Unknown 'process' : NotifyPhoneBook

[Grunt2002]

Hi,

I am quite perplex about this : it appears that I have a process running from startup (windows 2000 sp3) which is called 'NotifyPhoneBook'.

It is the only 'process' in the list which is not displayed as an 'exe'.

I have searched the web (google, msn, msdn, symantec... several knowledge bases) for 'NotifyPhoneBook', without finding anything. This is very surprising as I always found informations about process names when I searched for.

I have a rather good protection on this machine : nav + nis (up to date), spybot search&destroy, internet connection through my isp's proxy.

What the heck can be this 'process'??? Of course, there is no file on my computer called 'NotifyPhoneBook.exe' or something like that.

Please help :-(

Grunt

 

[THoey]

Did you look at the TOOLS -> SYSTEM STARTUP tab of Spybot to see where this is being called from? Terry
**************************
* General Disclaimor - Please read *
**************************
Please make sure your post is in the CORRECT forum, has a descriptive title, gives as much detail to the problem as possible, and has examples of expected results. This will enable me and others to help you faster...

 

[Grunt2002]

Thanks for suggesting. There is no source listed there :-(
I have a print screen if you want.

Is there another way to detect what it is ?

 

[SASandDW]

Hello,

I have noticed that one for a couple of days. It runs with my personal Windows account (no system account). It doesn't seem to impact my machine.
I could find the .exe file in c:\windows\system32 (XP Prof.). In the same directory, there is rasphone.exe from Microsoft. ?!?
Startman and regcleaner are clueless about how it gets started. In the Microsoft Management Console, I can't find any evidence neither (most services start with some specific system account).
BTW: I have recently installed a new soft: PhoneDeck. What about you ?

Don't hesitate to contact me at hotmail as soldat_inconnu_80.
Cheers
Olivier

 

[Grunt2002]

Hi,

soldat_inconnu_80 you must a french speaking one.
Donc si tu veux ou bien tu es français, ou suisse ou canadien... ou belge.
I live in Belgium and use a DSL connection from the historic operator Belgacom. The location of the file seems to be the same as you (win 2000). The rasphone.exe is indicated as running the process, which is located somewhere in a dll (user account/local settings/.../pbk).
I think rasphone is the dialer for all the system's dial-up connections (???). As 'notifyphonebook' seems to remain widely unknown over the internet, I would bet it is something developed in a very confidential way, like it could be if shipped with the dsl modem drivers provided by my ISP. Furthermore, all Belgian people are aware that their monopolistic physical dsl line provider is so little professional it is capable of installing something on your system without letting you know it. Of course their support hotline is only capable of asking you whether you plugged the cable or not. I think they do not know what a technician is.

Any reactions on this ?

 

[SASandDW]

Hello,

I'll proceed in English as our talk might ever be helpful for non French speaking persons...

However, I happen to be belgian and french speaking. I use a Belgacom ADSL connection, my modem comes from Asus provided in the Belgacom ADSL Starter pack.

I couldn't find anything about NotifyPhoneBook on skynet.be. Neither could I find the file on the CD with the modem drivers.

Yet, you probably found the origin.
Now, is it useful / required, how does it get started ... ? God knows.

If you ever find more info., please let me know. Thank you for the excellent hint so far.
Cheers

Cordialement
Olivier

 

[Grunt2002]

Hi,

Just to mention, we have the same modem (I also bought the 29 euro discount asus), thus the very same connection. I think we have found the origin. Belgacon sucks.

Cheers,

Grunt

 

[flopasques]

I've this Asus Modem with Belgacom Skynet Adsl too and have NotifyPhoneBook.exe process activated. I've Win Xp Pro. I've too RegCleaner and nothing it is not any trace of NotifyPhoneBook in StartupList ! We've all the same problem.

 

[virginblue]

hello.. have noticed this same process under windows xp sp1 and was looking around for some info when i found this site and this thread.

i happen to think that it was part of the modem drivers.. if you disable the modem software it disappears off the running process list. it appears for me under msconfig start up list as rundll32 amecsa or something like that.

my modem is zyxel usb modem

 

[wgcs]

This may be a hint... the RasPhonebookDlg function in, presumably, rasphone.dll, is described by MSDN as:

The RasPhonebookDlg function displays the main Dial-Up Networking dialog box. From this modal dialog box, the user can dial, edit, or delete a selected phone-book entry, create a new phone-book entry, or specify user preferences. The RasPhonebookDlg function returns when the dialog box closes.

BOOL RasPhonebookDlg(
  LPTSTR lpszPhonebook,  // pointer to the full path and 
                         //  file name of the phone-book file
  LPTSTR lpszEntry,      // pointer to the name of the 
                         //  phone-book entry to highlight
  LPRASPBDLG lpInfo      // pointer to a structure that 
                         //  contains additional parameters
);

What relationship this has to a continuously running Process, I'm not sure.

 

[JohnD76]

Hello,

Just searched google for notifyphonebook and found your thread.

From what I have read, it is defo the Zyxel modem drivers, not a virus, unless the drivers shipped with a wee gribly lurking on the media.

I am running Nod32, TDS and ZAP Pro and it hasn't affected anything. Seems "harmless", though bit of a sinister name.

Hope this helps,

John.