Remove Ragruk. Description and removal instructions

Title: Ragruk
Type: Backdoors	Severity scale: (60 / 100)

Ragruk is a backdoor that provides the attacker with unauthorized remote access to the compromised computer. It allows the intruder to terminate running security-related programs, control certain system components and steal user sensitive information. Ragruk disables the Task Manager. The backdoor runs on every Windows startup.

FORUM:
Discuss Ragruk in
spyware removal forum

Ragruk properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic Ragruk removal:

remover for Ragruk

Ragruk manual removal:

Kill processes:
svchst.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\antivir
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr=1

HELP:
how to remove registry entries

Delete files:
svchst.exe, at.bat

HELP:
how to remove harmful files

Misc:
The svchst.exe file can be found in the main Windows folder C:\Windows or C:\Winnt.

Other programs to remove Ragruk:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 07/05/06
Information updated: 07/05/06

Additional resources related to Ragruk:

Attention: If you know or you have a website or page about Ragruk removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Ragruk parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.