mmedia.exe - Dangerous
mmedia.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
W32.Mancsyn is a worm that spreads by exploiting the Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability (Bugtraq ID 8205). It may also download potentially malicious files on to the compromised computer.
Related files:
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\mmedia.exe
C:\WINDOWS\system32\rasman32.exe
C:\Documents and Settings\Default User\Local Settings\Temp\filex.exe
Kill the process mmedia.exe and remove mmedia.exe from Windows startup.