W32.Rontokbro!gen2

27 June 2011 Trojan 1 Comment

W32.Rontokbro!gen2 is a detection method to identify threats that are associated to W32.Ronktokbro@mm family of Trojan. Filse that are detected to be infected with W32.Rontokbro!gen2 are considered malicious and immediate cleaning or removal must be performed. This type of Trojan will spread itself on a network of computers and sends itself on the addresses found on the compromised computer.

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Manual Removal of W32.Rontokbro!gen2

1. If using Windows Me/XP, System Restore must be disabled to prevent the threat from restoring itself.[how to]
2. Database, pattern and definition files of installed antivirus programs must be updated.
3. Restart Windows in SafeMode [how to]
4. Run a full system scan and clean/delete all infected file(s)
5. Restart Windows in normal mode.

Scan with Norton Power Eraser:
A free removal tool from Norton Antivirus was developed to remove unfamiliar threats without using the traditional AV signatures. Download the tool from this location and start scanning the computer for viruses.

Scan with Norton Power Eraser:
A free removal tool from Norton Antivirus was developed to remove unfamiliar threats without using the traditional AV signatures. Download the tool from this location and start scanning the computer for viruses.

Using Portable SuperAntiSpyware:
To thoroughly remove the virus, it is best to do a separate scan of another security program so that other infected files not detected by anti-virus application can be remove as well. Click here to download and run SAS Portable Scanner.

How to Protect Computer From W32.Rontokbro!gen2

Use security programs:
- Install antivirus and always update the database to ensure that it will detect new threats and viruses.
- Use a firewall to block all unwanted incoming Internet traffic.
- Anti-malware is also advise aside from installed antivirus programs.

Communication Precautions:
- Be cautious in opening e-mail attachments. Spam messages that pretend to be from a known source may contain infected attached files.
- Never click on a suspicious link sent through instant messaging programs.

What to do next...