Skip to content


Reply
Stone Esquire
pickedmolested
Posts: 2
Registered: ‎07-13-2012
Accepted Solution

RUBOTTED service stopped

[ Edited ]

Please help me with this. 

Yesterday, when i started my pc my avast webshield was also not working(i manually switched webshield on).

But from that, even after numerous tries the Rubotted is not working at all. Service application shows stopped service, trying to restart but with no help :smileysad:

 

Please help!

Please use plain text.
Legendary Emissary
malwarekiller
Posts: 3,944
Registered: ‎08-08-2011

Re: RUBOTTED service stopped

Welcome aboard! Posted Image

 lets take a deeper look..

 

Download ComboFix from the any of the locations given in this website:

    • IMPORTANT !!! You need to Save ComboFix.exe to your Desktop
      • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you are still unsure on how to do this, see here
      • Double click on ComboFix.exe & follow the prompts.
      • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
      • If you already have the Recovery Console preinstalled, it will not ask for the following. If it does prompt, allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.


      **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

      Posted Image

      Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

      Posted Image

      Click Yes, to continue scanning for malware. Please be patient and don't use the PC whilst it is scanning.

      When finished, it shall produce a log for you. Please copy & paste the contents of this log (also found at C:\ComboFix.txt) in your next reply at your topic.
—————
Was this post helpful? Say “thanks” by giving me a “Kudo”!
Was your question answered or issue solved? Mark that post as an “Accepted Solution”!
Please use plain text.
Stone Esquire
pickedmolested
Posts: 2
Registered: ‎07-13-2012

Re: RUBOTTED service stopped

i am  sorry for the late reply.. i downloaded combofix, i ran it, it did install but then it didnt do anything else a cmd window popped with something going on... 

 

i have windows 7

Please use plain text.
Legendary Emissary
malwarekiller
Posts: 3,944
Registered: ‎08-08-2011

Re: RUBOTTED service stopped

correct! allow the CMD to continue...please allow it to run..its normal

—————
Was this post helpful? Say “thanks” by giving me a “Kudo”!
Was your question answered or issue solved? Mark that post as an “Accepted Solution”!
Please use plain text.
Stone Emissary
LindsayWood
Posts: 7
Registered: ‎08-04-2012

Re: RUBOTTED service stopped

I am not the original poster, but I'm having the same problem.  I ran the Combo-Fix program and  the log.txt of it is attached.

 

 

 

Any insights would be appreciated....RUBotted still won't run

 

Lindsay

Please use plain text.
Stone Emissary
LindsayWood
Posts: 7
Registered: ‎08-04-2012

Re: RUBOTTED service stopped

One more thing:  I just found the combo-fix quarantine file, which I have attached.  I don't understand it either.  

 

Help??

Please use plain text.
Stone Emissary
LindsayWood
Posts: 7
Registered: ‎08-04-2012

Re: RUBOTTED service stopped

Finally (I hope) I attach the hijackthis log file.

 

Many thanks.  

 

Lindsay

Please use plain text.
Legendary Emissary
malwarekiller
Posts: 3,944
Registered: ‎08-08-2011

Re: RUBOTTED service stopped

C:/qoobox

Zip up the qoubox password protect it..keep password: infected and upload it towww.mediafire.com and post the sharing link here on next reply.

—————
Was this post helpful? Say “thanks” by giving me a “Kudo”!
Was your question answered or issue solved? Mark that post as an “Accepted Solution”!
Please use plain text.
Stone Emissary
LindsayWood
Posts: 7
Registered: ‎08-04-2012

Re: RUBOTTED service stopped

Done

 

The file is here .  Password is "infected" (without quotation marks).

 

In zipping it, I got a message that folder BackEnv could not be accessed by 7-zip.  I cannot access that folder with my file manager either. 

 

Thank you for your help.

 

Lindsay

 

Please use plain text.
Legendary Emissary
malwarekiller
Posts: 3,944
Registered: ‎08-08-2011

Re: RUBOTTED service stopped

thanks for these..it will help..

 

 

 


  • After the download process will finish , you'll need to unpack EmsisoftEmergencyKit.zip
    [Image: ekk1.png]
  • Open the Emsisoft Emergency Kit Folder and double click EmergencyKitScanner.bat
    [Image: ekk2.png]
  • A pop-up will prompt you to update Emsisoft Emergency Kit , please click the "Yes" button.

    [Image: ekk3.png]


    [Image: ekk4.png]
  • After the Update process has completed , put the mouse cursor over the "Menu" tab on the left and click-on "Scan PC".

    [Image: ekk5.png]
  • Select "Deep scan" and click-on the below "SCAN" button.

    [Image: ekk6.png]
  • Emsisoft Emergency Kit will now start scanning your computer for malicious files as shown below.

    [Image: ekk7.png]
  • When the scan will be completed , you will be presented with a screen showing you the malware infections that Emsisoft Emergency Kit has detected.Please note that the infections found may be different than what is shown in the image.
    Make sure that everything is Checked (ticked) and click on the 'Quarantine selected objects' button.
    [Image: ekk8.png]
  • Emsisoft Emergency Kit will now start removing the malicious files. 
    If during the removal process Emsisoft will display a message stating that it needs to reboot, please allow this request.
—————
Was this post helpful? Say “thanks” by giving me a “Kudo”!
Was your question answered or issue solved? Mark that post as an “Accepted Solution”!
Please use plain text.