lrbz32.exe - Dangerous
lrbz32.exe
Manual removal instructions:
| lrbz32.exe | Malware |
| lrbz32.exe | Dangerous |
| lrbz32.exe | High Risk |
It is a worm that spreads through open network shares and several Windows vulnerabilities.
The worm can act as a backdoor and attack other computers.
It also attempts to kill the processes of many antivirus and security programs.
Attempts to delete files associated with other worms, delete the registry key entries referring to these worms, and terminate processes with the following names:
winhlpp32.exe; tftpd.exe; dllhost.exe; winppr32.exe; mspatch.exe; penis32.exe; msblast.exe
Steals CD-keys from a large number of games.
Gives the creator backdoor access to the system via IRC.
Will attempt to copy itself to systems with weak passwords.
Manual removal:
Navigate to the keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
Delete the value: "MS Config v13"="lrbz32.exe"
Reviewed by:
by
NightWatcher
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial of UnHackMe.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.