Prevx Research Division
ROBOFORM.DLL
System Back DoorFree PC Cleanup from Webroot
Use Webroot SecureAnywhere to remove ROBOFORM.DLL.
"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User
Associated Malware Groups
The unsafe files using this name are associated with the malware groups:
- System Back Door
- Worm
File Behavior
ROBOFORM.DLL has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Hijacks your email account which could allow email to be sent in your name
- Uses a Registered MAPI
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Creates new file extentions so that Internet Explorer will automatically open and potentially execute additional file types
- Adds new menu items in the Internet Explorer Right Click menu
- Adds a Registry Key (RUNONCE) to auto start Programs on system start up
- This Process can access Web Mail Servers
- Found on infected systems and resists interrogation by security products
ROBOFORM.DLL has been the subject of the following behavior:
- Registered as a Dynamic Link Library File
- The process is hooked into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
- Created as a process on disk
- Created as a Toolbar Extension for Internet Explorer
- Enabled as an In Process Object/Server - Common with DLL Injections
- Deleted as a process from disk
- Created and Registered as a Browser Helper Object in Internet Explorer
Country Of Origin
The filename ROBOFORM.DLL was first seen on May 18 2007 in the following geographical regions of the Webroot community:
- Turkey on May 18 2007
- Spain on Nov 16 2007
- Europe on Dec 5 2007
- The United Kingdom on May 18 2012
File Name Aliases
ROBOFORM.DLL can also use the following file names:
- AI.ROBOFORM.PRO.V6.9.85-TE/CRACK/ROBOFORM.DLL
- ˜Ê
- 41565874.SVD
- 20952572.DLL
Filesizes
The following file size has been seen:
- 2,866,688 bytes
- 1,650,688 bytes
- 5,702,472 bytes
- 5,723,136 bytes
- 17,013,488 bytes
- 2,834,432 bytes
File Type
The filename ROBOFORM.DLL refers to many versions of a dynamic link library.
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.