Worm.Bancorkut.B

Worm.Bancorkut.B is a form of malicious software, also further categorized as a Worm infection.

Worm.Bancorkut.B may form part of a remote administrator application that allows a user to work on one or more remote computers.

The application contains features such as File Transfer, NT security and Telnet. Worm.Bancorkut.B is generally used when performing administration tasks, remotely.

Worm.Bancorkut.B may display the following behavior:

* The Process is packed and/or encrypted using a software packing process
* Modifies Windows Security Policies to restrict/expand User Privileges on the machine
* Can communicate with other computers using TCP protocols
* Executes a Process
* This process creates other processes on disk
* Disables Access to the Windows Registry Editor
* Disables Access to the Task Manager built into Windows
* Disables Windows Automatic Updates including Security Updates and Patches
* This Process Deletes Other Processes From Disk
* Registers a Dynamic Link Library File
* Copies files
* Creates new folders in the file system
* Adds a Registry Key (RUN) to auto start Programs on system start up
* Writes to another Process\'s Virtual Memory (Process Hijacking)
* The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
* Adds products to the system registry
* Creates a new Background Service on the machine
* Loads and Executes a System Driver File
* Terminates Processes
* The Process is polymorphic and can change its structure
* Creates system tray pop-up messages, errors and security warnings
* Disables the built in Windows File Protection System

Should a computer system be infiltrated with this dubious malware application, Worm.Bancorkut.B, is it highly recommended to employ the services of a fully functional and up to date antispyware application, in order to rid the system infected of Worm.Bancorkut.B and all its affiliated components.