Skip to main content
Skip to main content
Microsoft Security Intelligence
Published Aug 22, 2007 | Updated Sep 15, 2017

Backdoor:Win32/IRCbot

Detected by Microsoft Defender Antivirus

Aliases: Backdoor:Win32/IRCbot!8497 (Microsoft) Win32/Checkout.A (CA) Backdoor.Win32.IRCBot.aaq (Kaspersky) W32/Checkout (McAfee) W32/IRCBot-WB (Sophos) W32.Mubla (Symantec)

Summary

Backdoor:Win32/IRCbot is a Trojan that connects to an Internet Relay Chat (IRC) server and provides attackers with remote access to the infected system. Commands that can be remotely executed include downloading and executing files. Backdoor:Win32/IRCbot also includes the ability to send itself to MSN Messenger contacts.
To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
 
 
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
Follow us