Worm.Rbot.AATS
Worm.Rbot.AATS spreads by secretly copying itself across networks shares. Because Worm.Rbot.AATS is able to mutate, it is especially difficult to manually detect and remove it. Worm.Rbot.AATS may create a backdoor through which remote attackers can access a compromised PC. Additional malware programs may also be installed onto a PC by Worm.Rbot.AATS. Securing your system with an effective security application will prevent Worm.Rbot.AATS from infecting your PC.
Table of Contents
Aliases
4 security vendors flagged this file as malicious.
| Anti-Virus Software | Detection |
|---|---|
| - | Win32/IRCBot.worm.variant |
| - | TrojanDropper:Win32/Agent.BAD |
| - | Mal/Generic-E |
| - | BackDoor-EFI |
File System Details
Worm.Rbot.AATS may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %System%\cmd.exe | |
| 2. | %System%\taskmgr.exe | |
| 3. | %System%\mmc.exe | |
| 4. | %Windir%\system.ini |
Registry Details
Worm.Rbot.AATS may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
