Malware type: Trojan

Aliases: Winfixer (McAfee), Backdoor.Haxdoor.F (Symantec), TR/Rkit.Agent.AF.1 (Avira), Program:Win32/Winfixer (Microsoft)

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 2000, XP, Server 2003

Encrypted: No

Description: 

This Trojan is used by other malware to hide running processes by modifying assigned functions in NTOSKRNL.EXE, which handles basic Windows functions. Systems affected by this Trojan are most probably affected by WORM_RBOT or WORM_SDBOT variants.

For additional information about this threat, see:
Solution
Technical Details

Description created: Nov. 24, 2005 5:08:37 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.