| Type |
Caption |
Section |
File name |
Description |
 |
Automatic Defrag Manager |
|
defrag.exe |
Added by the W32/Rbot-AKE worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Autopdate |
|
Autopdate.exe |
Added by the W32/Rbot-AGL worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. Read more |
 |
AVSTRT |
|
navpsrvc.exe |
Added by the W32/Forbot-EF worm. When started this infection connects to a remote IRC server where it waits for commands to execute. These infections also log keystrokes, so if you are infected you should change all your passwords. Read more |
 |
avupdate |
|
msnftp.exe |
An Rbot variant. This infections connects to an IRC server where it awaits commands from a remote user. Read more |
 |
Bios Protector |
|
vmaocesza.exe |
Added by the W32/Rbot-EU trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
BIOS XP Loader |
|
[random] |
Added by the W32/Rbot-IC trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
blah service |
|
FaLeH.exe |
Added by the W32/Rbot-AES worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Blah Service |
|
win32.exe |
Added by the W32/Rbot-AXO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
boler.exe |
|
syser.exe |
Added by the W32/Rbot-AYS worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Browser Help Svc |
|
BHSV.EXE |
Added by the W32/Rbot-AVQ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
BS Mediaplayer |
|
bsplyr.exe |
Added by the W32/Rbot-OU trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. These infections are usually capable of logging keystrokes, retrieve cd keys, and flood other computers. Read more |
 |
ccApp.exe |
|
ccApp.exe |
Added by the W32/Rbot-HJ trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Cgywin |
|
cgywin32.exe |
Added by the W32/Rbot-AEI worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Compliant |
|
compliant.exe |
Added by the W32/Rbot-LB trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. This infection terminates certain processes and logs keystrokes to a file called syste.txt. Read more |
 |
Configuration Loader |
|
lexplore.exe |
Added by the W32/Rbot-AGX worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
crssm.exe |
|
crssm.exe |
Added by the W32/Rbot-AFH worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Current Security Config |
|
csecure.exe |
Added by the W32/Rbot-AMO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Daemons Updates Services |
|
jkiw.exe |
Added by the W32/Rbot-RJ worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
Daemons Updates Services |
|
lnql.exe |
Added by the W32/Rbot-RJ worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
DamedWare Services |
|
dwdrce.exe |
Added by the W32/Rbot-AOJ worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. Read more |