Skip to main content
Skip to main content
Microsoft Security Intelligence
Published May 11, 2011 | Updated Sep 15, 2017

Worm:Win32/Cambot.A

Detected by Microsoft Defender Antivirus

Aliases: BackDoor.Blackshades.1 (Dr.Web) Win32/Spy.VB.NLS trojan (ESET) P2P-Worm.Win32.BlackControl (Ikarus) W32/Generic.worm!p2p (McAfee)

Summary

Worm:Win32/Cambot.A is a malware that can connect to a remote server to accept and execute commands from a remote attacker. The malware could be instructed to spread to removable drives, capture keystrokes and screenshots, download additional files and other actions. The malware could capture form data entered when visiting certain websites.

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.

This malware attempts to steal sensitive and confidential information from affected users to perpetrate fraud. If you believe that your personal financial information may have been compromised, please refer to the following advisory for additional advice:

Follow us