Sophos

Troj/IRCBot-B

Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/IRCBot-B is a backdoor Trojan which allows remote access and control over the computer via IRC channels.

When first run, the Trojan moves itself to the Windows System folder as api32.exe and creates the following registry entry so that api32.exe is run automatically each time Windows is started:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\API32
= %SYSTEM%\api32.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer