PDA

View Full Version : Bots for IRC,kills u now...


caleb_yee
26-08-03, 17:14
Backdoor.IRC.RPCBot.B is an Internet Relay Chat (IRC) Trojan Horse that allows its creator to control a computer through IRC. It is also a worm that can use the DCOM RPC vulnerability (described in Microsoft Security Bulletin MS03-026) to spread itself.

When Backdoor.IRC.RPCBot.B runs, it performs the following actions:

Connects to specified IRC servers and joins a channel to listen for commands from its creator.

Allows its creator to perform any of the following actions:

Controls the IRC client on a compromised computer.
Scans IP addresses.
Terminates remote processes.
Performs Denial of Service (DoS) attacks against targets that the creator of this threat chooses.
Exploits the DCOM RPC vulnerability: The worm generates random IP addresses. Once the IP addresses are generated it sends specially formed data, which exploits the DCOM RPC vulnerability, to that particular IP address.
Downloads files from predefined Web sites.
Downloads a Security Patch for the Blaster Worm from Microsoft.

Removal
1.Disable System Restore (Windows Me/XP).
2.Update the virus definitions.
3.Run a full system scan and delete all the files detected as Backdoor.IRC.RPCBot.B.

Well,now,IRC is really gonna make u RIP