Downloader.EBC is a Trojan that attempts to download files from several websites and then runs them.
In order to update the list of websites, Downloader.EBC connects to several email accounts using its own POP3 client, looking for a text string with a specific format. Once found, the string is decrypted and added to the Trojan configuration file. By doing so, Downloader.EBC updates the list of websites and the email accounts it accesses, so that it can always be configured to use others in case the originals were unavailable.
Additionally, this Trojan attempts to bypass the Windows XP firewall, as it tries to add its own process to the list of authorized applications.
Downloader.EBC does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.>