Full
Name: |
KarmaHotel |
Type: |
Trojan |
Also Known As: |
IRC/Flood.i
Backdoor.IRC.Flood
Troj/IRCFlood-B
IRC/Karmahotel*
IRC_KARMAHOTEL.D
IRC/Mircworm.BM
VBS:Malware
IRC/BackDoor.Flood
Trojan.IRC.KarmaHotel.A
Trojan.IRC.KarmaHotel
|
Danger Level: |
2 |
Category Description: |
Trojans are malicious applications that pose themselves as legitimate software in order to trick users to install them. Once on the victim's machine, it may run any number of malicious process to steal vital information or inflict damage to other software. |
Comment: |
This trojan program consists of two scripts in HTML file. When an infected HTML page is opened, the VBS part of trojan is written to disk.
The VBS part, in turn, creates another part (INI file), finds and modifies the initialization file of mIRC client, so that it allows mIRC client to respond to remote commands issued by other users, and turns off all Mirc warnings.
Then mIRC is given a special initialization file that allows others to control the infected PC, download and upload files to it, read private messages in Mirc, etc.
|
|
|
Properties: |
|
Back to the list of products removed by X-Cleaner
|