Main Menu
Contact Us

RDBot Worm Information

Name: RDBot
Category: Worm
Advice: Remove
Risk: Severe Risk Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine.
Description: A LSASS vulnerability worm, that propogates itself via network shares.

RDBot is used to steal passwords and product keys from a number of games and applications, can also terminate antivirus processes weakening your computer security. Some variants are known to contain keyloggers.

When infected RDBot will insert itself into the HKEY_LOCAL_MACHINE>Software>Microsoft>
Windows>CurrentVersion>Run with a variety of system security looking names.

RDbot will also add itself as a system service
further degrading the system stability.

Signatures: process: random.exe: MD5 Hash: 3f3cc8a5afba6933aca... process: suge.exe: MD5 Hash: 68c75fdc65147831499... process: random.exe: MD5 Hash: 6da7b4aa4cdeced4b0d... process: vjbczzxzs.exe: MD5 Hash: f0c6c8c8e27f0f679ad... process: msupdsrv.exe: MD5 Hash: 1ffda4c95f527b02d54... process: random.exe: MD5 Hash: 2684ffd69f8c210a07c... process: mszk.exe: MD5 Hash: babfbc267f213749ffc... process: msmacroprot32.exe: MD5 Hash: 081c6f1b809b8f32e3e... process: taksmgr.exe: MD5 Hash: ... process: taksmgr.exe: MD5 Hash: b2af1db87610ab9cfc9..
Type: Worm - Spyware's primary purpose is to collect demographic and usage information from your computer, usually for advertising purposes. Spyware usually that 'sneaks' onto a system or performs other activities hidden to the user. Spyware programs are usually bundled as a hidden component and downloaded from the Internet. These modules are almost always installed on the system secretively and try to run secretively as well.

Top Worm Visited Pages:
RDBot - Alias: Rdbot.xx variants, Spybot.xx, Sdbot.xx - 1139 visits
Rbot - Alias: Backdoor.Rbot.Gen - 594 visits
Wukill.mstray - Alias: Win32/HLLW.Wukill - 573 visits
SDBot - Alias: Wootbot.gen, Wootbot, Donk, spybot, Agobot - 477 visits
Worm.Brit.e - Alias: VBS/Chick.e@M virus - 249 visits
Trojan.Downloader.winstall - 245 visits
Gaobot - 208 visits
Win32/Darby.O - 192 visits
IRC.Worm.Pron - Alias: Pron.gen - 165 visits
Worm.P2P.SpyBot.gen - 122 visits

Random Worm Pages:
Win95.Matit.b - Alias: W95/Matit.worm
Worm.Brit.f - Alias: VBS/Chick.g@M
Worm.White.a - Alias: W32/White.gen@M
IRC.Worm.TheSpy.a - Alias: W32/Thespy
Virus.EnerKaz.worm.e - Alias: I-Worm.P2P.Sambud.b
I Love You


2006-2008 - Privacy Policy