Rbot.A_24 belongs to a large family of backdoors that try to bypass Windows security features. It is a remote administration tool, that once installed, will allow an attacker full control of the compromised machine to perform a variety of malicious activities such as executing commands and stealing data.
Process Related Changes
It creates the following process(es): - C:\WINDOWS\Temp\2d9271e77034676c3893efa394d95121.exe [ \c:\windows\temp\2d9271e77034676c3893efa394d95121.exe ]
|
