Troj/IRCFlood-O

Category: Viruses and Spyware Protection available since:09 Apr 2007 00:00:00 (GMT)
Type: Trojan Last Updated:09 Apr 2007 00:00:00 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/IRCFlood-O is a Trojan for the Windows platform.

Troj/IRCFlood-O includes functionality to access the internet and communicate with a remote server via HTTP.

When first run Troj/IRCFlood-O installs the following files:

<System>\psycho.exe - clean copy of mIRC
<System>\systemac.dll - clean mIRC utilities DLL
<System>\m4x[<random character>] - mIRC scripts
<System>\<random 3 digits>.reg - registry entries
<System>\mirc.ini - clean INI file
<System>\remote.ini - clean INI file
<System>\v1rg1n - text file

along with the following folders:

<System>\logs
<System>\sounds
<System>\download

all of which (files and folders) can be deleted safely.

The following registry entry is created to run Troj/IRCFlood-O on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ISPSERVICE
<System>\psycho.exe

download Try Sophos products for free
Download now