|
IRC-Worm.Krombe Viruses Information
| Name: |
IRC-Worm.Krombe |
| Category: |
Viruses |
| Description:
|
Details
IRC-Worm.Kromber
This worm Trojan spreads via IRC channels, and is 3584 bytes in size.
Propagation
When launching, the worm checks for an active IRC client on the victim machine. If it finds this, the worm will send a link to a remote site to all accessible IRC channels by using the /amsg command:
http://www.kromberg.at/[censored]/show.php?f=drunkchicks.jpg LOL
It also attempts to install this link as the name of a channel and comments to it.
If another user clicks on this link, the remote site will be contacted. This site contains a malcious VBS script (which will be detected by Kaspersky Anti-Virus as TrojanDropper.VBS.Inor.h). This will install and launch the worm's executable file, named browsercheck.exe on the victim machine. |
Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 72 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win16.Klon.1177 - 42 visits
Win32.Hidra - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
Win95.Lizard.196
Alpha.200
Bootache.204
Kaszana.184
AT.Batalia3,Batalia
BAT.HexViru
Highlander.47
HH&HH.408
Trojan.Win32.Prondir.
School.40
|
