Backdoor.Win32.IRCBot.kj

Summary

This instant messaging worm spreads in AOL Instant Messaging (AIM) network. It was found in December 2005.

Disinfection & Removal

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.

Technical Details

It sends copies of itself to people in the buddy list as a link, pointing to a file called clarissa17.pif.

After that it replies to all messages from other users with a message saying either "lol that's cool" or "lol no its not its a virus".

Detection

Detection for this malware was published on December 5th, 2005 in the following F-Secure Anti-Virus updates:

Detection Type: PC
Database: 2005-12-05_03

Description Created: Mikko Hypponen, December 12th, 2005;