| Type |
Caption |
Section |
File name |
Description |
 |
Windows |
|
system.exe |
Added by the W32/Rbot-ACB worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
Windows 32 Rescue |
|
win32resc.exe |
Added by the W32/Forbot-EU worm. When started this infection connects to an IRC server where it waits for remote commands to executed. This startup entry refers to the NT service that it creates. Read more |
 |
Windows Bootup |
|
ms-wks32.exe |
Added by the W32/Rbot-AFM worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Windows Bootup |
|
task-mngr.exe |
Added by the W32/Rbot-AWP worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Windows Client Service 32 |
|
csrss.exe |
Added by the W32/Rbot-ALB worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Windows Config Manager |
|
winconf.exe |
Added by the W32/Rbot-AIT worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Windows connection manager |
|
Internet.exe |
Added by the W32/Rbot-APN worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Windows Debugging Tools |
|
updatecfg.exe |
Added by the W32/Rbot-AXU worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Windows DLL Loader |
|
defragfat32abc.exe |
Added by the W32/Rbot-RG worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
Windows DLL Verifier |
|
windlls.exe |
Added by the W32/Rbot-AZQ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Windows drivers update |
|
windowsupdate.exe |
Added by the W32/Rbot-ACE worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
Windows Executable |
|
winmys.exe |
Added by the W32/Rbot-ABO worm. When started, this infection connects to an IRC server where it waits for commands to execute. Read more |
 |
Windows ExpIorer |
|
[random filename] |
Added by the W32/Rbot-AKO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Windows Explorer |
|
explorer.pif |
Added by the W32/Rbot-AID worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Windows Explorer |
|
system32.exe |
Added by the W32/Rbot-AJH worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Windows Firewall |
|
FIREWAL1.EXE |
Added by the W32/Rbot-DB trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Windows Firewalll |
|
scvhost.exe |
Added by the W32/Rbot-EK trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. This infection also attempts to terminate various processes including other infections. Read more |
 |
Windows Guard |
|
WAUMGRD.EXE |
Added by the W32/Rbot-GY trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Windows Help |
|
mailinfo.exe |
Added by the W32/Forbot-FK worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Windows Help Service |
|
winhlp.pif |
Added by the W32/Rbot-AKW worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |