Remove Rustock. Description and removal instructions

Title: Rustock
Type: Backdoors	Severity scale: (61 / 100)

Rustock is a stealthy backdoor that provides the attacker with unauthorized remote access to the compromised computer. Although the parasite does not allow the intruder to control the infected PC, it converts the system to a hidden proxy used for certain malicious purposes, such as sending e-mail spam. Rustock uses an integrated rootkit to hide its registry entries, files and active processes. It is able to avoid detection by popular rootkit detectors and removers. Rustock runs as a service on every Windows startup.

FORUM:
Discuss Rustock in
spyware removal forum

Rustock properties:
• Allows remote user connection
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Rustock removal:

remover for Rustock

Rustock manual removal:

Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pe386

HELP:
how to remove registry entries

Delete files:
pe386.sys

HELP:
how to remove harmful files

Delete directories:
C:\Windows\System32:[X]
C:\Winnt\System32:[X]
Misc:
[X] is a random number.

Other programs to remove Rustock:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 07/06/06
Information updated: 07/06/06

Additional resources related to Rustock:

Attention: If you know or you have a website or page about Rustock removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Rustock parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.