Antivirus and Security Software from Sophos

Sophos blogs

Troj/Kirsun-A

Aliases
  • Backdoor.IRC.Kirsun
  • IRC/Flood.gen.b
Category
Type
What to do
Prevalence low high

Summary

 
Protection available since 7 April 2004 09:05:46 (GMT)
Last updated 30 May 2006 08:02:43 (GMT)
Detected by All Sophos products
Download Free virus scan
Download the Threat Detection Test
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

Please follow the instructions for removing Trojans.

You should also change your Internet Explorer settings using Tools|Internet options|General to remove any modifications made by the Trojan.

More Information

Troj/Kirsun-A is an backdoor mIRC Trojan that compromises a number of scripts with the filenames miRC.ini, Mgsaak.dll, Saceng.dll, logown.sys and Trend.dll.

mIRC.ini is the main setup script that initiates the functionality of the others.

Troj/Kirsun-A changes common Internet Explorer settings such as the Start Page and includes downloading and flooding functionality.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer