What is RMC_AR32.EXE

Norton Security | Norton Internet Security
1

Hello Community

Might anyone know what this Community Watch Submission is about ?

RMC 2.PNGRMC.PNG

all other entries are Norton Community Watch Feedback. Any idea about RMC ?

2

The file is related to the "Application RCDC Auto-Restart" service in Windows, and it is submitted to Symantec as it have some suspicious behaviour similar to heuristic virus. You may be notified if the Norton Community Watch finds it as a virus. This is just a normal process, and you are safe to go.


Yogesh

3

huge def files

Hello yogesh_mohan

Thnx for your interest and reassuring info.

I searched RMC_AR32.EXE before posting & now Application RCDC Auto-Restart in Windows.   no info

I searched my Services / Processes. no info

the AR = AutoRestart ?

RMC = ?

RCDC = ?

The Statistical Submission...RMC_AR32.EXE occurred same day / time as huge def files and is also odd, as all other entries are Norton Community Watch Submission.  Any idea about RMC / related to the XXMB's LU ?

Might you point me to more info

Thnx

4

I think, it's a part of recovery partition provided by the computer manufacturer, mostly found with HP laptops/notebooks. Do you have any such recovery partition or recovery manager provided by your computer manufacturer?


Yogesh

5

Hi yogesh

Yes, my box has the HP Recovery Manager / Recovery Partition.  As is common with HP/Compaq.

As RMC is an exe...I am naturally curious what prompted the exe and why / how Norton would be at play. 

Thnx for your continued dialog

Cheers

6

Hello bjm_

 

I would suggest submitting that file to ThreatExpert and see what they have to say about it.

 




Another alternative which is fast you can use Threat Expert:

http://www.threatexpert.com/submit.aspx

Please let us know what they say about it. Thanks.

7

That file may be responsible for an automatic restart of the recovery partition when a failure happens in your computer, and the file's characteristics or attributes may be similar to heuristic virus. When any such suspicious file gets detected by Norton, it submits the file automatically to the Community Watch for further analysis and verification. But, it does not mean that the file is actually a threat. Give some more time for Symantec to analyze the file and get back to you via Norton Community Watch.


Yogesh

8

Hi yogesh_mohan

As you predicted....

Give some more time for Symantec to analyze the file and get back to you via Norton Community Watch.

RMC 3.PNG


Recovery Manager installed three years ago... Maybe RCDC = Recovery CD Creator ?

Norton Scan & File Insight are happy with RMC

RMC 4.PNG

So, IDK  :smileysurprised:

Cheers

9

Hello floplot

as per your suggestion...

Threat Expert Report 

not much to say about it ?  :smileysad:

also submitted to Symantec...no info yet ?

head scratch ... :smileywink:

Cheers

10

Hello bjm_

 

I figured that ThreatExpert would say if the file was good or bad and not just that it is on your system. That much you knew when you sent them the file. However, did your computer come from France? It did give a country of origin.

11

Hello floplot

[...] possible country of origin:France

HP Recovery Manager is branded SoftThinks

SoftThinks

SoftThinks Headquarters Address

15 rue Hergé

Villeneuve d'Ascq, CA 59650
France

mon amie

au revoir

12

Hello bjm_

 

That settles that France bit that was given. Thanks for the explanation.

13

Ah Oui

now, if we could only figure out why Norton is so interested in my Recovery Manager 

:smileyhappy:

I'll have to discount my notion that RMC activity is related to huge def files ...just a coincidence both occurred 7/25

C'est la vie

 

14

Hello bjm_

 

Have you used the Recovery Manager recently?

15

Hello floplot

re > Have you used the Recovery Manager recently?

Nope ...

Thnx for asking