Friday, March 2, 2007

W32/Rbot-GHF W32/Rbot-GHF

W32/Rbot-GHF
Spyware Worm

W32/Rbot-GHF is a network worm with IRC backdoor functionality for the Windows platform.

When first run W32/Rbot-GHF copies itself to \msnmsgsr.exe and creates the file \a.bat.

The file a.bat is detected as Troj/Batten-A.

Labels: ,