Analysis of the W32/Rbot-AMP Win32 worm, with information on its behaviour and recovery instructions.

... Rbot-NZ, W32/Rbot-PR, W32/Rbot-QH, W32/Rbot-QP, W32/Rbot-RD, W32/Rbot-SQ, W32/Rbot-TB, W32/Rbot-UE, W32/Rbot-XW, W32/Rbot-YA, W32/Rbot-AAY, W32/Rbot-AHT, W32/Rbot-AMN, W32/Rbot-AMP ...

Enterprise instant messaging management security software for business, Akonix secures your companies enterprise network by securing yahoo messenger, msn messenger, aol instant ...

WORM_RBOT.AMP ... Backdoor.Win32.VanBot.d (Kaspersky), W32/Sdbot.worm!MS06-040 (McAfee), W32.Randex.GEL ...

WORM_RBOT.AMP Aliases: Backdoor.Win32.VanBot.d (Kaspersky), W32/Sdbot.worm!MS06-040 (McAfee), W32.Randex.GEL (Symantec), BDS/Pcclient.qf (Avira), W32/Vanebot-K (Sophos), Worm:

BackDoor.Generic3.LKB, Backdoor.SdBot.AWU, Backdoor.Win32.PcClient.qf, Generic.Sdbot.3F96B88F, IRC/BackDoor.SdBot2.JYO, New Malware.b, W32/Sdbot.WCQ, W32/Sdbot.worm, WORM_RBOT.AMP ...

MSDOS Security Service: msdos.pif: Added by the W32/Rbot-AMP IRC and backdoor worm. Read more: MS-DOS Security Service: ms-dos.pif: Added by the W32/Rbot-AMR worm.

MsSystem: msdos.exe: Adult content downloader - see here Read more: MSDOS Security Service: msdos.pif: Added by the W32/Rbot-AMP IRC and backdoor worm. Read more

Trojan Program Backdoor.Win32.Rbot.gay (Yesterday my Kaspersky found it,and it's deleted as I ... gay is a 3 letter word, that's why: http://www.kaspersky.com/viruswatchlite?se...amp ...

Trojan Program Backdoor.Win32.Rbot.gay (Yesterday my Kaspersky found it,and it's deleted as I ... gay is a 3 letter word, that's why: http://www.kaspersky.com/viruswatchlite?se...amp ...

... Agobot.AML, Win32/Agobot.AMM, Win32/Agobot.AMN, Win32/Agobot.AMO, Win32/Agobot.AMP, Win32 ... IRCBot.OI, Win32/Myfip.H, Win32/Myfip.I, Win32/Mytob.C, Win32/PSW.Lineage.AA, Win32/Rbot ...

Win32/Ircbrute ... 6/5/08: WORM_RBOT.AEU href="default5.asp?VName= WORM_RBOT.AEU&VSect=T#PROCESSES">processes . It runs on Windows 95, 98, ME, NT, 2000, and XP. 82358 WORM_RBOT..

... worm.gen.bz (McAfee), W32.Spybot.Worm (Symantec), Worm/ Rbot.110592.5 (Avira), W32/ Rbot-ARD (Sophos),. English. Worm. Windows 98, ME, NT, 2000, XP,... 7/16/08: POSSIBLE_MLWR-13 amp;alt ...

... Win32/PSW.Legendmir.NBK, Win32/PSW.Legendmir.NBL, Win32/PSW.Legendmir.NBM, Win32/PSW.Legendmir.NBN, Win32/PSW.Legendmir.NBO, Win32/PSW.MSN.Faker.W, Win32/RBot.AMO, Win32/RBot.AMP ...

Troj/Wabthief-A Troj/Dloadr-AMP W32/Rbot-FMU Troj/Hupigon-PQ Troj/Dloadr-AMO Softomate http://www.sophos.com/downloads/ide/ _____

... Agent.51 + Win32.Agent.aaw ++ Win32.Agent.agh + Win32.Autoit.p ++ Win32.AutoRun.lx ++ Win32.Bifrose.da ++ Win32.Delf.Crypt.c ++ Win32.Delf.qc ++ Win32.VB.f + Win32.Rbot ...

... Agent.51 + Win32.Agent.aaw ++ Win32.Agent.agh + Win32.Autoit.p ++ Win32.AutoRun.lx ++ Win32.Bifrose.da ++ Win32.Delf.Crypt.c ++ Win32.Delf.qc ++ Win32.VB.f + Win32.Rbot ...

Win32.Agobot.amp Win32.Antinny.p Win32.Bancos.bax Win32.Banker.egt Win32.Banker.ffh ... Win32.Rbot.ajr Win32.Rbot.cbq Win32.Rbot.exh Win32.Riler Win32.Small.bab Win32.Small.egl

Added by the W32/Rbot-XG WORM/backdoor, it connects to an IRC channel to allow unauthorized access. ... Read More: mcafee Software Intrenet: mcafee.exe

Added by the W32/Rbot-UU worm. When started, this infection connects to an IRC server where it waits for remote commands. ... Read More: Windows Service Manager: userint32.exe

Binary MD5: 45526b7d30508392e2e20043b69188f2, C&C: net.m4ghr3b.net:4163 ... http:// www.zendurl.com/ sour1 /rBot .exe - Win32.RBot http:// www.spiritoconlascure.it ...

Binary MD5: 45526b7d30508392e2e20043b69188f2, C&C: net.m4ghr3b.net:4163 ... http:// www.zendurl.com/ sour1 /rBot .exe - Win32.RBot http:// www.spiritoconlascure.it ...

... Agobot.AML, Win32/Agobot.AMM, Win32/Agobot.AMN, Win32/Agobot.AMO, Win32/Agobot.AMP, Win32 ... IRCBot.OI, Win32/Myfip.H, Win32/Myfip.I, Win32/Mytob.C, Win32/PSW.Lineage.AA, Win32/Rbot ...

????????? ????????? ??? ?? Windows, ??????????????? ?????????????? ???????????????? ????????? ...

QQHelper-DB [Trj], Win32:Rbot-EEQ [Trj], Win32:Rbot-EER [Trj], Win32:Rbot-EES [Trj], Win32:Rbot-EET [Trj], Win32:Rbot-EEU [Trj], Win32:Rbot-EEV [Trj], Win32:

Analyse du Ver Win32 W32/Rbot-AMP avec informations sur son comportement et des instructions de désinfection.

Win32.Backdoor.RBot +5 Win32.Backdoor.SDBot +9 Win32.Backdoor.VanBot +2 Win32.Backdoor.VB Win32.Dialer.Trojan +3 Win32.Generic.PWS +2 Win32.Generic.Worm +4

... Backdoor.Bifrose Win32.Backdoor.CiaDoor Win32.Backdoor.Delf Win32.Backdoor.IRCBot +7 Win32.Backdoor.PcClient Win32.Backdoor.Poebot +3 Win32.Backdoor.RBot +18 Win32 ...

MSDOS Security Service: X: msdos.pif: Added by the W32/Rbot-AMP WORM! MSDOS Service: X: MSDOS.PIF: Added by the W32/RBOT-AIY WORM! MSDOS Windows Service: X: MSDOS.PIF: Added by the W32/Rbot-AKF WORM

... Win32/PcClient, Win32/PcClient.IF (2), Win32/PSW.Lineage.DN (4), Win32/Rbot (4 ... ALL, Win32/TrojanDownloader.Small.ALZ (2), Win32/TrojanDownloader.Small.AMP (2), Win32 ...