TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
TROJ_ROOTKIT.BO
Overview

Malware type: Trojan

Aliases: Trojan-Proxy.Win32.Agent.jl (Kaspersky), New Malware.ca !! (McAfee), Hacktool.Rootkit (Symantec), BDS/ForBot.AF (Avira), Troj/NTRootK-AA (Sophos), Trojan:Win32/Meredrop (Microsoft)

In the wild: Yes

Destructive: Yes

Language: English

Platform: Windows 2000, XP, Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Medium

Distribution potential:

Low

Description: 

This memory-resident Trojan is usually dropped and used by other malware to hide running processes.

It hides malware processes and other malicious activities on an affected system by modifying the assigned functions in a certain file, which handles basic Windows functions on systems running on Windows 2000, XP, and Server 2003. Incorrect modification of the mentioned file may cause affected systems to crash.

For additional information about this threat, see:
Solution
Technical Details

Description created: Jun. 17, 2006 3:19:43 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.