Remove REC_RU_238 - UNINSTALL.EXE malware
REC_RU_238 - UNINSTALL.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of REC_RU_238 - UNINSTALL.EXE:
rec_ru_238 - uninstall.exe
Full path on a computer: %PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.EXE
Autostart registry keys:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\ARP\6: 'SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL REC_RU_238_IS1 "%PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.EXE"'
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\REC_RU_238_IS1\UNINSTALLSTRING: ""%PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.EXE""
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\REC_RU_238_IS1\QUIETUNINSTALLSTRING: ""%PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.EXE" /SILENT"
Related Files:
%PROGRAM FILES%\MAIL.RU\UPDATE SERVICE\MRUPDSRV.EXE
%PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.DAT
%PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.EXE
%PROGRAM FILES%\OSPD_US_013010287\ONESOFTPERDAY_WIDGET.EXE
%PROGRAM FILES%\OSPD_US_013010287\OSPD_US_013010287 - UNINSTALL.DAT
The file REC_RU_238 - UNINSTALL.EXE is malware related.
You must delete the file REC_RU_238 - UNINSTALL.EXE immediately!
Delete the file REC_RU_238 - UNINSTALL.EXE without delay!
Kill the process REC_RU_238 - UNINSTALL.EXE and remove REC_RU_238 - UNINSTALL.EXE from the Windows startup.
REC_RU_238 - UNINSTALL.EXE is related to: W32.Parite, REC_RU_238 - UNINSTALL.EXE.
Virustotal = 1/57
MD5 = E93275BB9B70E9D0DBEC087907AF2BF3
File Size: 719712
File information:
FileDescription: Setup/Uninstall
| REC_RU_238 - UNINSTALL.EXE | Malware |
| REC_RU_238 - UNINSTALL.EXE | Dangerous |
| REC_RU_238 - UNINSTALL.EXE | High Risk |
Autostart registry keys:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\ARP\6: 'SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL REC_RU_238_IS1 "%PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.EXE"'
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\REC_RU_238_IS1\UNINSTALLSTRING: ""%PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.EXE""
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\REC_RU_238_IS1\QUIETUNINSTALLSTRING: ""%PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.EXE" /SILENT"
Related Files:
%PROGRAM FILES%\MAIL.RU\UPDATE SERVICE\MRUPDSRV.EXE
%PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.DAT
%PROGRAM FILES%\ONESOFTPERDAY\REC_RU_238 - UNINSTALL.EXE
%PROGRAM FILES%\OSPD_US_013010287\ONESOFTPERDAY_WIDGET.EXE
%PROGRAM FILES%\OSPD_US_013010287\OSPD_US_013010287 - UNINSTALL.DAT
The file REC_RU_238 - UNINSTALL.EXE is malware related.
You must delete the file REC_RU_238 - UNINSTALL.EXE immediately!
Delete the file REC_RU_238 - UNINSTALL.EXE without delay!
Kill the process REC_RU_238 - UNINSTALL.EXE and remove REC_RU_238 - UNINSTALL.EXE from the Windows startup.
REC_RU_238 - UNINSTALL.EXE is related to: W32.Parite, REC_RU_238 - UNINSTALL.EXE.
Virustotal = 1/57
MD5 = E93275BB9B70E9D0DBEC087907AF2BF3
File Size: 719712
File information:
FileDescription: Setup/Uninstall
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.