W32/Forbot-Fam

Category: Viruses and Spyware Protection available since:23 Nov 2004 00:00:00 (GMT)
Type: Win32 worm Last Updated:24 Apr 2013 01:01:28 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Forbot-Fam detects members of the Forbot family of worms.

W32/Forbot-Fam worms typically attempt to spread to remote network shares and open up a backdoor on the infected computer.

W32/Forbot-Fam worms also exploit vulnerabilities, including the LSASS exploit (see MS04-11). W32/Forbot-Fam detects members of the Forbot family of worms.

W32/Forbot-Fam worms typically attempt to spread to remote network shares and open up a backdoor on the infected computer.

W32/Forbot-Fam worms also exploit vulnerabilities, including the LSASS exploit (see MS04-11).

W32/Forbot-Fam worms copy themselves to the Windows system folder and create registry entries under the following locations in order to run automatically on system startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

download Try Sophos products for free
Download now