Home Malware Programs Trojans W32.IRCBot.B

W32.IRCBot.B

Posted: March 28, 2006

W32.IRCBot.B is a Backdoor Trojan Horse that connects to an IRC server and waits for commands from the hacker. This Trojan is a variant of W32.IRCBot and W32.IRCBot.Gen.
The Trojan may arrive in an email which looks like this:
From: updates@symantec.com
Subject: Last Update.
Attachment: nav32.zip
Attachment Type: Zip file
Attachment Size: 15.5 Kbytes

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}.exeBrowsetothekey:HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunRunServices
Loading...