Thursday, January 29, 2009

Rbot.Oz Worm

Removing Rbot.Oz
Categories: Worm
Worms can be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.


Visible Symptoms:
Files in system folders:
[%WINDOWS%]\svhost.exe
[%WINDOWS%]\system\svchost32.exe
[%WINDOWS%]\system\svhost.exe
[%WINDOWS%]\svhost.exe
[%WINDOWS%]\system\svchost32.exe
[%WINDOWS%]\system\svhost.exe

How to detect Rbot.Oz:

Files:
[%WINDOWS%]\svhost.exe
[%WINDOWS%]\system\svchost32.exe
[%WINDOWS%]\system\svhost.exe
[%WINDOWS%]\svhost.exe
[%WINDOWS%]\system\svchost32.exe
[%WINDOWS%]\system\svhost.exe

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Removing Rbot.Oz:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Win32.Startpage.CQ!downloader Trojan Cleaner
Removing Bombing Trojan
Generation DoS Cleaner

No comments: