Eboscro is a worm that spreads by copying itself to removable media and mapped network drives. Once executed, it secretly installs itself to the system and runs a payload. The parasite terminates running antiviruses, firewalls and other security-related applications. It also kills some other processes. Then the worm opens a back door providing the attacker with unauthorized remote access to the compromised computer. The intruder can download and execute arbitrary files, take screenshots, collect system information and track user Internet activity. Eboscro automatically runs on every Windows startup.