W32/Rbot-KY is an IRC backdoor Trojan and network worm.  
W32/Rbot-KY is capable of spreading to computers on the local network protected by weak passwords.  
When first run W32/Rbot-KY moves itself to the Windows system folder as wurguar.exe and creates the following registry entries to run wurguar.exe on startup:  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Microsoft Windows Securety = wurguar.exe  
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\
Microsoft Windows Securety = wurguar.exe  
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
Microsoft Windows Securety = wurguar.exe  
Each time the Trojan is run it tries to connect to a remote IRC server and join a predetermined channel using a random nickname. The worm then runs