lrbz32.exe - Dangerous
lrbz32.exe
Manual removal instructions:
Antivirus Report of lrbz32.exe:
lrbz32.exe
W32.Gaobot.AOL
It is a worm that spreads through open network shares and several Windows vulnerabilities.
The worm can act as a backdoor and attack other computers.
It also attempts to kill the processes of many antivirus and security programs.
Attempts to delete files associated with other worms, delete the registry key entries referring to these worms, and terminate processes with the following names:
winhlpp32.exe; tftpd.exe; dllhost.exe; winppr32.exe; mspatch.exe; penis32.exe; msblast.exe
Steals CD-keys from a large number of games.
Gives the creator backdoor access to the system via IRC.
Will attempt to copy itself to systems with weak passwords.
Manual removal:
Navigate to the keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
Delete the value: "MS Config v13"="lrbz32.exe"
| lrbz32.exe | Malware |
| lrbz32.exe | Dangerous |
| lrbz32.exe | High Risk |
It is a worm that spreads through open network shares and several Windows vulnerabilities.
The worm can act as a backdoor and attack other computers.
It also attempts to kill the processes of many antivirus and security programs.
Attempts to delete files associated with other worms, delete the registry key entries referring to these worms, and terminate processes with the following names:
winhlpp32.exe; tftpd.exe; dllhost.exe; winppr32.exe; mspatch.exe; penis32.exe; msblast.exe
Steals CD-keys from a large number of games.
Gives the creator backdoor access to the system via IRC.
Will attempt to copy itself to systems with weak passwords.
Manual removal:
Navigate to the keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
Delete the value: "MS Config v13"="lrbz32.exe"
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.