Threat Database Worms W32.Ircbrute.E

W32.Ircbrute.E

By Sumo3000 in Worms

W32.Ircbrute.E is a dangerous worm that uses removable drives to proliferate and opens a back door on the affected PC by connecting to the specific web page on TCP port 6667. When executed, W32.Ircbrute.E copies itself by creating the particular files on all removable drives and runs when the drives are accessed. W32.Ircbrute.E also creates the specific registry entry so that it can launch automatically every time you boot up Windows. W32.Ircbrute.E creates the certain mutex called 'root_v_1' so that only one instance of the malware infections runs on the computer. In order to uninstall W32.Ircbrute.E select a reputable security program.

File System Details

W32.Ircbrute.E may create the following file(s):
# File Name Detections
1. %SystemDrive%RECYCLERk-1-3542-4232123213-7676767-8888886hn.exe
2. %DriveLetter% ecyclerk-1-3542-4232123213-7676767-8888886hn.exe
3. %SystemDrive%RECYCLERk-1-3542-4232123213-7676767-8888886Desktop.ini
4. %DriveLetter% ecyclerk-1-3542-4232123213-7676767-8888886desktop.ini
5. %DriveLetter%autorun.inf

Registry Details

W32.Ircbrute.E may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{23KLN5J0-4OPM-11WE-AAX5-24EF1F387232}"StubPath" = "%SystemDrive%RECYCLERk-1-3542-4232123213-7676767-8888886hn.exe"?

Trending

Most Viewed

Loading...