| Type |
Caption |
Section |
File name |
Description |
 |
Default |
|
lsassM.exe |
Added by the W32/Rbot-UW worm. When connected this infections connects to an IRC server where it waits for remote commands to execute. Read more |
 |
demm386.exe |
|
DEMM386.EXE |
Added by the W32/Rbot-EO trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Dev Gnu Cpp |
|
devcpp.exe |
Added by the W32/Rbot-RU worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
Dev Manager |
|
devspecs.exe |
An Rbot variant. This infection connects to an IRC server where it will await commands from a remote user. |
 |
DirectX9 Diag |
|
dx9diag.exe |
Added by the W32/Rbot-ALT worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Dns Server |
|
dnswn.exe |
An Rbot variant. This infection connects to an IRC server where it will await commands from a remote user. Read more |
 |
eMCryT Sh3ars Panagers |
|
<random filename.exe> |
Added by the W32/Rbot-AWI worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
emule |
|
emule.exe |
Added by the W32/Rbot-ALZ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
ETB Tester |
|
etbtest.exe |
Added by the W32/Rbot-ABR. When this infection starts it connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Expl0rer soft |
|
expl0rer.pif |
Added by the W32/Rbot-ARE worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Explorer soft |
|
explorer.com |
Added by the W32/Rbot-ARM worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Explorer soft |
|
explorer.pif |
Added by the W32/Rbot-APK worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Fat32 Microsoft |
|
fat32.exe |
Added by the W32/Rbot-EL trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. This infection also attempts to terminate various processes including other infections. Read more |
 |
FireFox |
|
firefox.exe |
Added by the W32/Rbot-ATP worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Firewall Sp2 system |
|
sys32Conf.exe |
Added by the W32/Rbot-ABT worm. This infection connects to an IRC server on startup where it waits for remote commands to execute. Read more |
 |
Firewall Update System1 |
|
WinedowsUpdater1.exe |
Added by the W32/Rbot-ARU worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. Read more |
 |
GLF Network Lan Monitor |
|
NPFMNTOR.exe |
Added by the W32/Rbot-AGY worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. Read more |
 |
GlobalSCAPE |
|
<filename>.exe |
Added by the W32/Rbot-AYM worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
google |
|
google.exe |
Added by the W32/Rbot-AMW worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Google Earth |
|
<random name>.pif |
Added by the W32/Rbot-AXK worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |