What is RRB-SP1.exe?

Discussion in 'Malware Help (A Specialist Will Reply)' started by mt5294, Aug 15, 2010.

  1. mt5294

    mt5294 Private E-2

    After having my computer fixed by a local computer shop in town a whlie back, I noticed the repair guy added an icon of some sort in the lower left corner of my computer desktop. It's an application named RRB-SP1.exe. I have no idea what this thing is. I just figured maybe he put it there as some sort of program he may need to use in the future to run on my computer in case something bad happens again. Ever since then, when I run any of my antivirus software, it finds this program on my desktop and describes it as "Trogan.Agent." Does anyone know what this program is? I want to know if this is something that that's bad and needs to be deleted or if it is a reputable program of some sort that I can leave on my desktop for the repair people to use next time I need to bring it in for fixing. I've also tried doing an Internet search for this application and can't find a darned thing about it anywhere. Right now, it's just a mystery to me. Any help with this would be greatly appreciated.

    Note: Other than trying to figure out what this program is, my computer is in fine working order right now.
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Not a clue, but I suggest you call the repair man and ask him what it is. :major
     
  3. mt5294

    mt5294 Private E-2

    Tim,

    First of all, thanks for replying. I did talk to one of the repair guys at that shop, and he had no idea what it was and said the name of it was not familiar to him at all. He advised me to just have my antispyware program delete the application. By the way, out of the three antispyware programs I ran, only one of them picked it up, SUPERAntiSpyware. Malwarebytes didn't pick it up at all. Neither did Ad-Aware.
     
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Then perhaps we need to do a thorough look at your system. Please follow the instructions here and when done, attach the requested logs.

    READ & RUN ME FIRST. Malware Removal Guide

    Can you attach the SAS log so I can see what it reported it as?
     
  5. mt5294

    mt5294 Private E-2

    In doing repeat scans with my antispyware programs, I found out it was not SUPERAntiSpyware but instead IObit Security 360 that found the description called "Trogan.Agent" in the application icon on my desktop. I removed it and the antispyware program kept a log of the two items it found. If you want to see this, I can try attaching it to a post here. Other than this Trogan.Agent it found, the other thing was just a tracking cookie from the RealPlayer program. After removing this spyware, the icon in question has disappeared from my desktop.

    As I mentioned in my original post, my computer has been running perfectly, even when the icon was still on my desktop. I still have no problems to speak of. Do you still want me to go through the READ & RUN ME FIRST instructions? I've read through them, and there are quite a bit of things to get through. I transcribe in my home most of the day and usually part of the evenings, so I don't have a lot of time to dedicate going through all these steps in one day. If you still find it is necessary for me to go through these steps, I can go through them a bit at a time until I'm done, and then I can send you the necessary logs when I'm done, if that's okay with you. Let me know it it's okay to do this.

    I've got Java installed on my computer and continue to get updates on this program off and on, but I don't know if this is the same thing as Sun Java. Let me know if I need to remove all the regular Java files from the Add/Remove Programs window.
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    If you are not experiencing any malware issues, then there is no need to go through our entire procedures. It sounds like you have handled the only issue you were having. As to Java, you should uninstall all old Java versions and install only the latest version which you can find here:
    Java Runtime 6

    Otherwise, I would only suggest that you download and install both SAS and MBAM to keep as backup scanners for when you suspect any malware issues.

    You may wish to read this:
    How to Protect yourself from malware!
     
  7. mt5294

    mt5294 Private E-2

    Tim,

    I've got the following Java installations:

    J2SE Runtime Environment 5.0 Update 10
    J2SE Runtime Environment 5.0 Update 11
    Java(TM) 6 Update 13
    Java(TM) 6 Update 2
    Java(TM) 6 Update 21
    Java(TM) SE Runtime Environment 6 Update 1

    So, I keep the Java(TM) 6 Update 21 and just get rid of the rest?

    In response to your advice that I install SAS and MBAM, they have already been downloaded and installed onto my computer for quite some time now. I do a quick scan for spyware/malware on a weekly basis and full scans biweekly, using Ad-Aware, IObit Security 360, MBAM, SAS, and Spybot (was wondering how you disable TeaTimer). I check for updates on each of these programs daily. I also use Spyware Blaster and check for updates on that daily as well.

    Of the other software/updates you advise us to install, I have my Windows Update settings to where they will notify me of any updates automatically, and I install them ASAP. I use Avast as my antivirus program and Zone Alarm as my firewall. I've used CCleaner daily for years now (as far back as when you could actually hear the flush :-D).
     
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Yes, uninstall the old versions. You may as well also uninstall Ad-Aware as it is mostly useless these days. Otherwise, your protection looks fine.

    If you wish to disable teatimer when you want to change things:

    * Run Spybot and click Mode
    * Select Advanced Mode.
    * Then click Tools and select Resident.
    * Now in the right window pane, uncheck TeaTimer.
    * Also while this is open, in the left column now select IE Tweaks
    * and then in the right pane make sure all the Miscellaneous locks are unchecked.
    * Now quit Spybot.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds