Results 1 to 4 of 4

Thread: Need some information on runouce.exe

  1. #1
    Join Date
    Jan 2009
    Posts
    46

    Need some information on runouce.exe

    Hi,
    I need some information on runouce.exe application file. Is this file related to my operating system. I am using Windows XP. I have seen this service couple of time running in the background of my computer. Normally this file has appeared after I downloaded a toolbar from internet. Now I had removed the same but still the application is running in the process list of Task Manager and eating up some system resource.

  2. #2
    Join Date
    May 2008
    Posts
    3,516

    Re: Need some information on runouce.exe

    The virus enters your system in the form of readme.eml and creates references to this in the html file it finds. It also extracts a file called RunOuce.exe in the C: \ Windows \ System. Then adds the value "RunOnce" = C: \ Windows \ System \ RunOuce.exe to the HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Run to ensure execution of the virus in each system startup. It copies in base64 encoded format to all shares it finds on the network with the name (computer name). Eml. This file has ChiniseHacker chain. Run a full system scan under safe mode.

  3. #3
    Join Date
    Apr 2008
    Posts
    3,339

    Re: Need some information on runouce.exe

    Follow the below instruction to remove the virus from your computer. Delete the value Runonce = C:\Windows\System\RunOuce.exe of the HKLM\ Software\Microsoft\Windows\CurrentVersion\Run. Reset the computer, delete the file RunOuce.exe the C:Windows\System. Scan your computer with NOD32 antivirus updated to today's date and delete all infected files.

  4. #4
    Join Date
    Jan 2006
    Posts
    4,221

    Re: Need some information on runouce.exe

    This application is most likely downloaded and installed through vulnerabilities in system security or by another application that is considered to be adware or spyware. The alias names of the same virus is W32/Chir.A-mm, I-Worm.Runouce, W32.Chir @ mm W32/Chir.a @ MM, W32/Runouce, Win32/ChiHack.worm.10748, etc. Delete this any of files you found on your system.

Similar Threads

  1. Want information about MBA in Information Technology
    By Shantanu12 in forum Education Career and Job Discussions
    Replies: 12
    Last Post: 04-05-2012, 12:30 PM
  2. Replies: 5
    Last Post: 08-04-2011, 10:36 AM
  3. How to remove Email-Worm.Win32.Runouce.b
    By need2learn in forum AntiVirus Software
    Replies: 1
    Last Post: 13-10-2010, 03:47 AM
  4. System Information - "Can't Collect Information"
    By microsvc in forum Vista Help
    Replies: 9
    Last Post: 13-05-2010, 03:07 PM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,714,026,701.81942 seconds with 17 queries