removing Backdoor.Rsbot

[phishhead]

I.just got this little booger and norton would not del since it runs in your services so I thought I would post how to remove it. knew I had it because the last couple of days my firewall has been going nuts and couldn't figure it out and Norton didn't detect it until I did a full system scan

first go into your services and stop the msapp.exe. Then do a search for MSAPPE.EXE and WINAPP32.EXE and del them.

Next to remove from registry follow these instructions.
a. Click Start, and then click Run. (The Run dialog box appears.)
b. Type regedit

Then click OK. (The Registry Editor opens.)

c. Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

d. In the right pane, delete the value:

WinApp32 msapp.exe

e. Exit the Registry Editor.

Full details here (http://www.symantec.com/avcenter/venc/data/backdoor.rsbot.html)

[lynchknot]

I was going to search for those files but I don't see msapp.exe listed in my services. :(

[phishhead]

hey lynch I saved it on floppy if you would like a copy of it let me know.:p

[lynchknot]

lol - only if it's a big dl ftp and it's password protected. :p