RBot.winsystem32xp
Category: Trojan
Risk:
Severe Risk
* Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine.
Description: RBot is a memory resident Trojan worm that propagates through network shares and provides various backdoor capabilities to the attacker.
Alias: None
Signatures:
process: winsystem32xp.exe: MD5 Hash: 5c08d6859f6a790e993
process: winsystem32xp.exe: MD5 Hash: cfbaa8dac320e0c58a7
process: winsystem32xp.exe: MD5 Hash: 619e6c129a119bdc117..
Copyright @2006 THR Computer Solutions: RBot.winsystem32xp