Threat Search: 

ThreatExpert's Statistics for W32/Rbot-Fam [Sophos]:

W32/Rbot-Fam [Sophos] is also known as:
Threat AliasNumber of Incidents
Backdoor:Win32/Rbot.gen [Microsoft]59
Backdoor.Win32.Rbot.gen [Kaspersky Lab]42
WORM_RBOT.GEN-1 [Trend Micro]42
W32/Sdbot.worm.gen.g [McAfee]36
W32.Spybot.Worm [Symantec]35
Win32/IRCBot.worm.Gen [AhnLab]33
Backdoor.Rbot [Ikarus]25
WORM_RBOT.GEN [Trend Micro]23
Exploit-DcomRpc.gen [McAfee]17
Worm.Akbot.Gen [PC Tools]16
Trojan.QHosts.G [PC Tools]13
Backdoor.Win32.IRCBot.gen [Kaspersky Lab]11
Backdoor.Sdbot [Symantec]9
Backdoor.Win32.Agobot [Ikarus]9
New Malware.b [McAfee]9
W32.Randex.gen [Symantec]7
Worm.RBot.Gen.16 [PC Tools]6
Backdoor.Win32.Rbot.aeu [Kaspersky Lab]5
Backdoor.Win32.SdBot [Ikarus]5
Backdoor.Win32.Rbot.bng [Kaspersky Lab]4
W32.IRCBot [Symantec]4
Net-Worm.Spybot [PC Tools]3
W32.IRCBot.Gen [Symantec]3
W32/Sdbot.worm [McAfee]3
Backdoor.Win32.IRCBot [Ikarus]2
Backdoor.Win32.Rbot [Ikarus]2
W32/Sdbot.worm.gen [McAfee]2
Worm.RBot.Gen.6 [PC Tools]2
Backdoor.IRCBot!sd6 [PC Tools]1
Backdoor.Win32.EggDrop.v [Kaspersky Lab]1
Backdoor.Win32.Rbot.absf [Kaspersky Lab]1
Backdoor.Win32.Rbot.pxs [Kaspersky Lab]1
Backdoor.Win32.SdBot.gen [Kaspersky Lab]1
Backdoor:Win32/Gaertob.A [Microsoft]1
Backdoor:Win32/IRCbot.gen!K [Microsoft]1
Bloodhound.Exploit.1 [Symantec]1
Exploit:Win32/MS06040.gen [Microsoft]1
Trojan.BAT.Regger.b [Kaspersky Lab]1
Trojan:Win32/Malex.gen!J [Microsoft]1
W32.SillyIM [Symantec]1
W32/IRCBot.gen.t [McAfee]1
Worm.RBot.Gen.14 [PC Tools]1
Worm.RBot.Gen.23 [PC Tools]1
Worm:Win32/DuiskBot.gen [Microsoft]1
WORM_RBOT.HAA [Trend Micro]1

W32/Rbot-Fam [Sophos] is known to be created as:
%System%\agl23.exe
%System%\aig.exe
%System%\bnmveqfts.exe
%System%\byjjebmo.exe
%System%\cftmon.exe
%System%\crss.exe
%System%\dsass.exe
%System%\eset.exe
%System%\hxjjoajvgpcu.exe
%System%\imchemaoa.exe
%System%\kii.exe
%System%\klxyszuy.exe
%System%\lcass.exe
%System%\margarin.exe
%System%\msconf.exe
%System%\msconfd.exe
%System%\msnmsgr.exe
%System%\msupdate.exe
%System%\nod64.exe
%System%\nodservice.exe
%System%\npyormm.exe
%System%\ntsupdate.exe
%System%\phqghu.exe
%System%\qualysguard.exe
%System%\riotbot.exe
%System%\rundll.exe
%System%\rundll09.exe
%System%\rundll97.exe
%System%\rundlll32.exe
%System%\schost.exe
%System%\scvhost.exe
%System%\security.exe
%System%\service.exe
%System%\sfawbfettj.exe
%System%\stz.exe
%System%\sup.exe
%System%\svchost32.exe
%System%\svchostt32.exe
%System%\sysregi.exe
%System%\system32dll.exe
%System%\systtem.exe
%System%\taskgmr.exe
%System%\winapi32.exe
%System%\winlogin.exe
%System%\winlogom.exe
%System%\winmanager32.exe
%System%\winserv.exe
%System%\winupdate.exe
%System%\wplayer.exe
%System%\wry.exe
%System%\yerjpzguyf.exe
%System%\zservice.exe
%Windir%\mssmpse.exe
%Windir%\nodkrn23.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.