What is it?

Backdoor.Ratega?- Win32.exe

What does it do?

Win32.exe is spawned by the Ratega Trojan (Backdoor.Ratega), which usually resides in C:\%Windows%. By default, the Trojan listens on port 6969 and notifies the hacker?via email. It, like most trojans, is designed to give the hacker remote control of infected systems.?It also creates C:\%Windows%\%System%Keylog.text, C:\%Windows%\%System%lib.dll and C:\%Windows%Win32.dll.

Virus Precations

Full information on Ratega.Trojan including removal at Symantec.