Wargbot is an Internet worm that spreads by exploiting recent Microsoft Windows vulnerability. The parasite opens a back door providing the attacker with unauthorized remote access to the compromised computer. The intruder can download and run arbitrary files, execute system commands, perform Denial of Service (DoS) attacks, send instant messages and search for vulnerable hosts. Wargbot also turns off the Windows Firewall, disables important system components and modifies some system settings. The worm injects malicious code into the Windows Explorer process in order to avoid detection. Wargbot runs as a service on every Windows startup.