| Type |
Caption |
Section |
File name |
Description |
 |
SOUNDMAN Microsoft Help |
|
soun.pif |
Added by the W32/Rbot-AIU worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
SP1-Update |
|
sp1update.exe |
Added by the W32/Rbot-JG trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
spoolsv service |
|
spoolsv32.exe |
Added by the W32/Rbot-AHP worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Start aThe Roll |
|
enotxa2.exe |
Added by the W32/Rbot-PV worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
start uploading |
|
crsss.exe |
Added by the W32/Rbot-SZ worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
Start Upping |
|
iexplorerupdt.exe |
Added by the W32/Rbot-RR worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
starter |
|
scvhostingg.exe |
Added by the W32/Forbot-FB worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Starting up |
|
wvsvc.exe |
Added by the W32/Rbot-NF trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. These infections are usually capable of logging keystrokes, retrieve cd keys, and flood other computers. Read more |
 |
Startup Configuration |
|
[random 6 letter filename] |
Added by the W32/Rbot-ARV worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. Read more |
 |
Startup Configuration |
|
wztoid.exe |
Added by the W32/Rbot-ASD worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. Read more |
 |
steam |
|
steam.exe |
Added by the W32/Rbot-AJT worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
stratas |
|
xmconfig.exe |
Added by the W32/Rbot-AHR worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. Read more |
 |
strmsnmsgr |
|
msnmsgrs.exe |
Added by the W32/Rbot-ACQ worm. When started, this infection connects to an IRC where it waits for remote commands to execute. Read more |
 |
strtas |
|
loc1.exe |
Added by the W32/Rbot-AZU worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. This infection also uses the rootkit msdirectx.sys. Read more |
 |
strtas |
|
lockx.exe |
Added by the W32/Rbot-APL worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. When first run this infection creates the files %System%msdirectx.sys and %SystemDrive%xz.bat. Read more |
 |
SVC Service |
|
svc32.pif |
Added by the W32/Rbot-ASC worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. Read more |
 |
SVCH Service |
|
svch32.pif |
Added by the W32/Rbot-ASZ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
svnloader |
|
svnload32.exe |
Added by the W32/Rbot-ACU worm. When started this infection connects to an IRC server where it waits for remote commands. Read more |
 |
svshost32 |
|
svshost32.exe |
Added by a variant of the Rbot worm. This worm, when started, connects to IRC servers where it sits in a desginated channel waiting for commands from a remote user. |
 |
Syga432te Pe432rsonal Firewall |
|
MrNo4236.exe |
Added by the W32/Rbot-AQY worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |