Cuebot.k is a worm that spreads through instant messages using the AOL Instant Messenger program. Once executed, the parasite installs itself to the system and runs a spreading routine. Then it runs a payload. Cuebot.k open a back door providing the attacker with unauthorized remote access to the compromised computer. The intruder can control the system and steal user sensitive information. The worm also disables essential Windows components and alters important system settings. Cuebot.k runs as a service on every Windows startup. It must be noted that the worm attempts to disguise itself as Windows Genuine Advantage, a legitimate anti-piracy tool from Microsoft. Cuebot.k registers a system service with a display name of "Windows Genuine Advantage Validation Notification".