3/7: Forbot-ER Worm Contains Backdoor Functions
March 7, 2005

W32/Forbot-ER is a network worm that attempts to spread via network shares. The worm contains backdoor functions that allow unauthorized remote access to the infected computer via IRC channels.

W32/Forbot-ER spreads to unpatched computers affected by the LSASS security exploit (MS04-011).

More information can be found at Sophos page.