What Is Mmc.exe?

Mmc.exe – An Introduction

The Mmc.exe file is associated with the MMC (Microsoft Management Console) program. This program was introduced for the first time in Windows 2000 operating systems. The file is required for opening background applications, such as Control Panel, Device Manager, and Task Manager.

MMC has its own user interface that you can access by performing the following steps:

  1. Click Start.
  2. Click Run.
  3. In the Open box, type mmc /a, and then press Enter.

Generally, MMC is accessed and used by computer professionals. The console provides information about the system and installed hardware.

Mmc.exe comes in the category of non-essential programs, which means that you can terminate the process if you suspect it is causing trouble. Terminating this process will not cause any adverse affect on your computer’s performance.

Here are the steps you need to perform to terminate the process.

  1. Press Ctrl+Alt+Del, or Ctrl+Shift+Esc, to open the Task Manager window.
  2. Click the Processes tab.
  3. Locate and select mmc.exe.
  4. Click the End Process button.

While it is safe to terminate this process if it is causing issues, you should not delete this file. The process is required to run background applications, and if you delete it you will not be able to access the Control Panel, Device Manager, or Task Manager.

By default, mmc.exe is located in the Systems folder. So, if you use Windows 7, Windows Vista, or Windows XP, the file should be present in the X:\Windows\System32 folder (Note: Here “X” denotes the drive where Windows is installed).

Windows 2000 Error

You may receive the following error when you close the Event Viewer on a Microsoft Windows 2000 computer:

Mmc.exe – Application Error Message:

The instruction at “Memory_Address” referenced memory at “Memory_Address”. The memory could not be “read”. Click on OK to terminate the program.

Microsoft provides a hotfix for this problem. You can log on to the Microsoft support website to download the hotfix for this issue.

Is there a virus with the name mmc.exe?

Yes, many malware programs are known to name their processes as mmc.exe. It is common for malware programs to use malicious processes that have the same or similar names as genuine files.

Here are the names of the Internet threats that are associated with this file:

  • TrojanDropper:Win32/Mokaksu.A [Microsoft]
  • Trojan Horse [Symantec]
  • PE_VIRUT.XP [Trend Micro]
  • Virus.Win32.Virut.q [Ikarus]
  • Mal/Generic-A [Sophos]
  • Virus.Win32.Virut.q [Kaspersky Lab]
  • Virus.Win32.Delf.ch [Kaspersky Lab]
  • W32/Mokaksu [McAfee]
  • W32.Virut.U [Symantec]
  • Win32/Virut.D [AhnLab]
  • Virus.Win32.Delf.ch [Ikarus]

File behavior associated with the mmc.exe virus

  • Registers a DLL file
  • Creates and deletes other processes
  • Infects program files
  • Has the ability to communicate with other computers via HTTP protocol
  • Accesses autoexec.bat file and can read the contents of user’s address and phone books
  • Alters Windows Security Center’s settings to prevent the display of Antivirus status alerts and Firewall status results
  • Prevents the display of warnings on Windows computers on which Automatic Windows Updates is disabled
  • Disables Safe Mode
  • Visits Websites without user’s consent or knowledge

How to get rid of the virus

The best way to get rid of this virus or other malware programs is by running a virus scan using advanced antivirus software. Make sure that your antivirus program is updated with latest definitions before you perform the scan.