Speakeasy forum

General discussion

Removal of "MC.EXE"

by Rowley / October 31, 2004 3:54 AM PST

I think I've been hijacked:

In Task Manager,my performance jumps around from 60% to 90% and it looks like a process called "MC.EXE" is the issue.

I ran SpyBot and it came up as having been added to my start menu. I try to remove it but it keeps coming back. I checked my registry and it has:

HKLM\software/microsoft/windows/runonce

there is a file:
c:\windows\AppPatch\mc.exe rerun

I've tried to delete this file but it keeps returing!

I'm on Windows XP and have run:

* Ad-Aware
* SpyBot

with no effect.

Any suggestions?

Thanks,

Discussion is locked
You are posting a reply to: Removal of "MC.EXE"
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Removal of "MC.EXE"
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Removal tool and info here
by TONI H / October 31, 2004 4:03 AM PST
In reply to: Removal of "MC.EXE"
Collapse -
Sorry Toni.......
by Glenda / October 31, 2004 4:09 AM PST

I see our posts were made at the same time:) If Rowley comes back to check I hope he follows your advice:)
Glenda

Collapse -
(NT) (NT) NP.......
by TONI H / October 31, 2004 4:29 AM PST
In reply to: Sorry Toni.......
Collapse -
Re: Removal tool and info here
by Rowley / October 31, 2004 9:54 AM PST

Toni;

Sorry if I appear a little slow, but the google web address you provided gives me a list of possible sites. Are you directing me to the paretologic site for xoftspy?

Thanks for clarifying.

Rowley

Collapse -
The google site
by TONI H / October 31, 2004 10:16 AM PST

has a list of sites you can go to for information about it, but on the right hand side at the top is a direct link to a removal tool. I thought you might want to read a little about the various ways mc.exe can get into your system before you got the removal tool, is all.

TONI

Collapse -
Hello:) You will get a better answer here>>>>
by Glenda / October 31, 2004 4:03 AM PST
In reply to: Removal of "MC.EXE"
Collapse -
Re: Removal of "MC.EXE"
by Mosonnow / October 31, 2004 4:36 AM PST
In reply to: Removal of "MC.EXE"

Dear Rowley

Are you running Sygate Firewall perchance?

Regards
Mo

Collapse -
Re: Removal of
by Mosonnow / October 31, 2004 6:48 AM PST

Dear Rowley

Also, MC.exe is a compiler which has been known to cause problems with .RC and .bin files. If you are concerned that you have been hijacked (unlikely by MC.exe in itself), you can run HijackThis from this site, and post any result you do not understand for automatic analysis, as it shows on the site.

http://www.hijackthis.de/index.php?langselect=english

Regards
Mo

Collapse -
Thanks for the info
by Chorus-Line A1-QMS / October 31, 2004 8:59 AM PST
In reply to: Re: Removal of

Welcome Back Dear Mo,

Now I could use a little bit of reading with the info you provided...;)

Tadahhhh Happy Halloween too eh...

Regards,

CL

Collapse -
More reading....
by Mosonnow / October 31, 2004 9:44 AM PST
In reply to: Thanks for the info

Dear CL

Here yer go:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tools/tools/message_compiler.asp

We have an expression in the UK "Here is your starter for 10" (taken from the quiz show University Challenge, meaning that if you get the first answer correct, you can go on to answer the next ten questions). So here's the starter (the site), but if it's bedtime reading, lots of cups of cocoa should be lined up as well. But, heck, this is just a human-readable message LOL.

Regards
Mo

Collapse -
More reading....Ok dokie Mo...
by Chorus-Line A1-QMS / October 31, 2004 10:47 AM PST
In reply to: More reading....

BTW, I'll pass with the chocolate drink --tummy voting no hahahhaha.

But here's for you...You won't have to read.Enjoy but cautious now

Goodnight Mo.


CL

Collapse -
Welcome back!
by Bill Osler / October 31, 2004 8:26 AM PST

I hope your visits are a bit better received in the future.

Collapse -
Dear Bill
by Mosonnow / October 31, 2004 8:45 AM PST
In reply to: Welcome back!

I've been keeping up as best I can, time permitting. Thank you - perhaps I'll come back fully in a little while.

I hoped I might be able to contribute to this help thread. Do you know anything else about MC.exe? I wonder if Rowley might be better posting in Computer Help.

My best regards
Mo

Collapse -
(NT) (NT) Maybe the Virus and Security forum? (Hi Mo)
by Cindi Haynes / October 31, 2004 8:54 AM PST
In reply to: Dear Bill
Collapse -
(NT) (NT) I know absolutely nothing about mc.exe
by Bill Osler / October 31, 2004 9:40 AM PST
In reply to: Dear Bill
Collapse -
(NT) (NT) WB.
by lylesg / October 31, 2004 8:56 AM PST
Collapse -
Re: Removal of "MC.EXE"
by Rowley / October 31, 2004 9:47 AM PST

No I am not.

Collapse -
Re: Removal of "MC.EXE"
by Mosonnow / October 31, 2004 8:57 PM PST
In reply to: Removal of "MC.EXE"

Dear Rowley

As Xoftspy is a commercial product that you have to pay for to achieve the objective, and also because it is OK with some but not highly regarded by others (and I include Henri Leboeuf in this), and some regard it as rogue software, you might want to try an alternative first.

See this 4-message thread about "undeletable files":

http://reviews.cnet.com/5208-6122-0.html?forumID=44&threadID=30290&messageID=346231

Regards
Mo

Popular Forums
icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

Does BMW or Volvo do it best?

Pint-size luxury and funky style

Shopping for a new car this weekend? See how the BMW X2 stacks up against the Volvo XC40 in our side-by-side comparison.