SIRC4.EXE – Backdoor IRCBot

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SIRC4.EXE – Backdoor IRCBot removal

FileMD5Virus Alias
SIRC4.EXE 0a9d0a7cbfe76cbc624d9f5d34ec8a6e Backdoor IRCBot
SIRC4.EXE 0a9d0a7cbfe76cbc624d9f5d34ec8a6e Backdoor Maximus
SIRC4.EXE 0a9d0a7cbfe76cbc624d9f5d34ec8a6e Trojan Agent
SIRC4.EXE 0a9d0a7cbfe76cbc624d9f5d34ec8a6e Trojan Delphi
SIRC4.EXE 0a9d0a7cbfe76cbc624d9f5d34ec8a6e Trojan Delf

SIRC4.EXE size: 149562 bytes
SIRC4.EXE hash: 0A9D0A7CBFE76CBC624D9F5D34EC8A6E

Created files:

%SysDir%\sIRC4.exe
%SysDir%\xdccPrograms\Network Setup Wizard.exe
%SysDir%\xdccPrograms\Wireless Network Setup Wizard.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell: Explorer.exe sIRC4.exe

Detected by UnHackMe:

SIRC4.EXE
Default location: %SYSDIR%\SIRC4.EXE

Dropper information:
MD5: 0a9d0a7cbfe76cbc624d9f5d34ec8a6e
File size: 149562 bytes

Leave a Reply