Back Door Trojan

Discussion in 'Windows Desktop Systems' started by BMWCHUBB, Apr 28, 2003.

  1. BMWCHUBB

    BMWCHUBB Guest

    Any one know how to remove the rb32.exe back door trojan...
    My pc is infected by this scums bad written pg..
    I have all nortons stuff on the pc and it dont detect any virus!!
    I run adware pro and that deleted 3 registry entries...
    I manually deleted from the registry other known keys..

    Any freebies that will nuke it?
     
  2. Enyo

    Enyo Moderator

    Messages:
    1,338
    This will nuke it:

    http://www.ntfs.org/forum/showthread.php?s=&threadid=32203

    It will also give you the trojan name (not the exe name that you posted) when it finds it. Post the name and ill give you more info.

    Download GAV, update it using the built in updater and run a full system scan :)
     
  3. BMWCHUBB

    BMWCHUBB Guest

    Thanks for the prompt reply just downloading the pg and i will get back to you with the results..;)

    huHBgQeh
    YOUR THE TROJAN MAN THEN HEHEHE..
    :D :D
     
  4. damnyank

    damnyank I WILL NOT FORGET 911

    Messages:
    2,359
    Location:
    Petal, Mississippi
  5. BMWCHUBB

    BMWCHUBB Guest

    Well its took a hour to scan my pc and nothing as actually happened not unless its deleted the trjojan...But i will check!



    Interface Version: 3.5.0 Engine Version: 3.0.0 Pattern Version: 1.3.6

    --------------------------------------------------------------------------------

    Scan Report (28/04/2001 at 22:19:36 )

    --------------------------------------------------------------------------------



    Still not found the solution??
    :confused: :confused: :confused: :confused:
     
  6. BMWCHUBB

    BMWCHUBB Guest

    ACTUALLY YOU REINFECTED MY PC AGAIN!!!That link sends you to porn sites etc...I do not use this stuff so why send me to this link?:mad:
     
  7. Yoz

    Yoz Guest

  8. damnyank

    damnyank I WILL NOT FORGET 911

    Messages:
    2,359
    Location:
    Petal, Mississippi
    Quote from the link I referenced:

    Removal
    Use the Control Panel's Add/Remove Programs entry for 'RapidBlaster' (v1 variant) or 'rb32 lptt01' (lp variant).

    To remove the AInst variant installer, go to the Downloaded Program Files folder inside the Windows folder, right-click the 'AInst' item and 'Remove' it.

    After restarting, you can clear up by deleting the 'RapidBlaster' folder inside Program Files, and deleting the key 'HKEY_LOCAL_MACHINE\Software\RapidBlaster' from the registry (Start->Run->regedit).


    This is the removal procedure from the link I gave you - I see no link in here where it takes you to a porn site - may I suggest you read the info you are referred to - rather than just clicking on link at the bottom of the article????
     
  9. BMWCHUBB

    BMWCHUBB Guest

    Well still have this termite rb32.exe in c:\windows program files..
    Done all what youve said and still after reboot its there..
    I Have removed all entries in the registry...Add and remove pgs ..all trace gone..
    It will not let me delete from the folder in c:\windows program files
     
  10. Enyo

    Enyo Moderator

    Messages:
    1,338
    So were not dealing with a trojan then just some Spyware :)

    Dont use un-installers provided with SpyWare! Often they will remove one thing and install another.

    SpyBot S&D will remove this for you. Something like Spyware blaster will prevent the control from ever running and installing the software again.

    www.spywareinfo.com support forums will have details on this.