Win32.Ircobus

Discussion in 'Trojan Defence Suite' started by Snook, Sep 10, 2003.

Thread Status:
Not open for further replies.
  1. Snook

    Snook Registered Member

    Joined:
    Jun 19, 2003
    Posts:
    182
    How come TDS3 does not detect Win32.Ircobus (defined a Trojan at Symantec USA)?
    (Pest Patrol did find it).

    Comments/suggestions?

    Snook,
    Licensed Operator. :) :D
     
  2. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Hi,

    If you ever have a detection on something that TDS doesnt detect, please send it in for verification/analysis

    I'm not sure about this one, or what possible aliases it uses ?
     
  3. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
  4. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    Hi Jooske,

    http://www.wilderssecurity.com/showthread.php?t=13604

    From that Symantec link:

    Backdoor.IRC.Aladinz.C is an IRC Trojan Horse that gives its creator full control over a compromised system. The Trojan may be downloaded by the Trojan.Downloader.Aphe from the Web site, w3.ircx-vanguard.com. The existence of the file uqir.exe is an indication of a possible infection.
    Also Known As:
    Worm.Win32.Ircobus [KAV], Worm.Win32.Randon.p [KAV]

    Worm, Trojan, Backdoor?
    Three for the price of one?

    HTH,

    Pieter

    disabled link
     
  5. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Ahh ok THOSE things :D

    GT Bots.. mIRC based script worm/backdoors.. if you have one that is not detected please do send it in for analysis. Im thinking of a generic GT Bot detector for TDS-4 which shouldn't be too hard :)
     
  6. DolfTraanberg

    DolfTraanberg Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    676
    Location:
    Amsterdam
    TDS-4.01 I hope
    Dolf
     
Thread Status:
Not open for further replies.