Ixbot

Ixbot is an Internet worm, which spreads through instant messages sent using AIM, AOL Triton or MSN Messenger applications. Such messages contain a certain text and a malicious link pointing to an infected file. Once the user clicks on a link, the worm silently installs itself to the computer and runs a spreading routine. The worm includes an integrated IRC-controlled backdoor, which provides the attacker with unauthorized remote access to a compromised PC. The intruder can download and execute arbitrary files. Ixbot creates a lot of infected files with meaningful names in several shared folders found in the computer. It also terminates some antivirus applications and prevents them from running on computer startup. Ixbot runs every time Windows loads.