wincmd.exe - Dangerous

%sysdir%\wincmd.exe

Jeff's Story:

My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.

I sought a solution on the Internet and discovered your product and tried out the trial.

You quickly found the rootkit and SAVED my PC!

I haven't had any problems since, and I'm extremely grateful.

Manual removal instructions:

%sysdir%\wincmd.exe
WINCMD.EXE is Trojan/Backdoor KDR_HAAN.A.
Related files:
%System%\WINCMD.EXE
%System%\SMSG.HTML
%System%\EVLOG.DAT

Kill the process %SysDir%\WINCMD.EXE and remove %SysDir%\WINCMD.EXE from Windows startup.

Remove wincmd.exe now!