| Type |
Caption |
Section |
File name |
Description |
 |
*windows update |
|
wruaclt.exe |
Added by the W32/Rbot-QP worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
*windows update |
|
wruauclt.exe |
Added by the W32/Rbot-SF worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
*windows update |
|
wuacrlt.exe |
Added by the W32/Rbot-QI worm. This infection connects to an IRC server where it waits for remote commands. Read more |
 |
*wmstu |
|
wmstu.exe |
Added by the W32/Rbot-TV worm. When started this infection connects to an IRC server where it waits for commands. This program starts in safe mode to make it more difficult to remove. Read more |
 |
*wuauclt.exe |
|
wmsvc.exe |
Added by the W32/Rbot-UG network worm. When started this infection connects to an IRC server where it waits for remote commands to execute. Read more |
 |
AdobeReaderPro |
|
msnxpsp.exe |
Added by the W32/Rbot-ASK worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. Read more |
 |
AdobeReaderPro |
|
ntkernell32.exe |
Added by the W32/Rbot-ATY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
AIM Instant Message Cookies |
|
[random filenames] |
Added by the W32/Rbot-AFV worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. Read more |
 |
aim quick start |
|
Aim.exe |
Added as result of a W32/Forbot-BB worm infection Read more |
 |
anything |
|
ATITAX.exe |
Added by the W32/Forbot-DP worm. This infection connects to an IRC server where it waits for remote commands to execute. Read more |
 |
AOL Instant Messenger dll runtime |
|
MSAOL32dll.exe |
Added by the W32/Rbot-ATA worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
ATI Technology Startup |
|
techstart.exe |
Added by the W32/Rbot-AEU worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Auto Update |
|
dma.exe |
Added by the W32/Rbot-AVO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Auto WinUpdate |
|
taskmrg.exe |
Added by the W32/Rbot-AFAworm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Automatic Defrag Manager |
|
defrag.exe |
Added by the W32/Rbot-AKE worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Autopdate |
|
Autopdate.exe |
Added by the W32/Rbot-AGL worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. Read more |
 |
AVSTRT |
|
navpsrvc.exe |
Added by the W32/Forbot-EF worm. When started this infection connects to a remote IRC server where it waits for commands to execute. These infections also log keystrokes, so if you are infected you should change all your passwords. Read more |
 |
blah service |
|
FaLeH.exe |
Added by the W32/Rbot-AES worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Blah Service |
|
win32.exe |
Added by the W32/Rbot-AXO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
boler.exe |
|
syser.exe |
Added by the W32/Rbot-AYS worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |