Trojan Horses Definitions(r) - RBot.mswkst32

RBot.mswkst32

Category: Trojan

Risk: Severe Risk

* Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine.

Description: Adds: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Microsoft Updat3

Alias: Microsoft Updat3

Signatures:
process: mswkst32.exe: MD5 Hash: 7df708860a937590d97
process: mswkst32.exe: MD5 Hash: df550c53641976a2d85
process: mswkst32.exe: MD5 Hash: 9ac2351ac41ab98d9d2
process: mswkst32.exe: MD5 Hash: f62d9e71564c599e07e
process: mswkst32.exe: MD5 Hash: fb75b544ea20b8a4fcb..

Updated: 02/17/2006
Copyright @2006 THR Computer Solutions: RBot.mswkst32