richtx64.exe - Dangerous
richtx64.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
Richtx64.exe is Trojan/Backdoor.
Malware: C:\sand-box\setup.exe
Removed: C:\Documents and Settings\Administrator\Local Settings\Temp\richtx64.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\wscsvc32.exe
Classification:Antivirus Version Last Update Result
F-Secure 9.0.15370.0 2009.12.07 -
Kaspersky 7.0.0.125 2009.12.09 Packed.Win32.TDSS.aa
McAfee 5827 2009.12.09 DNSChanger.p
Microsoft 1.5302 2009.12.09 Trojan:Win32/Alureon.BT
NOD32 4673 2009.12.09 Win32/Adware.CoreguardAntivirus
Symantec 1.4.4.12 2009.12.09 Trojan.Dropper
Additional information
File size: 1187840 bytes
MD5 : c8111bf3fcdc0f975c676704ad7b337b
SHA1 : 0c6d1679104218c67914cf8bf52721fb45b75cb1
SHA256: 30d3513adb407d131d7ed851f0c135f26a56d40b52a3e20580166bb0d8f6d7aa
http://greatis.com/blog/how-to-remove-ma...
Kill the process richtx64.exe and remove richtx64.exe from Windows startup.