ALIAS:

Backdoor.Win32.IRCBot.fb, Net-Worm.Win32.Bozori.C

Bozori.C is IRC-based backdoor-worm that was found on August 17th, 2005. The backdoor provides unauthorized access to an infected computer and also has the capability to spread to remote computers using the PNP exploit (MS05-039). This variant is functionally identical to Bozori.A but it is repacked.

For more information please read the description of Bozori.A:

http://www.f-secure.com/v-descs/bozori_a.shtml

Detection

Detection for Bozori.C was published on August 17th, 2005 in the following F-Secure Anti-Virus updates:

[FSAV_Database_Version]

Version=2005-08-17_06

Description: Katrin Tocheva, August 17th, 2005;

F-Secure Corporation