[dohoanmy]

Fix these :


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\System32\blank.htm
O1 - Hosts: 216.40.230.4 desktop.kazaa.com
O1 - Hosts: 216.40.230.4 alpha.kazaa.com
O1 - Hosts: 216.40.230.4 shop.kazaa.comO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

Visit this site to download the program Spybot http://security.kolla.de/ . Remember to update before running and close all windows while running the program .

[dvk01]

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\System32\blank.htm
should NOT be deleted, it is a default windows setting to allow you to have a blank page at IE start up rather than a website

Some one will come back about the rest after the downtime today

[Metallica]

You will want to get rid of these however:

O16 - DPF: {1C955F3B-5B32-4393-A05D-24B4970CD2A1} (Video Class) - http://stream10k.redhotnetworks.com/cabs/videox.cab
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptem...iveSecurity.cab
O16 - DPF: {FA13A9FA-CA9B-11D2-9780-00104B242EA3} - http://www.wildtangent.com/install/...wave/wtinst.cab

Regards,

Pieter

[knman00]

HEY GUYS FORGET ALL THOSE PROGRAMS FIXING THE RB32 35 PROBLEM IS REALLY REALLY SIMPLE SO SIMPLE UR NOT GONNA BELIEVE IT ALL U DO IS ALT CTR DELETE AND END THE PROCESS OF THE RB32 35 EXE GO TO THE FILE FOLDER IN YOUR PROGRAM FILES HIT SHIFT+DELETE TO PERMANTENTLY DELETE IT AND HERE IS THE REAL TRICK MAKE SURE U HAVE NO PROGRAMS RUNNING DO NOT RESTART UR COMPUTER OR SHUT IT DOWN THIS WILL ONLY RESPAWN THE RB PROBLEM INSTEAD PULL THE POWER PLUG OUT OF THE BACK OF UR COMPUTER AND THEN PLUG IT BACK IT IN AND YOUR RB PROBLEMS ARE SOLVED FORGET ALL THOSE SILLY PROGRAMS USE UR MINDS REMEMEBER WHENEVER YOU SHUTDOWN OR RESTART WINDOWS IT ALWAYS SAYS SAVING SETTINGS THE RB32 TRICKS WINDOWS INTO THINKING THAT IT IS A SYSTEM FILE WHICH IT NEEDS SO IT MAKES WINDOWS BACK IT UP AND RESTORE IT WHEN U RESTART NOW THINK ABOUT IT IF YOU PULL THE POWER TO THE PC WINDOWS WONT HAVE A CHANCE TO "SAVE YOUR SETTINGS" AKA RESTORE THE RB32.EXE PRETTY SLICK HUH???

[Flrman1]

knman00


Stop Yelling!

[TonyKlein]

... or saying things that are blatantly untrue:

Originally posted by knman00:
THE RB32 TRICKS WINDOWS INTO THINKING THAT IT IS A SYSTEM FILE WHICH IT NEEDS SO IT MAKES WINDOWS BACK IT UP AND RESTORE IT WHEN U RESTART

It has nothing to do with Windows File Protection:

What Rapidblaster does, is "periodically download data from its controlling server that contains a new folder and filename.
It will then copy itself to that folder, terminate the original process, delete the original file, and run the new file in the new location."

[Flrman1]

Thanks for stepping in Tony.

I figured you would put the nonsense to bed!

[marcmfs]

actually i was able to get rid of it pretty easily on my system.

I am using win2k so that might have an advantage in that regard.

what I did was simple, told windows to uninstall, I then looked in the processes and stoped it fron running in the task manager, then looked for it in the registry and deleted all keys associated with it (there should be 2 entries, tho im sure there might be others) then deleted the file from the drive (permanently) restarted and it was gone.

I did tho, check the system after I rebooted with adware 6.0 and norton virus checker.

My concern tho is what else got installed when this got installed? and how come I didn't realise it was being installed?

[kqn73]

Thanks...Spybot seemed to get it out here.
Let me know if you fully got rid of it on your machine.
KQN73

[Rollin' Rog]

Time to close this one; those with similar problems should begin a thread of their own for best support.