MS05-039: IRCBot HIGH RISK alert
http://vil.mcafeesecurity.com/vil/content/v_135491.htm
This detection is for an Internet Relay Chat (IRC) bot worm which includes the ability to spread by exploiting systems which are not yet patched for the MS05-039 vulnerability .
This worm is designed to contact a remote IRC server and wait for further instructions.
|
If you think that you may be infected with W32/IRCbot.worm!MS05-039, and are unsure how to check your system, you may download the Stinger tool to scan your system and remove the virus if present. This is not required for McAfee users as McAfee products are capable of detecting and removing the virus with the latest update. (see the removal instructions below for more information). |