Troj/Borobt-Gen

Category: Viruses and Spyware Protection available since:25 Sep 2006 00:00:00 (GMT)
Type: Trojan Last Updated:17 Jan 2007 00:00:00 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Sophos Anti-Virus products detect members of the Troj/Borobot family of Trojans as Troj/Borobt-Gen.

Members of Troj/Borobot family allow unauthorised remote access to the computer via a network and may download and execute files from remote websites if instructed to do so. Sophos Anti-Virus products detect members of the Troj/Borobot family of Trojans as Troj/Borobt-Gen.

Members of Troj/Borobot family usually copy themselves to either the Windows system folder or to the folder Application Data\Microsoft\Internet Explorer, often using the filename LSVCHOST.EXE. Members of Troj/Borobot family usually then set an entry in the registry in order to run the copy of the worm on system startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

Members of Troj/Borobot family usually act as a proxy server, routing information from a remote user to their chosen destination.

Members of Troj/Borobot family also connect to an IRC server and may download files from remote locations and execute them if instructed to do so.