Jump to content
Sign in to follow this  
SamaraMorgan

2 programs asking for internet access

Recommended Posts

A couple of days ago, two programs I've never seen started asking for internet access, something called rsmg.exe and Ipmsv.exe and they're both in Windows/system32 folder. I clicked deny b/c I have no idea what they are, and when I looked on google I found 2 chinese sites for one and nothing for the other one.

should i be worried? can someone tell me what they are (and if I should grant them access)?

Share this post


Link to post
Share on other sites

No! don't allow internet access. Boot into safe mode:

 

Restart the computer

Immediately begin tapping the <F8> key.

Use the arrow keys to highlight Safe Mode and press the <Enter> key.

 

Show Hidden Files and Folders

Click Start.

Open My Computer.

Select the Tools menu and click Folder Options.

Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.

Uncheck: Hide file extensions for known file types

Uncheck the Hide protected operating system files (recommended) option.

Click Yes to confirm.

Click OK.

 

Search for and delete:

 

C:\WINDOWS\system32\rsmg.exe

C:\WINDOWS\system32\Ipmsv.exe

 

Rehide 'hidden files an folders'.

 

Reboot normally,

 

Please go

HERE

to run Panda's ActiveScan

Once you are on the Panda site click the Scan your PC button

 

A new window will open...click the Check Now button

Enter your Country

Enter your State/Province

Enter your e-mail address and click send

Select either Home User or Company

 

Click the big Scan Now button

 

*If it wants to install an ActiveX component allow it

*It will start downloading the files it requires for the scan (Note: It may

take a couple of minutes)

 

When download is complete, click on My Computer to start the scan

 

*Leave the autoclean checked

 

When the scan completes, if anything malicious is detected, click the See

Report button, then Save Report and save it to a convenient

location (activescan.txt to desktop). Post the contents of the

ActiveScan report

 

I'm going to move your topic to our "viruses, forum. please follow it there

Share this post


Link to post
Share on other sites

thanks for your help. I only deleted rsmg.exe, I couldn't find ipmsv.exe, but it still keeps asking to access the internet.

I also went to the site but when I try to scan I get an error. I already restarted like it said, but it still doesn't work. :(

(I tried it again, and when it tries to update before scanning, it seems to get stuck) :(

Edited by SamaraMorgan

Share this post


Link to post
Share on other sites

Okay, please follow these instructions and we'll get rid of the malware you have:

 

Please download HijackThis! from here:

http://radiosplace.com/

 

Put it in a permanent folder (it makes backups) by doing this:

Click My Computer, then C:\

In the menu bar, File->New->Folder.

That will create a folder named New Folder, which you can rename to "HJT" or

"HijackThis". Now you have C:\HJT\ folder. Put your HijackThis.exe there,

and double click to run it.

 

Click on "Do a system scan and save logfile". The logfile will be saved to

notepad.

 

Start a new topic in our HJT forms

http://forums.pcpitstop.com/index.php?showforum=25

 

Copy and paste the HJT log from notepad in that new topic

 

Please be patient as we have a lot of people with malware infections

and all of our HJT Trusted Advisors work on many

forums :adios:

 

DO NOT post your HJT log in this

thread

Share this post


Link to post
Share on other sites

Is the one program ipmsv.exe or is it ipmsg.exe

Edited by bjytech

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×
×
  • Create New...