rncmd.exe - Dangerous
rncmd.exe
Manual removal instructions:
Antivirus Report of rncmd.exe:
rncmd.exe
Rncmd.exe is a mass mailing worm W32.Mediakill.A@mm.
Rncmd.exe tries to terminate antiviral programs installed on a user computer.
Rncmd.exe attempts to delete media files.
Related files:
%Windir%\SYMRND.LOG
%Windir%\c7052371.log
%Windir%\ORIN7.LOG
%Windir%\1004\syslw.exe
%Windir%\Drivers\winupd.exe
%Windir%\\Help\msop.exe
%Windir%\Cursors\rncmd.exe
%Windir%\ICS\mscs.exe
%Windir%\1004\lsrsa.exe
%Windir%\Drivers\msalph.exe
%Windir%\\Help\msrnd.exe
%Windir%\Cursors\symlg.exe
Adds the value:
"C7" = "[worm file name]"
"load" = "[worm file name]"
"Shell" = "Explorer.exe [worm file name]"
"(Default)" = "[worm file name] "%1" %*"
to the Windows startup registry keys.
Removal:
Kill rncmd.exe process and remove rncmd.exe from Windows startup.
| rncmd.exe | Malware |
| rncmd.exe | Dangerous |
| rncmd.exe | High Risk |
Rncmd.exe tries to terminate antiviral programs installed on a user computer.
Rncmd.exe attempts to delete media files.
Related files:
%Windir%\SYMRND.LOG
%Windir%\c7052371.log
%Windir%\ORIN7.LOG
%Windir%\1004\syslw.exe
%Windir%\Drivers\winupd.exe
%Windir%\\Help\msop.exe
%Windir%\Cursors\rncmd.exe
%Windir%\ICS\mscs.exe
%Windir%\1004\lsrsa.exe
%Windir%\Drivers\msalph.exe
%Windir%\\Help\msrnd.exe
%Windir%\Cursors\symlg.exe
Adds the value:
"C7" = "[worm file name]"
"load" = "[worm file name]"
"Shell" = "Explorer.exe [worm file name]"
"(Default)" = "[worm file name] "%1" %*"
to the Windows startup registry keys.
Removal:
Kill rncmd.exe process and remove rncmd.exe from Windows startup.
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.