Troj/IRCBot-RK is a Trojan for the Windows platform.
When executed, Troj/IRCBot-RK copies itself to the system folder as winrxd64.exe, and sets the following Registry entry to run itself at system startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
sysygm64
%system%\winrxd64.exe
Once running, Troj/IRCBot-RK connects to a remote IRC server to await commands.
It contains code to provide SMTP proxy functionality.