Sophos

Troj/Kirsun-A

Aliases
  • Backdoor.IRC.Kirsun
  • IRC/Flood.gen.b
Category
Type
What to do
Prevalence low high

Summary

 
Included in our products from July 2006 (4.07)
Protection available since 7 April 2004 09:05:46 (GMT)
Last updated 30 May 2006 08:02:43 (GMT)
Detected by All Sophos products

Action

Please follow the instructions for removing Trojans.

You should also change your Internet Explorer settings using Tools|Internet options|General to remove any modifications made by the Trojan.

More Information

Troj/Kirsun-A is an backdoor mIRC Trojan that compromises a number of scripts with the filenames miRC.ini, Mgsaak.dll, Saceng.dll, logown.sys and Trend.dll.

mIRC.ini is the main setup script that initiates the functionality of the others.

Troj/Kirsun-A changes common Internet Explorer settings such as the Start Page and includes downloading and flooding functionality.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer