Home     Products     Downloads     Support     Contacts     Affiliates/Resellers     Company     Online Store

Home / Research Rbot Details of the Rbot are shown below. This threat can be detected and cleaned using PestBlock Anti-Spyware. Name: Rbot Type: Backdoor Risk: Description: Backdoor.Rbot will open ports on an infected computer and connect to a remote server which will subsequently steal user information including but not limited to application and CD registration keys. Removal We do not publish here the MD5 checksums for files. PestBlock Anti Spyware can identify good file from bad more accurately. Registry Items: HKEY_CLASSES_ROOT\SOFTWARE\Microsoft\OLE\Microsoft machine\msn.exe HKEY_CLASSES_ROOT\SOFTWARE\Microsoft\OLE\Microsoft System\313.exe HKEY_CLASSES_ROOT\SOFTWARE\Microsoft\OLE\MSNS PLUS XP2\msnnsg.exe HKEY_CLASSES_ROOT\SOFTWARE\Microsoft\OLE\Tilerun\Tilecom32.com HKEY_CLASSES_ROOT\SOFTWARE\Microsoft\OLE\Windows DLL Vericates\winIogon.exe HKEY_CLASSES_ROOT\SOFTWARE\Microsoft\OLE\Windows modez Verifier HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\CSCRS Value HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\DDRam prosessor HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\internet connection\winsystem.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\LSESS Value HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\Microsoft DirktorWin HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\Microsoft DLL Veriates HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\Microsoft Keyz HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\microsoft messenger\msmsg.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\ms-update HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\MSN service\msnmgr21.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\MSN service\msnmsgr19.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\Service\System.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\SP1-Update HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\sp2 service HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\System Update\msmsngr.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\Wan service control\Swchost.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\Windows NetStart Service2\winsN2SD.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cosine HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CSCRS Value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\LSESS Value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft MNG32 Service HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows NetStart Service2\winsN2SD.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows_Protect\winsystem.exe HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsRegKey upd4te2d4te HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\CSCRS Value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\LSESS Value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Windows NetStart Service2\winsN2SD.exe HKEY_CURRENT_USER\SOFTWARE\SYSTEM\CurrentControlSet\Control\Lsa\LSESS Value HKEY_CURRENT_USER\SYSTEM\CControl\Lsa\microsoft messenger\msmsg.exe HKEY_CURRENT_USER\SYSTEM\CurrentControlSet\Control\Lsa\Windows NetStart Service2\winsN2SD.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\CSCRS Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LSESS Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\microsoft messenger\msmsg.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\Windows NetStart Service2\winsN2SD.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\xz.exe\EnableNXShowUI HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cosine HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CSCRS Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\DDRam prosessor HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\LSESS Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft DirktorWin HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft MNG32 Service HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft schedule HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Update 64 BIT\winman.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ms-update HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mysvcig38 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows ASN2 Services HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows NetStart Service2\winsN2SD.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows_Protect\winsystem.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsRegKey upd4te2d4te HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinLogin\win32x.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\cosine HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\CSCRS Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\DDRam prosessor HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\LSESS Value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Microsoft DirktorWin HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Microsoft schedule HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Microsoft Update 64 BIT\winman.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\ms-update HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Windows ASN2 Services HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Windows NetStart Service2\winsN2SD.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Windows_Protect\winsystem.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\WindowsRegKey upd4te2d4te HKEY_LOCAL_MACHINE\SYSTEM\CControl\Lsa\microsoft messenger\msmsg.exe HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WMPSERVICE HKEY_LOCAL_MACHINE\SYSTEM\CServices\WMPservice HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LSESS Value HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Windows NetStart Service2\winsN2SD.exe HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\winsN2SD.exe HKEY_CURRENT_USER\SYSTEM\CurrentControlSet\Control\Lsa\Windows PNP Server\pnpsrv.exe HKEY_CURRENT_USER\Software\Microsoft\OLE\Windows PNP Server\pnpsrv.exe HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices\Windows PNP Server\pnpsrv.exe HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Windows PNP Server\pnpsrv.exe HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Windows PNP Server\pnpsrv.exe HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\Windows PNP Server\pnpsrv.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Windows PNP Server\pnpsrv.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Windows PNP Server\pnpsrv.exe

News for Jul 4, 2008 New Version! PestBlock version 4.1. Many new featured, bugfixes. Download new version today! Learn More... Download Demo Version Buy Now!   Buy Online Online Store Discount Pricing   Spyware Research Browse our Spyware Research Center. Spyware Research   Free Newsletter Sign up for our free product newsletter today and get informed about new updates and releases by email. You will also receive the latest discounts and offers for our products! Click Here to Sign Up

Home     Products     Downloads     Support     Contacts     Affiliates/Resellers     Company     Online Store

© 2007 PrivacyAnywhere Software, LLC. All rights reserved. Privacy Statement | Terms of Use | www.pestblock.com