Sophos

Troj/IRCBot-LF

Aliases
  • Backdoor.Zyklobot
  • BKDR_ZYKLOBOT.A
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Included in our products from July 2006 (4.07)
Protection available since 25 May 2006 08:21:03 (GMT)
Detected by All Sophos products

Action

More Information

Troj/IRCBot-LF is a Trojan for the Windows platform.

Troj/IRCBot-LF includes functionality to access the internet and communicate with a remote server via HTTP.

The Trojan may also download and execute other arbitrary files.

When Troj/IRCBot-LF is installed the following files are created:

<Current Folder>\_0_00.bat (Detected as Troj/IRCBot-LF)
<Current Folder>\_0_1.bat (Detected as Troj/IRCBot-LF)
<Current Folder>\_0_1.exe (Detected as Troj/IRCBot-LF)
<Current Folder>\_0_1.lst (text file with a list of weak passwords)
<Current Folder>\_0_2.bat (Detected as Troj/IRCBot-LF)
<Current Folder>\_0_2.exe (Detected as Troj/IRCBot-LF)

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer