Anyone have rcitclog.exe on there system ?

[BRUN]

my Internet Security keeps flagging up rcitclog.exe in Windows\System32 but every time it deletes it, a few hours later its back

anyone any idea what it is

 

[rmccardal]

What does it flag it up as ?

No results googling that filename so it could be a random generated effort.

 

[BRUN]

calls it a hidden rootkit IIRC

 

[MattyH16v]

If its a Windows System 32 file their generally quite important in the running of the system, so may be hard to delete.

 

[BRUN]

pretty sure it shouldnt be there

it also keeps flagging up mqazcsvc.exe in Program Files\Sonnikon

the folder doesnt even exist !

 

[rmccardal]

Make sure you have latest anti-virus defs, make sure system restore is disables (under my computer properties) and boot into safe mode (F8 few seconds after bios screen) then run a full system scan. It should remove whatever virus/junk is messing you about.

 

[Bad Man]

calls it a hidden rootkit IIRC

http://www.sysinternals.com/Utilities/RootkitRevealer.html

Have a read of the information on this site, then download rootkit revealer from the link at the bottom of the page...

IIRC rootkit revealer will only detect if there is a rootkit on your system, it won't remove it.

 

[The Hoff]

Are you sure the name of the process is typed correctly? I can't find any information WSE on this process/exe.

 

[BRUN]

yup thats the names

thanks Bad Man ive got it on the case now and its found a few things already

 

[BRUN]

sorted now......

got that rootkit revealer to tell me what was there, then booted in safe mode with DOS prompt and deleted them



shame Kaspersky can detect them but not remove em properly........pretty useless really, so its coming off for something that can

 

[Daz]

Haha, rootkit...

Windows is administratorkit isn't it?

*RUNS*