W32.Ircbrute.E
W32.Ircbrute.E is a dangerous worm that uses removable drives to proliferate and opens a back door on the affected PC by connecting to the specific web page on TCP port 6667. When executed, W32.Ircbrute.E copies itself by creating the particular files on all removable drives and runs when the drives are accessed. W32.Ircbrute.E also creates the specific registry entry so that it can launch automatically every time you boot up Windows. W32.Ircbrute.E creates the certain mutex called 'root_v_1' so that only one instance of the malware infections runs on the computer. In order to uninstall W32.Ircbrute.E select a reputable security program.
File System Details
W32.Ircbrute.E may create the following file(s):
# | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
---|---|---|
1. | %SystemDrive%RECYCLERk-1-3542-4232123213-7676767-8888886hn.exe | |
2. | %DriveLetter% ecyclerk-1-3542-4232123213-7676767-8888886hn.exe | |
3. | %SystemDrive%RECYCLERk-1-3542-4232123213-7676767-8888886Desktop.ini | |
4. | %DriveLetter% ecyclerk-1-3542-4232123213-7676767-8888886desktop.ini | |
5. | %DriveLetter%autorun.inf |
Registry Details
W32.Ircbrute.E may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{23KLN5J0-4OPM-11WE-AAX5-24EF1F387232}"StubPath" = "%SystemDrive%RECYCLERk-1-3542-4232123213-7676767-8888886hn.exe"?
Submit Comment
Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.