Troj/IRCBot-ACO is a Trojan for the Windows platform.
When first run Troj/IRCBot-ACO copies itself to <System>\dllcache\iexplore.exe.
The following registry entries are created to run iexplore.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Microsoft©
<System>\dllcache\iexplore.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Microsoft©
<System>\dllcache\iexplore.exe
Registry entries are created under:
HKCR\MSWinsock.Winsock