Troj/Borobot-A is a backdoor Trojan.
Troj/Borobot-A copies itself with the filename SVCHOST.EXE to either the Windows system folder or to the folder Application Data\Microsoft\Internet Explorer. Troj/Borobot-A then sets the following entry in the registry so as to run the copy of itself on system startup, though it may delete the entry during execution:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
.mscsbl
Troj/Borobot-A connects to an IRC server and acts as a backdoor Trojan, allowing access to the infected computer by a remote user.
Troj/Borobot-A may download files from remote locations to the Windows system folder and execute them if instructed to do so by a remote user.
Troj/Borobot-A acts as a proxy server, routing information from a remote user to their chosen destination.
Troj/Borobot-A allows a remote user to send emails from the infected computer using its own email engine.