Remove Rustock.b. Description and removal instructions

Title: Rustock.b
Type: Backdoors	Severity scale: (68 / 100)

Rustock.b is a stealthy backdoor that provides the attacker with unauthorized remote access to the compromised computer. Although the parasite does not allow the intruder to control the infected PC, it converts the system to a hidden proxy used for certain malicious purposes, such as sending e-mail spam. The backdoor may also hijack the web browser and redirect the user to undesirable web sites. Furthermore, it may collect certain system information, download and install the ICQ 5 program without user knowledge and consent. Rustock.b uses an integrated rootkit to hide its registry entries, files and active processes. It is able to bypass firewalls and avoid detection by popular rootkit detectors and removers. The backdoor runs as a service on every Windows startup.

FORUM:
Discuss Rustock.b in
spyware removal forum

Rustock.b properties:
• Allows remote user connection
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Rustock.b removal:

remover for Rustock.b

Rustock.b manual removal:

Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pe386

HELP:
how to remove registry entries

Misc:
Rustock.b creates one of the following alternate data streams: C:\Windows\System32:lzx32.sys, C:\Winnt\System32:lzx32.sys.

Other programs to remove Rustock.b:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 06/07/06
Information updated: 06/07/06

Additional resources related to Rustock.b:

Attention: If you know or you have a website or page about Rustock.b removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Rustock.b parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.