RBot.msints
Category: Trojan
Risk:
Severe Risk
* Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine.
Description: RBot is a Trojan worm that spreads through network shares and provides various backdoor capabilities to the attacker. Attacks hosts on port 135. Connects to IRC server @ 216.187.196.130:6667
Alias: None
Signatures:
process: msints.exe: MD5 Hash: cc4d1a79d17497cc7ac..
Copyright @2006 THR Computer Solutions: RBot.msints