Home / malwarePDF  

Worm:IRC/Generic


First posted on 24 February 2012.
Source: Microsoft

Aliases :

There are no other names known for Worm:IRC/Generic.

Explanation :

Worm:IRC/Generic is a generic detection for malicious Internet Relay Chat (IRC) script data files that are used to spread malware.


Top

Worm:IRC/Generic is a generic detection for malicious Internet Relay Chat (IRC) script data files that are used to spread malware.

Installation

Worm:IRC/Generic is installed by another malware process and is present as an IRC script file in the same folder as the affected installed IRC chat application (i.e. mIRC).



Payload

Spreads other malware
When an affected IRC chat application is launched, it loads Worm:IRC/Generic and executes its script instructions. The script commonly instructs the chat client to send a locally stored file to other IRC users that join chat channels. The file sent is commonly other installed malware, or a copy of the worm that installed Worm:IRC/Generic.



Analysis by Jireh Sanico

Last update 24 February 2012

 

TOP