Results 1 to 4 of 4

Thread: removing Backdoor.Rsbot

  1. #1
    Friendly Neighborhood Super Moderator phishhead's Avatar
    Join Date
    Apr 2002
    Location
    San Diego, Ca.
    Posts
    3,732

    removing Backdoor.Rsbot

    I.just got this little booger and norton would not del since it runs in your services so I thought I would post how to remove it. knew I had it because the last couple of days my firewall has been going nuts and couldn't figure it out and Norton didn't detect it until I did a full system scan

    first go into your services and stop the msapp.exe. Then do a search for MSAPPE.EXE and WINAPP32.EXE and del them.

    Next to remove from registry follow these instructions.
    a. Click Start, and then click Run. (The Run dialog box appears.)
    b. Type regedit

    Then click OK. (The Registry Editor opens.)

    c. Navigate to the key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    d. In the right pane, delete the value:

    WinApp32 msapp.exe

    e. Exit the Registry Editor.

    Full details here
    Last edited by phishhead; May 24th, 2003 at 15:29 PM.



  2. #2
    Titanium Member
    Join Date
    Jul 2002
    Location
    blk helo target, WA
    Posts
    3,536
    I was going to search for those files but I don't see msapp.exe listed in my services.

  3. #3
    Friendly Neighborhood Super Moderator phishhead's Avatar
    Join Date
    Apr 2002
    Location
    San Diego, Ca.
    Posts
    3,732
    hey lynch I saved it on floppy if you would like a copy of it let me know.



  4. #4
    Titanium Member
    Join Date
    Jul 2002
    Location
    blk helo target, WA
    Posts
    3,536
    lol - only if it's a big dl ftp and it's password protected.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •