The botnet masters are gaining ground. As more bots secretly take control of computers and use these infected machines in malicious activities, bot networks are becoming more resilient. The emergence of new bot families and the continued proliferation of some of the threat landscape’s most notorious botnets only reinforce the need for a reliable solution against botnets. Protect your system by continuously monitoring your computer for potential infection and suspicious activities with RUBotted.

The new version of RUBotted features improved detection of unknown versions of bot clients and better cleaning capabilities for infected machines. Compatible with other antivirus products that may already be installed in user systems, RUBotted allows for seamless integration at no cost.

RUBotted also interfaces with Smart Protection Network that provides proactive blocking through the Trend Micro Web reputation service to help identify and block new threats. It is capable of detecting known and unknown variants of known botnet families including some of the most notorious botnets today:

• ZBOT/ZeuS – bank information stealer
• KOOBFACE – most successful Web 2.0 botnet
• WALEDAC – infamous spamming bot

Operating System

• Windows XP Professional or Home Edition (with the latest Service Pack installed)
• Windows Vista (32-bit version only, with the latest Service Pack installed)
• Windows 7 (32-bit version only, with the latest Service Pack installed)

Feedback

Although Trend Micro does not provide free technical support for RUBotted, we do encourage you to provide your feedback and suggestions regarding your experience with this free tool in the Malware Discussion Forum or Free Tool Feedback.

Frequently Asked Questions

Why do I need RUBotted?

Security experts believe that millions of computers have already become infected with bots without the knowledge of their owners. Even if no bots have already taken hold of your computer, installing RUBotted can help you detect bots and prevent you from becoming a victim.

What’s new with RUBotted?

RUBotted 2.0 maximizes the HouseCall technology to improve cleanup. The new version also features an increased detection rate and sourcing, providing greater botnet coverage.

Where can I download RUBotted?

You can find information and download link on the RUBotted page or go directly to the download center.

Is RUBotted compatible with my current security software?

Yes, RUBotted was designed to supplement existing security software. You do not need to install or remove any other programs before putting RUBotted to work.

Does RUBotted run on 64-bit OS?

No, the current version of RUBotted 2.0 only supports 32-bit. See System Requirements tab on the RUBotted page for more info.

What should I do after installing RUBotted?

Nothing. RUBotted works in the background, checking for signs of bots on your computer. If RUBotted notices any suspicious behavior associated with bots, it will alert you.

How do I get technical support for RUBotted?

Although Trend Micro does not provide free technical support for RUBotted, we welcome your feedback. Trend Micro will continue to update this FAQ with answers to the most common questions asked. We will also do our best to incorporate any suggestions into future versions. Comments can be posted in the Malware Discussion Forum, which can be accessed via the RUBotted icon on the system tray. Users can also send in comments via the Free Tool Feedback.

I can’t find the detection name when I look up in Virus Encyclopedia (VE)

RUBotted has a generic way of detecting/identifying botnet clients. A side effect of this is that the lookup in VE may not match. If so try to modify the search string. Eg. If your detection HTTP_POST_REQUEST_ZEUS, try to use only ZEUS instead.

Download full Quick Start Guide

Using RUBotted

To use RUBotted, just make sure that your computer has a working Internet connection. RUBotted can use your current network settings automatically.

Removing Bots

If a bot infects your computer, the RUBotted system tray icon will display a pop-up to alert you. RUBotted will use HouseCall to remove the botnet client and inform you of the result.

You may right click the system tray icon and Open Console to view the status and log of detections.