1. /
  2. Security Response/
  3. Backdoor.IRC.Bot

Backdoor.IRC.Bot

Risk Level 1: Very Low

Discovered:
May 2, 2003
Updated:
May 21, 2010 8:18:35 AM
Type:
Trojan
Infection Length:
Varies
Systems Affected:
Windows 98, Windows 95, Windows XP, Windows 7, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
Backdoor.IRC.Bot is a generic detection for Trojan horses that open a back door on the compromised computer and connect to Internet Relay Chat (IRC) channels to launch distributed denial of service (DDoS) attacks.

A Backdoor.IRC.Bot is a type of Trojan that it also often referred to as a 'bot' that opens a back door that allows a remote attacker to take control of the compromised computer.

The actions a remote attack can perform on the compromised computer are numerous. It can also use the compromised computer, usually in a network of other compromised computers, called a botnet, to attack other targets.

The malicious author may build a botnet for various reasons but the underlying motivation is to accomplish a task or tasks that are done easier and/or faster with many computers rather than just one.

They may also perform actions that mislead the user into thinking that nothing untoward is happening on the computer when in fact the Trojan may have already opened a back door and be under the control of the remote attacker.

If a Symantec antivirus product displays a detection alert for this threat, it means the computer is already protected against this threat and the Symantec product will effectively remove this threat from the computer.

Antivirus Protection Dates

  • Initial Rapid Release version May 2, 2003
  • Latest Rapid Release version July 17, 2014 revision 019
  • Initial Daily Certified version May 2, 2003
  • Latest Daily Certified version July 17, 2014 revision 023
  • Initial Weekly Certified release date May 7, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Medium
  • Payload: Opens a back door on the compromised computer.

Distribution

  • Distribution Level: Low
Writeup By: Jarrad Shearer

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver