Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


W32/rbot-bjh Worm

  • Please log in to reply
1 reply to this topic

#1 lee+0


  • Members
  • 1 posts
  • Local time:09:47 AM

Posted 20 October 2006 - 01:12 AM


My computer have been infected by the worm called W32/RBOT-BJH Worm.
I've tried to remove logitect.exe which created by this worm but still unable to clear this worm. :thumbsup:
Any suggestion?

Edited by lee+0, 20 October 2006 - 02:44 AM.

BC AdBot (Login to Remove)


#2 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 52,099 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:47 PM

Posted 20 October 2006 - 02:02 PM

Hello lee+0

What OS (Win XP/2000, etc) are you using? What type of anti-virus are you using and when was the last time you ran a scan? Did you try doing a scan in "SAFE MODE"?

If so and that did not help, then do this:

Download and scan with the free F-Bot Cleaner Tool.
  • Unzip (extract) the F-Bot utility from the ZIP archive. Read "How to create/extract a ZIP File in Win XP" if unsure how to do this.
  • Run F-Bot.exe by either double-clicking on it or start from COMMAND.COM or CMD.EXE by typing: "F-Bot.exe" at the command prompt and pressing 'Enter'.
  • Reboot the system.
Note: You must be logged in as Administrator or as a user with local admin rights for this tool to work effectively. The F-Bot tool unpacks several files into a temporary folder on a hard drive. These files are not deleted after the tool finishes cleaning a computer. The unpacked files can be deleted manually any time after disinfection. See the Readme File located in the zip folder for further details.

Download Sysclean Package & save it to your desktop.
  • Create a new folder on drive "C:\" ("C:\New Folder") and rename it Sysclean.
  • Place the sysclean.com inside that folder.
  • Then download the latest Virus Pattern Files (lptXXX.zip).
  • Extract the lptXXX.zip pattern file into the same folder you created for sysclean.com.
  • Close all open applications and DISABLE your current anti-virus software. Some anti-virus programs such as Avast will alert you to a virus attack when running sysclean so it's best to disable them first.
  • Reboot into "SAFE MODE". To do this restart your computer and after hearing your computer beep once during startup [but before the Windows icon appears] press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".
  • Open the Sysclean folder and double-click on sysclean.com to run.
  • It will take some time to complete. Be patient and let it clean whatever it finds.
  • Exit when done and re-enable your anti-virus program.
Note: When using Sysclean its best to use the Administrator's account or an account with Administrative rights otherwise you will not have the rights to scan some locations resulting in Access is denied log entries.

Then perform these online Virus scans:
[Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component.]
Trend Micro Housecall <- Use "Autoclean"
F-Secure Online Scanner <- Be sure to follow the directions on the F-Secure page for proper Installation.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users