BleepingComputer.com: Any Info On Worm_rbot.fjx Appreciated!

Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Any Info On Worm_rbot.fjx Appreciated!

#1 User is offline   justsometallguy 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 24
  • Joined: 31-July 07

Posted 31 July 2007 - 01:24 PM

About a week ago I got a popup from Trend Micro saying it detected "worm_rbot.fjx" in the infected file "C:\DOCUME~1\Keith\LOCALS~1\Temp\svnhost.exe" It said the status was "quarantined" but I went ahead and clicked on "Quarantine Folder" to be safe. In the next window of Trend Micro, I tried to clean the files but it said it was unable to clean them. I then proceeded to hit the "Delete All" button in Trend Micro and they disappeared from the list. (Below are the screenshots)

I thought the problem was solved, but I have since received even more popups saying the same file is infected with the same virus/worm.

I have tried to search online for this worm, but am unable to find anything on it. There is a lot of info on "worm_rbot.fj" but not .fjx. Are these the same or different? If anyone knows anything about this worm and/or how to get rid of it, their help would be much appreciated. Thanks in advance!


Posted Image

#2 User is offline   oldf@rt 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 2,609
  • Joined: 06-November 05
  • Gender:Male
  • Location:Avondale, Arizona USA

Posted 31 July 2007 - 01:44 PM

Different companies may use different names for the various viruses that are out there. Try using an online scanner, such as bitdefender or F-Secure to make sure that you are clean . Both of these require internet explorer to run.
The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users