March 13, 2008

W32.IRCBot.DCN - Backdoor Worm

W32.IRCBot.DCN is a worm that opens a backdoor on infected computer. This backdoor allows a remote attacker to gain access to that computer. Then the worm tries to connects to IRC server:help.dawnsoul.net:7654.

Worm W32.IRCBot.DCN may download potentially harmful files from remote sites to infected system.

This worm propagate by copying itself to shared folders, network shares and also through Common Internet File System (CISF) shares with weak passwords.

Systems Affected: All Windows



Source: Symantec

No comments: