Zyklobot is a dangerous IRC-controlled backdoor that provides the attacker with unauthorized remote access to the compromised computer. The intruder can download, run and modify files, execute system commands and launch denial of service (DoS) attacks. Zyklobot can infect remote computers. Once executed, it installs itself to the system, and then starts searching for other hosts in the same domain. The backdoor attempts to gain the Administrator’s privileges in all the systems it finds. If it succeeds, it infects remote computers. Zyklobot carries a destructive payload. It attempts to delete all files and folders from the main system directory. This corrupts the entire system preventing it from running and loading on computer startup.