WARNING - RapidBlaster spyware (and removal tools) - RapidBlaster Killer

Discussion in 'other security issues & news' started by javacool, Jun 8, 2003.

Thread Status:
Not open for further replies.
  1. javacool

    javacool BrightFort Moderator

    Joined:
    Feb 10, 2002
    Posts:
    4,098
    Full information: http://www.wilderssecurity.net/specialinfo/rapidblaster.html

    In addition...


    Since RapidBlaster will "morph" itself whenever it detects an uninstallation attempt, removal with current anti-spyware software may not be successful.

    We have created a unique tool, RapidBlaster Killer, that can scan all running programs, detect RapidBlaster, and successfully terminate the process and remove the Run key registry entry.

    RapidBlaster Killer - released June 8, 2003 (mirrored by SpywareInfo)

    RapidBlaster Killer will create a log file named "scanlog.txt" in the folder it is placed if RapidBlaster is detected, and will notify the user of the file path/location. RB Killer will not delete the file automatically - the user must do this manually.

    After a successful termination of any RapidBlaster processes, using a program such as Spybot S & D or Ad-Aware should clean up any remnants.


    Best regards,

    -Javacool
     
    Last edited by a moderator: Apr 11, 2004
    javacool, Jun 8, 2003
    #1
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    Thank you Javacool, :)

    I´m sure that will come in handy, lots of times.

    Regards,

    Pieter
     
    Pieter_Arntz, Jun 8, 2003
    #2
  3. javacool

    javacool BrightFort Moderator

    Joined:
    Feb 10, 2002
    Posts:
    4,098
    Well I hope so. :D

    Currently, Spybot and other programs have trouble removing RapidBlaster because the process remains running and "morphs" to another location. (Using HijackThis to remove the Run entry can trigger RapidBlaster's "morphing" behavior also.) RB Killer will send a little "cease and desist". ;)

    Best regards,

    -Javacool
     
    Last edited by a moderator: Apr 11, 2004
    javacool, Jun 8, 2003
    #3
  4. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    I've already posted about this new threat and your excellent solution at every board and newsgroup I hang at! :D
     
    TonyKlein, Jun 8, 2003
    #4
  5. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    Excellent service once again, JC :cool: - Kudoos for spreading the word, Tony ;)

    regards.

    paul
     
    Last edited by a moderator: Apr 11, 2004
    Paul Wilders, Jun 8, 2003
    #5
  6. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    You're welcome, Paul.

    It's been a major pain... :rolleyes:

    So far we've been able to get it off peoples systems by having them start up in Safe Mode, delete the RB folder there, and, still in Safe Mode, delete or disable its startup, but Javacool's solution sure is a h*ll of a lot slicker! :D

    That's why he is "JavaCOOL! " ;)
     
    TonyKlein, Jun 8, 2003
    #6
  7. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    Couldn't express it better myself, Tony ;)

    regards.

    paul
     
    Paul Wilders, Jun 8, 2003
    #7
  8. javacool

    javacool BrightFort Moderator

    Joined:
    Feb 10, 2002
    Posts:
    4,098
    RapidBlaster Killer 1.3 released - June 10, 2003.

    (The link takes you directly to the download.)

    Release notes:
    -RapidBlaster Killer can now perform a full clean-up (it is no longer limited to just terminating the process). It can delete the RapidBlaster files/folders, remove the uninstall entries, and remove the Run key entries (all after detecting and terminating the process of course).

    Enjoy! :D

    Best regards,

    -Javacool
     
    javacool, Jun 10, 2003
    #8
  9. PhiloVance

    PhiloVance Registered Member

    Joined:
    Jan 12, 2003
    Posts:
    93
    Location:
    Bakersfield, CA
    Thanks, I've d/loaded and am running that today. :)
     
    PhiloVance, Jun 11, 2003
    #9
  10. thetriune1

    thetriune1 Registered Member

    Joined:
    Mar 18, 2004
    Posts:
    1
    ya'lls link to : RapidBlaster spyware (and removal tools) - RapidBlaster NO LONGER WORKS !!!!! PLEASE advise !!!!

    Also has anybody ever heard of Dynasoft o_Oo_O?? It showed up in my system recently and when i try to remove it it comes right back.i have several spyware removal programs and none seam to be able to remove it or is it listed in their databases?!?!?!?!?
     
    thetriune1, Mar 18, 2004
    #10
  11. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,750
    Location:
    EU
    Hi,

    May be this one:

    http://www.dynasoft.pl/

    Gerard
     
    gerardwil, Mar 18, 2004
    #11
  12. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    Last edited by a moderator: Apr 11, 2004
    Pieter_Arntz, Mar 18, 2004
    #12
  13. dangitall

    dangitall Registered Member

    Joined:
    Feb 23, 2004
    Posts:
    430
    Location:
    New Hamster, USA
    Is RapidblasterKiller still available? Thetriune1 was right: the link no longer works.
     
    dangitall, Mar 18, 2004
    #13
  14. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    Last edited by a moderator: Apr 11, 2004
    Pieter_Arntz, Mar 19, 2004
    #14
  15. dangitall

    dangitall Registered Member

    Joined:
    Feb 23, 2004
    Posts:
    430
    Location:
    New Hamster, USA
    Must've been a hiccup somewhere. It didn't work for me last night, but I just grabbed it, so everything is hunky-dory. Thanks for the reply.
     
    dangitall, Mar 19, 2004
    #15
  16. gina_n_atl

    gina_n_atl Registered Member

    Joined:
    May 10, 2004
    Posts:
    12
    Hi. I just found your forum through a Google search. I am responding to thetriune1's post (dated March 18, 2004) regarding Dynasoft entries in the registry.
    I use several good anti-spyware, anti-trojan and anti- virus programs as well but it seems as if the entries show up in "RegCleaner 4.3" every time I restart Windows (XP Pro.) Did anyone ever find any info on Dynasoft other than what Google pulls up? Is it a trojan? Dialer? Help Please!!

    Heartfelt thanks to anyone who can help,
    Gina
    :)
     
    gina_n_atl, May 10, 2004
    #16
  17. snapdragin

    snapdragin Registered Member

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    snapdragin, May 10, 2004
    #17
  18. gina_n_atl

    gina_n_atl Registered Member

    Joined:
    May 10, 2004
    Posts:
    12
    Thanks Snap!
    I downloaded "Hijack This!" and need one additional favor. Could you please post the hijack cleaning forum's URL? I apologize, I am very new to this and cannot find the correct forum section; I want to make sure I post the log in the correct place.

    Thanks so much!

    Gina
    :)

    EDIT: Snap, I think I found it! :D
    Is this the correct URL? https://www.wilderssecurity.com/forumdisplay.php?f=26
    (I will post the log there. If this is not the correct place to post please let me know. Thanks again!) ;)
     
    gina_n_atl, May 10, 2004
    #18
  19. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
    That's it. :)

    Just make sure u start a new thread


    snowbound
     
    snowbound, May 10, 2004
    #19
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...