Welcome Guest (Log In | Create Account)
New Member? Join for free.
   This is an undesirable program.

This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.

If the description states that it is a piece of malware, you should immediately run an antivirus and antispyware program. If that does not help, feel free to ask us for assistance in the forums.

This file is a rootkit and may be hiding other files, processes, and registry entries on your computer.

It is strongly advised if you find this file on your computer that you create a virus removal assistance topic.. Instructions on how to do this can be found here.

Name: Routing and Remote Access
Filename: muniu.exe
Command: C:\Windows\Downloaded Program Files\muniu.exe
Description:
Added by the W32.Niumu worm. W32.Niumu is a worm that spreads through network shares and infects .exe and .scr files. The threat also steals passwords typed into Internet Explorer.

This service is actually a legitimate Microsoft service that was altered by the infection to start the muniu.exe infection. Therefore, instead of deleting the service you should instead changes it's ImagePath value back to %SystemRoot%\System32\svchost.exe -k netsvcs.
File Location: C:\Windows\Downloaded Program Files\muniu.exe
Startup Type: This startup entry is installed as a Windows service.
Service Name: RemoteAccess
Service Display Name: Routing and Remote Access
HijackThis Category: O23 Entry
Removal Instructions: How to remove a Trojan, Virus, Worm, or other Malware

  This entry has been requested 1553 times.

Disclaimer
It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Advertise   |   About Us   |   User Agreement   |   Privacy Policy   |   Contact Us   |   Sitemap   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides   |   Downloads


Portions of this database © Paul Collins
© 2003-2012 All Rights Reserved Bleeping Computer LLC.