Published Aug 22, 2007 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: Backdoor:Win32/IRCbot!8497 (Microsoft) Win32/Checkout.A (CA) Backdoor.Win32.IRCBot.aaq (Kaspersky) W32/Checkout (McAfee) W32/IRCBot-WB (Sophos) W32.Mubla (Symantec)


Backdoor:Win32/IRCbot is a Trojan that connects to an Internet Relay Chat (IRC) server and provides attackers with remote access to the infected system. Commands that can be remotely executed include downloading and executing files. Backdoor:Win32/IRCbot also includes the ability to send itself to MSN Messenger contacts.
To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
For more information on antivirus software, see
Follow us