W32/Robot-A

Category: Viruses and Spyware
Type: Win32 worm
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Robot-A is an IRC backdoor Trojan that may also attempt to spread using
the RPC DCOM exploit.

W32/Robot-A copies itself as SVSHOST.EXE to the Windows system folder
and creates the following registry entry in order to run on system startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Dll Service Manager.

The IRC backdoor component allows a malicious user to control an infected
system. The backdoor establishes a connection to a remote IRC server which
then serves as the control channel for the attacker.

download Try Sophos products for free
Download now