Troj/Borobt-Gen

Category: Viruses and Spyware Protection available since:25 Sep 2006 00:00:00 (GMT)
Type: Trojan Last Updated:17 Jan 2007 00:00:00 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Sophos Anti-Virus products detect members of the Troj/Borobot family of Trojans as Troj/Borobt-Gen.

Members of Troj/Borobot family allow unauthorised remote access to the computer via a network and may download and execute files from remote websites if instructed to do so. Sophos Anti-Virus products detect members of the Troj/Borobot family of Trojans as Troj/Borobt-Gen.

Members of Troj/Borobot family usually copy themselves to either the Windows system folder or to the folder Application Data\Microsoft\Internet Explorer, often using the filename LSVCHOST.EXE. Members of Troj/Borobot family usually then set an entry in the registry in order to run the copy of the worm on system startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

Members of Troj/Borobot family usually act as a proxy server, routing information from a remote user to their chosen destination.

Members of Troj/Borobot family also connect to an IRC server and may download files from remote locations and execute them if instructed to do so.

download Try Sophos products for free
Download now