Ra Server

[Sybex 0]

I got this sh** from a keygen and i removed it afterwards

I have the following "protection":

 

Adaware

SPybot Seek&Destroy

Norton Antivirus 2003

Spyware Blaster

The Cleaner

Spy Chaser

 

They are all up to date and i made a scan but nothing is found

My problem is that i see the RA server in the administrative tools-services although it's disabled and i have the following

registry reference:

 

 

My Computer\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\Legacy Slave\0000 and there is a value with Name :DeviceDesc and Data name :RA Server

 

I can't delete this value...any help? (OS WinXP)

[zen69x 0]

Sure, to remove that key, you will first have to give yourself full control of that key. By default only system has full control over that key, admins have read only access.

[Sybex 0]

How am i gonna do that? i have no clue...

[Sybex 0]

I couldn't agree more and i found it the moment i read the first answer but i had some small health probs and i never respond to thank him.

As for the thingies made for pull M$ from the ear..i say you can't move a giant from it's place just wake him up and he scratches his balls...

But then again why not...it's fun...even though M$ wants to add and antivirus program inside the next Windows Version and symantec,mcafee and other companies are angry...

Anyhow fuck them all...i am about to move to Linux

[obi 0]

Hi, can anyone give me a dummy guide on how to remove this. I have it and its not nice.

 

sybex: I have 2 programs blocking its access to online stuff, Spy sweeper, and Zone alarm. Do you think i am safe?

[adamvjackson 0]

http://www.avp.ch/avpve/trojan/backdoor/ra.stm

 

If you have this installed on your system, and you did not knowingly install it, then no, your system is neither safe nor secure.

 

You may want to re-think your browser/firewall/anti-virus/patching strategies.