W32/IRCBot-YK is a worm with IRC backdoor functionality for the Windows platform.
W32/IRCBot-YK runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.
When first run W32/IRCBot-YK copies itself to <System>\nvsvc64.exe.
The following registry entry is created to run nvsvc64.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
nVidia Display Driver
nvsvc64.exe