Remove Rahack.b. Description and removal instructions

 
Title: Rahack.b

Type: Worms
Severity scale:Rahack.b severity is 67  (67 / 100)
 
Rahack.b is a worm that scans the network for computers running Radmin remote administration tool and attempts to spread to them using a list of known weak passwords. The parasite may give the attacker full unauthorized access to a compromised computer. Rahack.b automatically runs on every Windows startup and every time an executable file is run.


Rahack.b properties:
• Allows remote user connection
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Rahack.b removal:

remover for Rahack.b

Rahack.b manual removal:

Kill processes:
syshid.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysser
HKEY_CURRENT_USER\exefile\Shell\Open\Command\(default)=syshid.exe "%1" %*
HKEY_CURRENT_USER\CLSID\{3040DD03-9C5A-4563-AC2E-0026188C25A9}
Unregister DLLs:
server.dll

Delete files:
syshid.exe, server.dll, system.vbs
Misc:
Exact file location:
syshid.dll, server.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
system.vbs - C:\Documents and Settings\[Current User]\Start Menu\Programs\Startup

Other programs to remove Rahack.b:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 15/12/05
Information updated: 15/12/05

Additional resources related to Rahack.b:

Attention: If you know or you have a website or page about Rahack.b removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Rahack.b parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: