This is a computer worm that infects a PC via its self-replicating nature. This worm is usually passed through removable devices such as usb thumb drives or external hard drives. It is also possible for this worm to spread through popular messaging services such as Yahoo Messenger, ICQ, AIM, and Skype.  the worm is able to copy itself  and continue to spread to other PCs. to begin removal of the worm all the W32/Rimecud processes need to be stopped in order for a proper removal, to do this you would use ctrl+alt+del command on your keyboard and end the process via task manager. After the process is stopped the following windows files need to be deleted:

[%SYSTEM%]\winjpg.jpg
[%APPDATA%]\YGMDRM.EXE
[%APPDATA%]\nlwyet.exe
[%APPDATA%]\RMHZB.EXE
[%PROFILE_TEMP%]\111.exe

Registry Entries that should be removed

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, regdiit=[%SYSTEM%]\win.exe

Please Contact Us Here for more information on Win32/Rimecud.B

Need help removing Win32/Rimecud.B or other PC problems? E-Mail Us Here