RBot.CGH

Category: Trojan

Risk: Severe Risk

* Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine.

Description: RBot is a memory resident Trojan worm that propagates through network shares and provides various backdoor capabilities to the attacker.

Alias: Win32.Rbot.CGH

Signatures:
process: msnmessag.exe: MD5 Hash: e5c80dbd8022c965d43..