Antiy Labs released Removal Tool for “IRCBot” virus

Antiy Labs 　　　　2006-8-15

　　Recently, “IRCBot” Worm （Backdoor.Win32.IRCBot.st）has transmitted in-the-world, it was exploitedthe high damage level of Microsoft Security Bulletin MS06-040. “IRCBot” Worm may break out cosmically like “MSBlast” and “Worm.Sasser”. Once on the compromised computer，the system service would breakdown and not connect to the Internet.

　　According to the analysis of exports, the worm would automatically search the computers which have the system server vulnerability in the Internet, and it would directly lead the computers to download and execute the worm files. If the computers were connected to the Internet and not installed the patch program, they would had been infected. The infected computers would automatically connect to the special channel of IRC backdoor, received the remote control command from the attackers. Some private information such as account of credit card and password may be filched by the attackers.

　　Pointing to “IRCBot” worm, Antiy Labs released the free Removal Tool, which can remove the virus safely and completely.

　　Download Address:http://www.antiy.com/download/avlpk.exe

　　The database of Antiy Ghostbusters had been updated (The update date is August 15, 2006), which can scan and remove the virus completely. Antiy Labs suggest that users upgrade Antiy Ghostbusters immediately, and use the “Patch Information” management tool to download the patch program in order to defend the virus, and start the network monitor of AGuard.