| |
Descrizione: |
Worm/ForBot.F is a memory resident Internet worm that tries to connect to ip134-053-059-033.s59.muohio.edu:6667. It will open TCP port 2812 and 14817.
If executed, the worm copies itself in the \windows\%system% directory under the filename "smsc.exe". Additionally, it deletes itself from the current directory it is run. |
