Sophos Anti-Virus products detect members of the Troj/Borobot family of Trojans as Troj/Borobt-Gen.
Members of Troj/Borobot family allow unauthorised remote access to the computer via a network and may download and execute files from remote websites if instructed to do so.
Sophos Anti-Virus products detect members of the Troj/Borobot family of Trojans as Troj/Borobt-Gen.
Members of Troj/Borobot family usually copy themselves to either the Windows system folder or to the folder Application Data\Microsoft\Internet Explorer, often using the filename LSVCHOST.EXE. Members of Troj/Borobot family usually then set an entry in the registry in order to run the copy of the worm on system startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Members of Troj/Borobot family usually act as a proxy server, routing information from a remote user to their chosen destination.
Members of Troj/Borobot family also connect to an IRC server and may download files from remote locations and execute them if instructed to do so.