoft Virus Solution and Security Center for resources and tools to keep your PC safe and healthy. If you are having issues with installing the update itself, visit Support for Microsoft Update for resources and tools to keep your PC updated with the latest updates. 4. If you need more assistance for the virus/worm post to the Microsoft Newsgroup - Security - Viruses. Via your newsreader: news://msnews.microsoft.com/microsoft.public.security.virus Via Web: http://www.microsoft.com/communities/newsgroups/list/en-us/default.aspx?dg=microsoft.public.security.virus Hope this helps, Vincenzo Di Russo - Microsoft MVP Windows Internet Explorer, Windows Desktop Experience & Security - Since 2003. ~~~ My MVP Profile: https://mvp.support.microsoft.com/profile/Vincenzo

This is the driver for the card reader device.

Actually no. The driver is named "AmUStor.sys" and is installed in Windows system drivers, along with "AmUstor.dll" (the coinstaller in Windows System directory) and "AmUStor.inf" (the installation instruction) and "AmUStor.cat" (the digitally signed catalog for the system driver for the AlcorMicro memory card reader). The card reader will work correctly with just those files alone. However the new card readers from AlcorMicro support two "LUN's" for two types of memory cards: - 1st LUN is for SD cards, MMC cards, xD cards, and Memory Stick (MS, MS Pro, MS_duo) - 2nd LUN is for MicroSD and M2 (does not require any MicroSD-to-SD adapter) Normally, only one LUN is used at any time when you insert a flash card, so instead of displaying two icons in the Windows shell, the utility "AmIcoSingLun.exe" will autodetect which one is really connected, and will automatically mount the correct LUN, dismounting the other one. In addition, it will report to the Windows Shell the appropriate icon showing the type of flash memory inserted. IF you don't run this utility, the card reader will still work but the icon will not be updated and multiple drives will be shown (one for each LUN). This causes confusion about which drive is used when you insert the flash card. The utility will then allow a single drive letter to be assigned for the two LUNs. The full installer of the driver will also install the utility "AmIcoSinglun64.exe" in its own directory (generally: %ProgramFiles%\AmIcoSinglun\) which is also used as the source directory for installing the system driver (AmUStor.dll/.sys/.inf/.cat). This is a 32-bit application which runs as well in 64-bit versions of Windows XP/Vista/Seven. In the same directory, you should find another DLL named "Gamicon.icl" which in fact contains no code, but just a few icon resources for displaying the correct icon for each type of supported flash card. Unlike the files for the system driver (which are digitally signed within the .cat file and certified by the Microsoft WHCL signature), this .exe utility (that autoruns when the user logons in a new Windows session) is unfortunately not digitally signed. Without the digital signature, other malicious programs are created by malwares authors that rename their spew using this name. The only way to check if this is a safe version of the AlcorMicro program and not a fake is to compare it online: the safe versions are distributed by Asus and HP (or other notebook vendors) and there are very few versions of this simple utility. IF you are not sure, you may safely disable the autorun line (because the utility is optional : the only effect will be that the icon displayed in the Windows shell will not automatically change according to the type of flash card inserted in the card reader); then you can safely delete the directory "AmIcoSingLun" in Program files containing the source files for the system driver and this utility plus some possible log files or readme files which may have been added by your notebook manufacturer in its own installer. This done, you can reinstall the card reader driver from the official support site for your notebook. Even if you delete the AmICoSinglun directory or the autorun program "AmIcoSinglun64.exe" (the version for 64-bit installations of Windows XP/Vista/Seven or of Windows Server 2003/2008) or "AmIcoSinglun.exe" (the 32-bit version used for all other versions of Windows), the card reader will still work properly (using a default static icon in the Windows shell). This has the advantage of making your system more secure (because this EXE is not signed) and freeing some memory and boot time. The only role of this "AmICoSinglun(64).exe" program (and its companion DLL "Gamicon.icl" containing the list of icons in resources usable by the Windows Explorer shell) is to dynamically change the icon displayed in the main PC folder or in the flash drive properties dialog. Without it, you'll only get the default icon that Windows itself features internally for flash drives, and to let you see when a flash card is effectively present (or not) in the reader... To do that, this program dynamically sets some registry entries used by Windows Explorer, by installing an Explorer hook procedure which will link the appropriate icon found in the "Gamicon.icl" DLL. More info can be found there (English page): http://www.alcormicro.com/en_content/c_product/product_01b.php?CategoryID=7&IndexID=18 and in the support site of your notebook manufacturer (because AlcorMicro does not offer driver updates directly to the public, but to your PC manufacturer or to buyers of its evaluation development kits).