How to remove nircmdc.exe

nircmdc.exe

The module nircmdc.exe has been detected as Worm.Ramnit

nircmdc.exe
Remove nircmdc.exe

File Details

Product Name:

NirCmd
Company Name:

NirSoft
MD5: caa07ceeaed733f961beed43928acd45
Size: 171 KB
First Published: 2017-08-09 00:06:56 (7 years ago)
Latest Published: 2017-08-09 00:06:56 (7 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2017-08-09 00:06:56 (7 years ago)

Common Places:

%temp%\jrt\nfo

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0001b000

PE Sections:

Name Size of data MD5
UPX0 0 00000000000000000000000000000000
UPX1 40448 21ca12510c413ac92252f238d9acd7f4
.rsrc 2048 5bd919f6e1ef18ca6518e5a9d74ca182
.text 131584 9787a0291045c8b6a6f5d7dffb840faa

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for nircmdc.exe
copyright for information about nircmdc.exe