PDA

View Full Version : rcmd.exe/rcmdsvc.exe trojan question


dakta24
May 22nd, 2002, 11:35 PM
waiting for my temporary password/email confirmation as dakata24..

but just got tds-3 registered installed. figure i do a full system scan and the alarm went off on rcmd.exe and rcmdsvc.exe saying that rcmd.exe has the RAT.RCmd(Client) [Trojan Client/EditServer found] and the rcmdsvc.exe as RAT.Rcmd [Positive Identification under Alarm].

pretty sure this is just a false alarm. the files in question were included on my Microsoft Windows 2000 Professional Resource Kit that included a CD with utilities that include the mentioned files..

what exactly should i do? submit the files? or is there really a risk with having these utilities on my computer? thanks :)

Gavin - DiamondCS
May 23rd, 2002, 12:41 AM
Hi dakta,

Please submit these files, zip and email to submit@diamondcs.com.au

There is a trojan signature on similar files which is causing this alarm, we will have to change the detection.