Skip to main content
Skip to main content
Microsoft Security Intelligence
Published Oct 28, 2009 | Updated Sep 15, 2017

Worm:Win32/Yoybot.gen

Detected by Microsoft Defender Antivirus

Aliases: Win32/Rbot.JPR (CA) Worm.Win32.AutoRun.fmx (Kaspersky) W32/AutoRun.SND (Norman) Worm.AutoRun.NDD (VirusBuster) Win32/AutoRun.IRCBot.Y (ESET) W32/Autorun.worm!a (McAfee) W32/AutoRun.DJ.worm (Panda)

Summary

Worm:Win32/Yoybot.gen is a generic detection for a family of malicious IRC bots that are able to spread through removable drives and file sharing networks.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials. For more information about using antivirus software, see http://www.microsoft.com/security/antivirus/av.aspx.
Additional recovery steps
This threat may make lasting changes to an affected system’s configuration that will NOT be restored by detecting and removing this threat. For more information on returning an affected system to its pre-infected state, please see the following article/s: 
Follow us