|
|
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Try now! |
 dcemgr.exe - Dangerous
When Backdoor.Tumag is executed, it performs the following actions: Copies itself as: %System%\dcemgr.exe %System%\dcemgr2.exe Creates the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\DCE to keep track of the infection's progress. Connects to dns2010.vicp.net or 218.242.161.151 on port 9002 to notify the author of the backdoor. Opens a backdoor on TCP port 9010 and listens for commands from the attacker. The backdoor can perform the following default actions: - Update itself - Take a screenshot - Provide system information - Create files - Execute programs Manual removal: Navigate to the key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete the value: "DCE Manager"="%System%\dcemgr.exe" Removal: dcemgr.exe is removed by RegRun.
Click on the "Get it out!" button.  We suggest you to reboot your computer to be sure that your computer is clean now. Do not hesitate to contact us: Support center
Recommended software: RegRun Security Suite - removal and protection. http://www.regrun.com RegRun Reanimator - free removal tool. greatis.com/reanimator
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: June 30 2008
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
Download RegRun Suite. 
Open an executable file to start program installation.
