Win32.Ircobus

Discussion in 'Trojan Defence Suite' started by Snook, Sep 10, 2003.

Thread Status:
Not open for further replies.
  1. Snook

    Snook Registered Member

    Joined:
    Jun 19, 2003
    Posts:
    182
    How come TDS3 does not detect Win32.Ircobus (defined a Trojan at Symantec USA)?
    (Pest Patrol did find it).

    Comments/suggestions?

    Snook,
    Licensed Operator. :) :D
     
  2. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Hi,

    If you ever have a detection on something that TDS doesnt detect, please send it in for verification/analysis

    I'm not sure about this one, or what possible aliases it uses ?
     
  3. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
  4. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,440
    Location:
    Netherlands
    Hi Jooske,

    http://www.wilderssecurity.com/showthread.php?t=13604

    From that Symantec link:

    Backdoor.IRC.Aladinz.C is an IRC Trojan Horse that gives its creator full control over a compromised system. The Trojan may be downloaded by the Trojan.Downloader.Aphe from the Web site, w3.ircx-vanguard.com. The existence of the file uqir.exe is an indication of a possible infection.
    Also Known As:
    Worm.Win32.Ircobus [KAV], Worm.Win32.Randon.p [KAV]

    Worm, Trojan, Backdoor?
    Three for the price of one?

    HTH,

    Pieter

    disabled link
     
  5. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Ahh ok THOSE things :D

    GT Bots.. mIRC based script worm/backdoors.. if you have one that is not detected please do send it in for analysis. Im thinking of a generic GT Bot detector for TDS-4 which shouldn't be too hard :)
     
  6. DolfTraanberg

    DolfTraanberg Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    676
    Location:
    Amsterdam
    TDS-4.01 I hope
    Dolf
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.