MS_WebcheckMonitor & rcimlby.exe

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by abri, Sep 28, 2005.

  1. abri

    abri MajorGeek

    Today I found MS_WebcheckMonitor in the taskbar and in the Startmenu, I found that rcimlby.exe was installed several months ago. Can anybody tell me what these are and if I can remove them? The rcimlby.exe is a remote access program and I can't find any legitimate information on the MS_WebcheckMonitor. I don't know if they are spyware or needed software.
    Thanks!!!
    abri
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did someone setup this PC to have remote access administration capability? rcimlby.exe is a valid Microsoft application. It is called Microsoft Remote Assistance. MS_WebcheckMonitor may be part of this.
     
  3. abri

    abri MajorGeek

    Hi Chas!
    The first thing I always do when I set up my computer is to turn off the remote access, which is off now. That's why I'm wondering how it could be activated? I've run through all the steps of the spyware removal tools listed at this site, done all the online scans, updates, etc., so I'm wondering what could be causing this to be on and how to turn it off.
    Thanks!
    abri
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    The below two statements would seem to contradict each other.
    Did you actually check to make sure it is off?

    If you think you are having malware problems and if you have run ALL steps of the READ ME FIRST sticky, continue with the below.


    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

    Let's also get an installed programs list from HijackThis.
    Run HijackThis, click Open the Misc Tools section
    Click "Open Uninstall Manager"
    Click "Save List" (generates uninstall_list.txt)
    Click Save, to save it to a file where you can find it.
    Upload this file as an attachment too.
     
    Last edited: Sep 29, 2005
  5. abri

    abri MajorGeek

    Thanks Chaslang,
    The way I checked to make sure it was off was to go to start/system control/settings/remote. The box to activate remote access was not checked to be active, so I consider it to be off. I will run through the spyware/malware programs again and if there's anything I'll get back to you. Thanks so much.
    abri
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome! If you still have problems just complete what I gave you in my previous message.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds