| Type |
Caption |
Section |
File name |
Description |
 |
MICROSFT RAMA UPDATE SUPPORT |
|
<random filename.exe> |
Added by the W32/Rbot-ASM worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
MICROSFT RAMA UPDATE SUPPORT |
|
MSED32.EXE |
Added by the W32/Rbot-AWR worm. When started, this infection connects to a remote IRC server where it waits for commands to execute Read more |
 |
MICROSFT RAMA UPDATE SUPPORT |
|
MSN32.EXE |
Added by the W32/Rbot-AWJ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
MICROSFT RAMA UPDATE SUPPORT |
|
mtakthmyn.EXE |
Added by the W32/Rbot-AUJ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Microsft Update 32 |
|
neta.exe |
Added by the W32/Rbot-AMI worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Microsoft Automatic Update Serivce |
|
msautou.exe |
Added by the W32/Rbot-AOB worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. This infection also creates the file svkp.sys in your Windows %System% folder. Read more |
 |
Microsoft Bool Value |
|
MV2.exe |
Added by a new Rbot variant. This worm connects to an IRC server on startup where it waits for remote commands. |
 |
Microsoft Client Pc |
|
spoolsrv.exe |
Added by the W32/Rbot-AQM worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Microsoft ConfgKeys |
|
wurmgrd32.exe |
Added by the W32/Rbot-ARX worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. Read more |
 |
Microsoft Config |
|
dczznet.exe |
Added by the W32/Rbot-ARL worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. This infection will also install the rootkit rdriv.sys in the Windows System folder. Read more |
 |
Microsoft Configuration Utility |
|
msconf.exe |
Added by the W32/Rbot-AFX worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Microsoft Connection Manager Monitor |
|
cmmon.pif |
Added by the W32/Rbot-AKV worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Microsoft Core Support |
|
MSxUP32.exe |
Added by the W32/Rbot-ANR worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Microsoft Corp Updates |
|
wupdates.exe |
Added by the W32/Rbot-AUU worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Microsoft DDEs Control |
|
Erun.pif |
Added by the W32/Rbot-AMU worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Microsoft Diagnostic |
|
msdiag.exe |
Added by the W32/Rbot-RV worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
Microsoft DirectX |
|
wupdate.exe |
Added by the W32/Rbot-L trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Microsoft DLL |
|
fumeta.exe |
Added by the W32/Rbot-AUG worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Microsoft DLL Extensions |
|
SystemDll.exe |
Added by the W32/Rbot-ADV worm. When started this infection connects to an IRC server where it waits for remote commands. Read more |
 |
Microsoft DLL Verifier |
|
chkfile.exe |
Added by the W32/Rbot-AOC worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. Read more |