W32/IRCBot-AEG is a worm for the Windows platform.
When run W32/IRCBot-AEG copies itself to <Windows>\winsvc32.exe and sets the following registry entry:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
winsvc32
winsvc32.exe
W32/IRCBot-AEG also displays fake messages that purports to be from Microsoft.