high
Summary
Summary
Action- More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Characteristics |
|
| Protection available since | 8 March 2005 21:17:14 (GMT) |
| Last updated | 24 March 2005 09:26:58 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
More Information
W32/Radbot-A is a multi-component worm
W32/Radbot-A drops files detected as W32/Rbot-VN and Troj/Istbar-AH.
The worm W32/Rbot-VN attempts to spread W32/Radbot-A to remote network shares with weak passwords. W32/Radbot-A is a multi-component worm.
W32/Radbot-A drops and runs three files in the Windows folder:
1.EXE
2.EXE
Z.BAT
The file 1.EXE is detected as Troj/Istbar-AH. The file 2.EXE is detected as W32/Rbot-VN.
The file Z.BAT runs the two EXE files and then deletes both the archive and itself.
The worm W32/Rbot-VN attempts to spread W32/Radbot-A to remote network shares with weak passwords.
|
