|
|
Back to UserFriendly Strip Comments Index
|
virus question: | by NedLudd | 2004-03-09 07:07:20 |
| Google & machine translation from Russian: |
by silvermoon82 |
2006-11-19 12:55:59 |
Googled for "irvir EXE', came up with a Russian site. Ran it through a machine translator, got this:
Trojan.IRC.KarmaHotel
This Trojan program is 2 scripts in HTML- file. With the starting infected HTML page to the disk is recorded VBS- part of "Trojan". VBS- part in turn creates one additional part (INI- file), it searches for and it is modified the file of tuning client mIRC in such a way that is resolved the reaction of client mIRC to the commands of the remote users and it is disconnected warning system Mirc to the dangerous events. Further to client mIRC is connected the special file of tuning, which is allowed it governed the infected computer, it drew off and pumped into to the infected computer files, it overheard "private" conversations in Mirc and so forth.
Source: Http://www.viruslist.com/ Laboratory Kaspersko
Original link (in case you read Russian or have a better translator) is here
|
|
[ Reply ] |
|
hmmm, can't get to the link | by NedLudd | 2004-03-09 07:27:34 |
|
Try this link. | by Arcanum | 2006-11-19 12:55:59 |
|
That, is apparently, not what we have... | by NedLudd | 2004-03-09 07:35:35 |
|
it says the files are deleted | by defect | 2004-03-09 07:37:13 |
|
You're right, but I'm still not convinced. | by NedLudd | 2004-03-09 07:50:00 |
|
|
[Todays Cartoon Discussion]
[News Index]
|
|
