| All comments about IadHide5.dll: |
Sebastian A. | Backweb files generally related to autoupdating software. Could be harmless, could be harmful depending on host application. |
| Part of Backweb, used for obtaining software updates |
Lars | Logitech Software für Maus/Tastatur |
jducreux@dewqs.com | DSO Exploit support file |
| F-Secure Backweb component |
| Seems to allow adware on to your PC, when u quarantine the file it just comes back on start up which probably means it is getting started by some other program, I deleted it manually in safe mode |
super riri | backweb some say it is spyware (spybot search and destroy for example) , but it is is used by many good software, like F-secure internet security 2005, logitech, etc. |
Charlie Hill | On my system, this file is part of Kodak EasyShare's BackWeb utility that automatically checks for software updates. BackWeb is also used by other software for similar update purposes. See also: Link |
Matthias Eichler | Some DLL for the Update Service of F-Secure Anti-Virus via BackWeb |
Robin Lord | According to the backweb site a version iadhide3 is installed with various 3rd party applications, one of which is the F-Secure anti-virus system, the appearance of this file seems to have co-incided with the installation of F-Secure on my system. See also: Link |
nupset | Seems to be a Logitech file |
Ivo | adware |
kate | dso exploit file |
Peter Ogilvie | Download facility |
| F-secure Backweb component See also: Link |
| It is associated with BackWeb technologies and is used by both F-Secure Antivirus and Logitech's itouch software |
Chad | Updating for F-Secure Anti-Virus |
Ibo | Habe die Datei im Safe-Mode gelöscht, erscheint aber immer wieder im TEMP-Verzeichnis (Lokale Einstellungen) des User-Verzeichnisses. Sollte diese dll aber Bestandteil von F-Secure sein so wundere ich mich dass der Virenscanner von F-Secure immer wieder Virusmeldungen bringt und die dll immer umbenennt, da sie sich nicht löschen lässt. |
Steveienot | Was an extension in "HP Updates", allowed several files to embed themselves in my OS, it or one of its friends brought my computer to a screeshing halt. It may have been provided with good intentions, but someone needs to muzzle it. |
Roderick | This file maintains a copy of Internet Explorer running which cannot be closed, it respawns internet explorer when its killed. Makes Ie attempt to start once the machine is switched on. Kodak Easyshare alledgy has something to do with this- it is irritating to the core. |
Bernard | IadHide5.dll appears to be part of Logitech/Backweb messenger app. It most likely is part of a package installed with various periphials such as a mouse, keyboard or web-cam. You can disable it through Windows Task Manager (Logitech Messenger) and/or by removing the Logitech Messenger application (Control Panel-Add/Remove App) |
Broam | Part of backweb autoupdater. Can be used for good or evil apparently. |
Lobo | Used by Kodak and always placed back after deletion |
Bear | it is some form off spyware, but if you disable your firewalls spyware detector ( trend micro is what iam using ) it will not show , but iam finding out ways to delete it (very interesting ) |
Chis | Creation date coincides with date when i first started having trouble with my computer (annoying pop ups even when not on the internet, changed home page) and no matter how many times i delete it (in safe mode) or its components in another file, it comes right back. as for the Iadhide's that are good, the Logitech Iadhide.dll has no 5 in the name, trying to look like a legitimate file is a common trait of annoying spyware/adware |
Maxime | Well it seems weird that a file from a legitimate vendorreside in the "temp" folder. I would rather put it in the application folder if it was bundled with my product... (or at lease ad it to common files under program files...) |
GSS | Backweb component for automatic updates of many apps. But it's a mystery why they put it in the temp directory where it's very annoying. |
CR Berg | I found it because Norton One Button Checkup called it out as an error and couldn't "fix" it. The file was easy to find, residing in a 'temp' folder and referencing metadata saying the owner was BackWeb. From there I found it was likely attached to my Logitech Mouse. Since it's in a 'temp' folder, I'll let it stay resident and ignore it for now. |
Peter de Kivith | Logitech mouseware (in my case) |
FortyFootChicken | C:\DOCUMENTS AND SETTINGS\**User Name**\LOCAL SETTINGS\Temp\IadHide5.dll (24.04KB) Appeared when I installed F-Secure AntiVirus. When updating for the first time F-Secure notified me that Backweb may be used for virus definition/software updates. |
FF | wahrscheinlich von F-Secure Antivirus installiert, C:\Programme\F-Secure Anti-Virus\backweb\4476822\6.3.2.62-4476822L\Program und C:\Programme\F-Secure Anti-Virus\backweb\4476822\6.3.2.62-4476822L\Program\temp installiert und im temp. Verz. |
Alexey A. Bovanenko | iadhide5.dll is part of F-Secure AntiVirus 2005. There're some functions for hooking keyboard and mouse. It's used for updating F-Secure and (for collecting some information about user's preferences (may be...not investigated yet)). |
Tolga Ceran | If you add a weblink either to excel file or to somewhere else, this dll.file is automatically appear in Temp folder and you cannot delete it. |
Davis | It seems to have appeared when I installed Kodak EasyShare. I will tust Kodak if that is indeed this babie's Daddy. |
tekano | part of Nikon Picture project install - slows my machine and startup down considerably am turning it off for sure |
anju | Bei mir ist diese Datei bestandteil der LogitechSoftware. Also dürfte da nix gefährliches bei rauskommen |
Zonk | Part of Logitech software and other apps (also dangerous). Autoupdate. |
Robert Barre, Sweden | Hard to get rid of, copies itself into other users local settings |
S.K. Zimmelman | It's part of Kodak's software auto-update feature |
K4C20R of Blackcode Industries blackcode.com | This DLL is about as harmfull as your favorit underpants. I run a fullon 36 PCs on a Network with 4 Servers. I mainly use Logitech hardware as I have an Account with Logitech them selfs. This DLL is used by your system to pick up any driver updates or registration infomation Logitech have for your hardware "E.G Keyboard/Mouse/Webcam Ect." For most of you who have a Logitech Keyboard and didnt register it strate away did you ever knowtice a pop=up appear from them asking you to register ? |
DEEPWOODS | This file is part of KODAK updater and Backweb Lite on our system. It has caused bottle necking in the registry with 57 entries for backweb and has slowed our system resources alot since intallin KODAK software. We are removing the Updater and backweb facilities altogether. And just leaving the standalome KODAK to load only when we want it too. It has become a menace and that is why were remoiving the UPDATE, Backweb and the IadHide5.dll file |
Valerio | Not sure it is really dangerous but I found it in my \local settings\temp folder and I removed it. Dll with same name and size is also under the Kodak Software, but is not the same content. In addition when I blocked the execution of this dll by a firewall Outlook did not start, but it worked after I physically removed the dll. |
Canis_Familiaris | Used by Logitec Desktop Manager for updates. Seems to be used by other software as well, including spyware. Other programs which may need this file are: Kodak, Siemens, HP, KLATencor, BT, LAM, Logitec, Bochringer. See also: Link |
vikram | Use by Kodak EasyShare software autoupdater. Kodak Easyshare software comes with Kodak digital cameras for connecting the camera to the computer and working with photos |
Jo Jo Dancer | Something was poping up on my taskbar every few minutes, so fast I could not catch it. It was obviously running in the background. |
John Abrams | I dumped f-secure because of all the problems w/backweb. LT is even worse w/Iad4Hide |
vlad | yes its my big probllem how can you delete it???? |
bocek | my kodak easyshare program uses it for updating |
Jim | I got it from McAfee and its updating section. |
| Used by F-Secure |
Karl P. | This backdoor connexion to the internet from my PC is an insult to my intelligence. No matter which "legitimate company" installed it (Kodack, Logitech etc) I was done without my explicit consent. |
tndvrs | Thank you for contacting BackWeb's support. |
Roger D. | Part of Logitech Desktop Messenger |
Kev | At least HP and Kodak seem to use it on my computer. I disabled access to the internet through Windows XP built-in firewall, but have let those other apps use internet. Very strange that it appears in a temp folder. Even stranger that after deleting that temp folder, that folder was recreated with the file in it and the file is date-stamped as having being modified in Feb 2004 (deleted and recreated on 21 Sept 05). A similar file in the parent folder is Temp IadHide3.dll. It's pervasive. And just as mystifying as svchost.exe. |
GGoodman | I found it on Nortons one step check. It seems to be doing nothing. And yes, I have the Kodak software so I think its on as of the date I installed my Kodak Software...seems harmless |
Thomas | f-secure client security See also: Link |
Patrick MacManus | F-Secure Updater |
RM | Back Office Web - Outlook Extension for menu hide feature. - Backweb Technologies is a partner of Microsoft Exchange production and applications integration. See also: Link |
John | used by backweb, not dangerous, just stupid placement |
Aydin | Security Task Manager und noch 3 andere programme runter geladen konnten es auch nicht löschen. Das kann doch nicht harmlos sein es ist gefährlich und bleibt gefährlich |
Arnold | It appeared when I installed my logitech MX610 laser mouse. It is for notification of software updates. |
Silk Dawg | Logitech Related |
KJ | Installed with F-Secure. I assume there is a good reason for F-Secure to install it in the local temp directory. I was also suspicious about the location. |
C | It's a file that comes along with HiJackThis 1.99 |
Fredrik | A F-Secure component used to update the software, I do not know if it is used by another program, I do not think so. |
Noob-Hater | this dll is a file from a secure ip program and has nothing to do with F-Secure |
Pawel | If you have F-Secure installed it's most probably harmless, otherwise it can be part of other auto-update package or indeed trojan. F-Secure installs second FSBWCE.DLL library which is interface to IADHIDE5.DLL, both are harmless. |
KONEON always | CCleaner dosent like it, and i think i don't either. ever since it has been on the computer i have had trouble im getting rid of it See also: Link |
old ass hippie | I'm running a Compaq persario with a backweb program called compaq connections,so hp can auto update my files.when I close compaq connections,then delete the file it goes away.but if I start the program again.it comes back,hp does it with there pavilions as well See also: Link |
Rick | Wird für mehrere Anwendungen genutzt (evt. auch gefährliche!?) |
Andrew D | Backweb on my HP computer is used by HP to auto update HP software. You can disable iadhide5.dll by renaming iadhide.dll in directory C:\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program and renaming iadhide5.dll in directory C:\Documents and Settings\HP_Owner\Local Settings\Temp. In fact iadhide.dll recreates iadhide5.dll which is why is is difficult to remove. You can rename iadhide5.dll at any time but you cannot delete it until after you rename iadhide.dll. By renaming these files you can determine over time what software is using Backweb. Go to www.hp.com and search for "Backweb connections" and open artical on Frequently Asked Questions See also: Link |
Andrew D | Backweb on my HP computer is used by HP to auto update HP software. You can disable iadhide5.dll by renaming iadhide.dll in directory C:\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program and renaming iadhide5.dll in directory C:\Documents and Settings\HP_Owner\Local Settings\Temp. In fact iadhide.dll recreates iadhide5.dll which is why is is difficult to remove. You can rename iadhide5.dll at any time but you cannot delete it until after you rename iadhide.dll. By renaming these files you can determine over time what software is using Backweb. See also: Link |
... | its in my temp folder i have reason to think it was with kodak easyshare although i would still like to delete it |
Lance Summers | I do NOT have Kodak or Logiteck. This file showed up when Win-Spy wormed it's way onto my system. Win-spy was deleted (help from company was great) but this file just will not go away. Even tried deleting it in safe mode |
ZIronMan | It's a KODAK AutoUpdate FIle |
JT | I have logitech keyboard and mouse, But ever since this dll showed up i have had multiple copys of dreamweaver.exe running in my taskmanager and slowing my pc. I think the file was provided with good intentions. but i fear someone may know a way to mess with it. |
jeremy | Iadhide5 is the only program I know of , that has been modified, before it was created.....very curious. I'll leave it on for now, not that I have a choice. Tried deleting, keeps coming back. |
Andy | This showed up after installing a copy of Nero 7 Demo and severly slowed down my system. Also I can no longer access the task manager by right clicking on the toolbar. Tried to get rid of it but it respawns on startup. |
Jeremy | TO Delete rename it IadHide5.dl_ (restart your PC) go back and delete it |
ken lambert askken | I found this little nasty in my Start\my computer\c: \documents and settings\ compaq owner\ ( hidden file) local setting\temp. After chasing this blankity blank blank, I found it as it was riding on the back of the compaqs connections, try this it worked for me ... click start -all programs\ pc help & tools\ compaq connections\ disable compaq connections... then locate the iadhide5.dll you should be able to delete, make sure you empty your recycle bin... then reboot your pc, you may get one more pop up message, this sould not be there on your next reboot, hope this helps, let me know |
wickette | used by F-Secure, if you have F-Secure installed and run the all system scan, look at there report it is a backweb file they use. http://www.f-secure.co.uk/f-secure/pressroom/news_archives/index1999.html |
Yogesh - | This is a auto web update file. You can rename the file and then move to desktop and then delete. |
Gary Neff | I removed the entire backweb section of the registery and on reeboot was notified that the logitech desktop manager would not run. I uninstalled that software and no more dll |
ddt | I somehow inheritted this pest from a downloaded ad-on. It sucks. Has caused a few apps to work incorrectly. Just purchased system last month. How to remove the darn thing? |
Wintersturm | It is a Keylogger for a Internet game named World of Warcraft, you testet wow on a Private server with lacd (a anti cheat client) and this client works detecting cheats.. and download a Keylogger for WoW and other Online games (Steam) EVE Online |
jeffro19 | It's linked to Kodak Easyshare software. I agree with Karl P., it was installed without my consent and I'm not happy about it. I'm removing the Kodak software and I recommend everyone else do the same. The program is just a memory hog; regular Windows folders can be used to organize your pictures. |
Brante | Logitech I-touch software updater |
Shimmy | Logitech desktop messenger, probably no harm, but It can be a security risk for me |
FeedTic | I have IadHide.dll in my temp folder as well. Mine came with my Kodak software. The Kodak software updater uses it. I can remove it, but it comes back on startup. The dll is also located in my Kodak software folder. I assume if I deleted that file it would stop coming back, but I don't mind the software updating itself. |
| You are talking about the same file name coming from at least 3 different sources.. logi, f-secure, and Kodak. Yet it resides in a temp folder variously, auto-replicates, and cannot be deleted. This file is the only thing we cannot eliminate from a system thats being identified by an IRC server's scan as a trojan. |
Dan | IadHide5.dll appeared after I installed "Kodak Eayshare" |
FaTra | BackWeb from F-Secure |
EdinSoFl | Causes Internet explorer to crash and drags down computer speed to a crawl. Hard to totally eliminate. Seems to some how resurect itself. |
LdG | Removed it from two PCs that keeps getting malware (system\iexplore.exe, system\svchost.exe, system\svchost32.exe) thats flagged by NOD32 as Win32/Sohanad (and by other virus scanner, c/o virustotal.com). It uses Yahoo Messenger to spread/send malware to contacts. To remove (specially if you suspect unusual/malware activities): install a good antivirus (NOD32 or Kaspersky, to remove any malware), uninstall any programs that is from-the-web/non-essential/freeware/with-lots-of-third-party-software/etc, reboot in safe-mode, delete iadhide5.dll, reboot to normal. |
JSG | It's in my c:\program files\Kodak\kodak software updater |
boomper | well, it's some file, which really logs ur keybord and mouse things....so, it could be good! but I really don't like such a thing! get it off ur pc! |
K | came with logitech mouse, slows my system down, getting rid of it, why does logitech need to know so much about my machine - it uploads far more than it downloads |
Jim | It installed itself with Kodak Easyshare. The only real "pain" I found was, you cannot empty out the entire temp contents. This IadHide5 (and others associated with it) WILL NOT delete. |
Renato | Antivir meldete ständig Virus od. spyware gefunden. Konnte keine Anwendung akzeptabel starten. Windowsupdate wurde gestoppt und konnte nicht installiert werden. Und da soll mir einer sagen, dass Windows diese dll braucht :-( Nach einer überprüfung durch Antivir wurde diese DLL beim neustart automatisch gelöscht. |
Benny | automatischer updater für f-secure |
JoaoDill | verifiquei que a dll (IadHide5.dll), apareceu depois da instalação do F-Secure antivirus, acredito que não seja nada de mais, mesmo faltando o certificado, só se fosse vulnerabilidade no antivirus. |
Molle | Wird von der Logitech Harmony Software benötigt |
Edward | potentially dangerous backweb\adhide .dll hidden "could manipulate other programs" |
Jamie | Can't delete it. Keeps duplicating itself and denies me access to open it. Shuts down firewall and really annoying. Anything that says I, the user, can't open it, is bad. I think the program was intended by larger companies to use as an update agent but someone has figured out how to use and manipulate it. |
fummeltunte | I suppose it is a program for autoupdate, in my case my HP-printer |
gdarrow | it keeps showing up and wont let ahp program access the internet |
Vic HH | use xp search function to find BackWeb... This will show you who installed it and then you can uninstall that program. |
Kristopher | This file uses resources like crazy, Also it is definetely from Kodak Software. I just installed the Kodak Easyshare Software last night and right after I had problems with this file. I'd recommend getting rid of it if you really don't need it, or at least disabling it. It's more of a pain than anything else |
|
|