duck.exe is a Trojan W32.Agobot-TH. duck.exe opens a back door on IRC channels. duck.exe spreads via open network shares. duck.exe tries to terminate antiviral programs installed on a user computer. duck.exe monitors user Internet activity and private information. It sends stolen data to a hacker site. Related files: %System%\duck.exe More info: http://www.sophos.com/virusinfo/analyses... Removal: Kill duck.exe process and remove duck.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer.