Welcome to remove-malware.net

How to remove Rustock SpamBOT malware

Malware Description:
Over the last few weeks, Rustock SpamBOT has been an issue of active discussion on PC security forums and boards. So, what is Rustock SpamBOT and how is its presence on one’s PC manifested? Actually, Rustock SpamBOT affects the PC user’s ability to use the e-mail services and some other critical computer options. With Rustock SpamBOT on board, one’s IP-address gets included on the IP blacklists provided on specialized internet resources such as Spamhaus.org. Therefore, you may repeatedly get warning messages about a “high volume spam sending trojan” (Rustock SpamBOT) which infected your IP. Therefore, a number of essential PC functionalities will not be available until you take adequate measures to remove Rustock SpamBOT from your PC or from the network your computer refers to. In any case, being infected with Rustock SpamBOT will result in the limited scope of internet services available to the PC user. Simply excluding the contaminated IP from the blacklists will not resolve the core of the problem which may occur over and over until you actually remove the main threat – i.e. Rustock SpamBOT. Please, follow the instructions below to handle Rustock SpamBOT trouble.

Malware Type: Trojan Horses

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Rustock SpamBOT Free Scanner and Remover: Download Now

How to remove Rustock SpamBOT manually:
Manual removal of Rustock SpamBOT trojan is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The associated files to be deleted are listed below:

• %Program Files%\rhcnotj0e5eg\database.dat
• %Program Files%\rhcnotj0e5eg\license.txt
• %Program Files%\rhcnotj0e5eg\MFC71.dll
• %Program Files%\rhcnotj0e5eg\MFC71ENU.dll
• %Program Files%\rhcnotj0e5eg\msvcp71.dll
• %Program Files%\rhcnotj0e5eg\msvcr71.dll

The registry entries that need to be removed are as follows:

• HKLM\system\controlset001\services\2b963c37
• HKLM\Software\Microsoft\38C826F1
• HKLM\Software\Microsoft\38C826F1#38c826f1
• HKLM\Software\Microsoft\38C826F1#Version
• HKLM\Software\Microsoft\38C826F1#38c88b71
• HKLM\Software\Microsoft\38C826F1#38c8e294
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\7723c7bb
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\7723c7bb
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier
• HKEY_LOCAL_MACHINE\SOFTWARE\rhcnotj0e5eg

Please, be aware that manual removal of Rustock SpamBOT trojan is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Rustock SpamBOT, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.