Results 1 to 4 of 4

Thread: Backdoor.Win32.Rbot.gen

  1. #1
    Titanium Member
    Join Date
    Jul 2002
    Location
    blk helo target, WA
    Posts
    3,536

    Backdoor.Win32.Rbot.gen

    File C:\WINDOWS\system32\Msconfig.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: No Action
    escan (kav engine) found this - verified by running KAV 4.5 as well - So I sent to "infected" folder but when I use msconfig at run, it still works. Is there something I should know?

    edit*/******* **edit - I see the correct location for the file is; C:\WINDOWS\PCHEALTH\HELPCTR\Binaries - and is 154kb
    Last edited by lynchknot; October 9th, 2004 at 04:22 AM.

  2. #2
    Precision Processor Super Moderator egghead's Avatar
    Join Date
    May 2002
    Location
    In Your Monitor
    Posts
    3,546
    hmm..?

    mine is located at
    C:\WINDOWS\system32\dllcache\Msconfig.exe
    C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe

    is your system still infected?

    you might need to be worried backdoor pc
    ------------------------------------------------------------



  3. #3
    Titanium Member
    Join Date
    Jul 2002
    Location
    blk helo target, WA
    Posts
    3,536
    Well, yes it's in a couple few places but does not belong in
    C:\WINDOWS\system32\Msconfig.exe
    - and is incorrect size and I have never clicked the executable - only the right one (the path was never changed to that one. I'm wondering how it arrived. It shows being modified around August
    Last edited by lynchknot; October 9th, 2004 at 05:13 AM.

  4. #4
    Old and Cranky Super Moderator rik's Avatar
    Join Date
    Aug 2003
    Location
    Watching Your every move...
    Posts
    4,688
    If I'm not mistaken the first place it was found according to the link is in a System Restore checkpoint?...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •