How to Remove W32 Rbot-FZB

A "worm" is a type of software that spreads itself automatically to many different computers. The W32 Rbot-FZB worm is a malicious program that turns off your computer's security features and attempts to take over your machine entirely so that other people can steal data stored on your system. You can remove the W32 Rbot-FZB worm from your computer by running a full virus scan after you have manually deleted some of the worm's files.

Difficulty: Moderate

Instructions

Things You'll Need:

• Virus removal tool

1. Navigate your browser to the link in Resources for the AVG Anti-Virus website. Download the program's installation file if your computer does not already have an anti-virus program. Run the installation file and follow the on-screen instructions.

2. 
    
   Opening up the Task Manager

   Open up the Task Manager window by holding down the "Ctrl," "Alt," and "Delete" keys at the same time. Click on the "Open Task Manager" option and then click the "Processes" tab.

3. 
    
   Shutting Down the W32 Rbot-FZB Process

   Use the scroll bar at the right side of the Task Manager to navigate through the list of files that are currently being used by your computer. Locate the file named "icrss.exe" and click on it. Click on the "End Process" button.

4. 
    
   Searching For W32 Rbot-FZB Files

   Exit out of the Task Manager window. Open the Start menu and then click on the "Search" option. Type "icrss.exe" into the Search box and then press "Enter." Right-click the file and then select the "Delete" button.

5. 
    
   The "Regedit" Icon

   Bring up your operating system's registry editor by searching for the word "Regedit." Double-click the registry editor's icon. Press down the "Ctrl" and "F" files at the same time and wait for the search box to appear.

6. Type "ICRSS" into the search box. Right-click on each of the registry entries that appear and then choose the option to delete them. Repeat the process with the search phrase "LEGACY_ICRSS."

7. 
    
   Running the "Update" Feature

   Close down the registry editor's window. Open your anti-virus program. Click on the program's "Update" feature and wait for the updates to finish installing.

8. 
    
   Scanning for the W32 Rbot-FZB Worm

   Choose the option to start a virus scan and then click on the "Scan Entire Computer" button. Click on "Remove Problems" when the anti-virus program is done scanning your hard drive to finish removing the W32 Rbot-FZB worm.

Tips & Warnings

• Because the W32 Rbot-FZB worm spreads to each computer on a network you will want to also remove the worm's files and run a virus scan on every other computer attached to your network.
• Many of the registry files are used to load and run your computer's operating system. Make sure to backup any programs or documents that you need before opening the registry editor in case you accidentally delete the wrong entry.

References

• W32 Rbot-FZB Information

Resources

• AVG Anti-Virus Download