Troj/Aimbot-BC

Category: Viruses and Spyware
Type: Trojan
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Aimbot-BC is a Trojan for the Windows platform.

Troj/Aimbot-BC runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

When first run Troj/Aimbot-BC copies itself to <Windows>\aig.exe.

The following registry entry is created to run aig.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
msvchost
<Windows>\aig.exe

The following registry entry is set:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
msvchost
msvchost.exe<Windows>\aig.exe