rbot.exe

Found folder for it in c:\windows\system 32 . I cant delete it .It tells me Access Denied (Make sure the disk is not full or write protected and file is not currently in use. Help

Hey paultech6,
rbot .exe seems to be a backdoor. You should try the following:
Download and install HijackThis. You can get it here: http://www.merijn.org/programs.php#hijackthis
You can check the log here: http://www.hijackthis.de/en
or follow the instructions given here: http://www.merijn.org/htlogtutorial.php
and check it yourself.
If you want to post the log in this forum, I’m sure someone will look through it and help you with whatever action has to be taken.
You should also upload the file here: www.virustotal.com and here: virusscan.jotti.org to verify it really is a backdoor.
Another good idea’d be to dld BOClean, which you get here:
http://www.comodo.com/boclean/boclean.html (though I don’t know if it removes backdoors)
Also have a look here:
http://fileinfo.prevx.com/spyware/qq28d481394199-LIVE36440279/LIVEMSSNGR.EXE.html
Prevx also says it can remove it. You may want to give it a try.
If you decide to remove it using Prevx without posting back here, and should it work, you should make sure to delete all system restore points as malware likes to hide there and to sneak back into the cleansed system. Just disable system restore, reboot - done. After cleaning the system you can reactivate it and create a new restore point.
Hope this helps,
grampa.

This post is now locked as the OPs other post on the identical topic has detailed information on this issue.

Please do not post the same query in more than one board.

It makes it harder for you to find out where all the responses are and it makes it harder for everyone else to find their way around the board.

Ewen :slight_smile: