XBlock By Actiance - Home
Someone Spying on You? Fight Back!
Currently Notice: Undefined variable: incprefix in /data/www/xblock/product_show.php on line 123 25,860,543 Spy Software Busted!
Full Name:
 IRCBot.06.040
Type: Worm
Also Known As: IRC-Mocbot!MS06-040 (Mcafee). W32.Wargbot (Symantec). Randax
Danger Level: 8
Category Description: Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.

Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
Comment: IRCbot.06.040 exploits "Windows Server Service Buffer Overflow" MS06-040 against Windows 2000 machines. It creates a service with the display name "Windows Genuine Advantage Registration Service". It opens port 18067 and waits for commands.
   
Properties:

Back to the list of products removed by X-Cleaner
© Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy