Virus Database

Backdoor.Rbot.gen

Description Backdoor.Rbot.gen

Backdoor.Rbot is a family of Trojan programs for Windows, which offer the user remote access to victim machines. The Trojans are controlled via IRC, and have the following functions:
monitor networks for interesting data packets (i.e. those containing passwords to FTP servers, and e-payment systems such as PayPal etc.)
scan networks for machines which have unpatched common vulnerabilties (RPC DCOM, UPnP, WebDAV and others); for machines infected by Trojan programs (Backdoor.Optix, Backdoor.NetDevil, Backdoor.SubSeven and others) and by the Trojan components of worms (I-Worm.Mydoom, I-Worm.Bagle); for machines with weak system passwords
conduct DoS attacks
launch SOCKS and HTTP servers on infected machines
send the user of the program detailed information about the victim machine, including passwords to a range of computer games

Check other viruses! Be aware! Use Antiviral Software

Brontozavr.1280

Description Brontozavr.1280

It is a dangerous memory resident parasitic virus. It hooks INT 10h, 21h and writes itself to the end of files that are executed. The virus contains lot of bugs, and it is necessary to arrange a special environment to force the virus to infect a file. The virus infects the files as COM (it writes itself to the end of the file, and overwrites first three bytes of the file with CALL Virus instruction), but it infects only the files that have not "COM" file name extension. There also are mistypings in virus assembler code, and as a result the virus rather corrupts the files that infects them.
The virus contains the text strings:
AIDSTEST.EXE
Virus BRONTOZAVR ,04.04.94 ,by CRAZY
COMMAND.COM

Brothers.2045

Description Brothers.2045

This is a harmless memory resident virus which hooks INT 21h and infects in a standard way COM- and EXE-files. It contains the texts: "Brothers in arm.Copyright (C) 1990. V 1.0", ":*.EXE".

Home