[Sybex]

I got this sh** from a keygen and i removed it afterwards
I have the following "protection":

Adaware
SPybot Seek&Destroy
Norton Antivirus 2003
Spyware Blaster
The Cleaner
Spy Chaser

They are all up to date and i made a scan but nothing is found
My problem is that i see the RA server in the administrative tools-services although it's disabled and i have the following
registry reference:


My Computer\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\Legacy Slave\0000 and there is a value with Name :DeviceDesc and Data name :RA Server

I can't delete this value...any help? (OS WinXP)

[zen69x]

Sure, to remove that key, you will first have to give yourself full control of that key. By default only system has full control over that key, admins have read only access.

[Sybex]

How am i gonna do that? i have no clue...

[Sybex]

I couldn't agree more and i found it the moment i read the first answer but i had some small health probs and i never respond to thank him.
As for the thingies made for pull M$ from the ear..i say you can't move a giant from it's place just wake him up and he scratches his balls...
But then again why not...it's fun...even though M$ wants to add and antivirus program inside the next Windows Version and symantec,mcafee and other companies are angry...
Anyhow fuck them all...i am about to move to Linux

[obi]

Hi, can anyone give me a dummy guide on how to remove this. I have it and its not nice.

sybex: I have 2 programs blocking its access to online stuff, Spy sweeper, and Zone alarm. Do you think i am safe?

[adamvjackson]

http://www.avp.ch/avpve/trojan/backdoor/ra.stm

If you have this installed on your system, and you did not knowingly install it, then no, your system is neither safe nor secure.

You may want to re-think your browser/firewall/anti-virus/patching strategies.