|
|
Rbot.Win32 Worm Information
| Name: |
Rbot.Win32 |
| Category: |
Worm |
| Advice: |
Remove |
| Risk: |
Severe Risk
Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine. |
| Description:
|
Rbot.Win32 is a worm with backdoor Trojan functionality.
Rbot.Win32 is capable of spreading to computers on the local network protected by weak passwords after receiving the appropriate backdoor command. Rbot.Win32 can also attempt to spread through a number of software vulnerabilities.
|
| Signatures:
|
process: win32.exe: MD5 Hash: 0ace7f1fd87f1c368d3...
process: win32.exe: MD5 Hash: c3f8582e052ced096b5.. |
| Type: |
Worm - A worm is program that propagates by attacking other computers and copying itself to them. Worms may replace files, but do not insert themselves into files (as viruses do). |
Top Worm Visited Pages:
Wukill.mstray - Alias: Win32/HLLW.Wukill - 285 visits
Rbot - Alias: Backdoor.Rbot.Gen - 273 visits
SDBot - Alias: Wootbot.gen, Wootbot, Donk, spybot, Agobot - 225 visits
Trojan.Downloader.winstall - 179 visits
Worm.Brit.e - Alias: VBS/Chick.e@M virus - 86 visits
Worm.P2P.SpyBot.gen - 54 visits
Gaobot - 43 visits
Worm.Trilissa.e - 41 visits
Win32/Darby.O - 40 visits
JS.Lame - Alias: HTML.Lame - 39 visits
Random Worm Pages:
Win32.Godog
Hermes - Alias: I-Worm.Hermes.d , W32/Hermes
Worm.P2P.Adil
Energy worm - Alias: I-Worm.Energy.a, I-Worm.Energy.a, W32/Energy.worm.gen
VBS.Shakira
MIRC.Worm.Jeepwarez.J
VBS/Sigsys.bat@MM - Alias: Bat.Windows, I-Worm.Batwin
Virus.Yarner.gen@MM - Alias: I-Worm.Yarner.b
Win32.HLLW.Lovgate.C
Worm.Hybris.Plugin
|
|
