Details on the Rustock Spambot:
PURELY FOR REFERENCE - DO NOT NECESSARILY TRY TO REMOVE IT MANUALLY - JUST LOOK FOR THE TELL TALE SIGNS ON YOUR MACHINES TO IDENTIFY THE ONE(S) INFECTED.
http://remove-malware.net/how-to-remove-rustock-spambot-malware/
How to remove Rustock SpamBOT manually:
Manual removal of Rustock SpamBOT trojan is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.
The associated files to be deleted are listed below: %Program Files%\rhcnotj0e5eg\database.dat
%Program Files%\rhcnotj0e5eg\license.txt
%Program Files%\rhcnotj0e5eg\MFC71.dll
%Program Files%\rhcnotj0e5eg\MFC71ENU.dll
%Program Files%\rhcnotj0e5eg\msvcp71.dll
%Program Files%\rhcnotj0e5eg\msvcr71.dll
The registry entries that need to be removed are as follows: HKLM\system\controlset001\services\2b963c37
HKLM\Software\Microsoft\38C826F1
HKLM\Software\Microsoft\38C826F1#38c826f1
HKLM\Software\Microsoft\38C826F1#Version
HKLM\Software\Microsoft\38C826F1#38c88b71
HKLM\Software\Microsoft\38C826F1#38c8e294
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\7723c7bb
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\7723c7bb
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier
HKEY_LOCAL_MACHINE\SOFTWARE\rhcnotj0e5eg
Please, be aware that manual removal of Rustock SpamBOT trojan is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. Thats why we strongly recommend automatic removal of Rustock SpamBOT, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.
