BKDR_IRCBOT.GP

ChangeLog:
Changes are listed in chronological order with the latest changes first.
2008-04-19 05:32	Description was changed. New: "N/A" Old: "This backdoor may be downloaded from remote site(s) by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web site(s). It drops a copy of itself, terminates the initially executed copy, and executes the dropped copy. The dropped copy is set to Read-only, Hidden, and System attributes to avoid easy detection. It creates a registry entry to enable its automatic execution at every system startup. This backdoor opens TCP port 9103 to connect an Internet Relay Chat (IRC) server. It then joins any several IRC channels. Once connected, it listens for commands from a remote user that it can execute locally. This routine effectively compromises the affected system’s security."
2008-03-24 04:22	Description was changed. New: "This backdoor may be downloaded from remote site(s) by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web site(s). It drops a copy of itself, terminates the initially executed copy, and executes the dropped copy. The dropped copy is set to Read-only, Hidden, and System attributes to avoid easy detection. It creates a registry entry to enable its automatic execution at every system startup. This backdoor opens TCP port 9103 to connect an Internet Relay Chat (IRC) server. It then joins any several IRC channels. Once connected, it listens for commands from a remote user that it can execute locally. This routine effectively compromises the affected system’s security." Old: "N/A"