SystemAcCrux keeps returning to c:\ProgramData

Question

For the time being , I added a .cmd file in my startup directory :
rmdir c:\ProgramData\SystemAcCrux /S /Q
It sort of does the job. I don't know what this does before the .cmd is run.

Answer 1

C:\ProgramData\SystemAcCrux is a component of EaseUS software (part of their system utilities/backups), and by itself, it is not malicious.

If you or the user want us to verify the specific file instance, the safest and fastest way is to upload the file/log to our free checking service — please follow these steps:

Download the latest UnHackMe from our site:
https://www.greatissoftware.com/unhackme.zip

1. Open UnHackMe.
2. Click the Help in Removal button on the main screen.
3. Choose Send Log File to Support Center.
4. Enter your e-mail, name, or nick.
5. Describe your problem.
6. Accept our Privacy Policy.
7. Click the Upload button.

If you experience any issues with the uploader, you can manually attach the file regrunlog.txt (which will be located on your desktop after running UnHackMe) and email it to support@greatis.com.

I will check your log and send you a solution as soon as possible.

Video lesson for sending the UnHackMe log:
https://greatis.com/send-unhackme-log