| Type |
Caption |
Section |
File name |
Description |
 |
sads |
|
sdsa.exe |
Added by the W32/Rbot-PA worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
Scan Register |
|
SSMS.EXE |
Added by the W32/Rbot-AT trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
scheduler |
|
schedul3.exe |
Added by the W32/Rbot-AVX worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Screen Saver |
|
scrnsaver.scr |
Added by the W32/Rbot-AGP worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
scsrs |
|
scsrs.exe |
Added by the W32/Rbot-VF worm. When started this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
sdkupdate22 |
|
SDK0mCORE.exe |
Added by the W32/Forbot-DT network worm. When started this infections connects to an IRC server where it waits for remote commands. Read more |
 |
secure |
|
svshost.exe |
Added by the W32/Rbot-AFO worm. When started, this infection connects to a remote IRC server and waits for commands to execute. Read more |
 |
Security Patches |
|
wuamgrdk.exe |
Added by the W32/Rbot-IQ trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Security Patches |
|
wuamgrdn.exe |
Added by the W32/Rbot-JI trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Security Patches |
|
wuamgrdr.exe |
Added by the W32/Rbot-IN trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Service Monitor |
|
WinOcx.exe |
Added by the W32/Rbot-AQJ worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Service Screan |
|
<random filename> |
Added by the W32/Rbot-BAC worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Services host |
|
svchost.com |
Added by the W32/Rbot-EU trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. This infection also attempts to terminate various processes including other infections. Read more |
 |
services32.exe |
|
services32.exe |
Added by the W32/Forbot-FN worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
ServicesLog |
|
ccapp32.exe |
Added by the W32/Rbot-AMX worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Session Manager Subsystem |
|
smssa.exe |
Added by the W32/Rbot-AGS worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
SetPoint |
|
SetPoint.exe |
Added by the W32/Rbot-BWI worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. Read more |
 |
shell update |
|
shellexec.exe |
Added by the W32/Rbot-ANC worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
snapple |
|
snapple.exe |
Added by the W32/Forbot-EG worm. When started this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
softIce Update 32 |
|
wininits.exe |
Added by the W32/Rbot-ANB worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |