Background information: In short: trojan worm attacks are attractively disguised files that you download and run, resulting in harmful and dangerous consequences ranging from takeover of your IRC channels, erasing of your hard disk, theft of your account *********, etc. Almost always your infected machine starts to spread the worm by itself, by *-**** and IRC. These (Trojan) viruses and worms are not mIRC or IRC specific, they just spread like fire on IRC.
Trojans are typically files with suffices like ".ini", ".exe", ".***", ".vbs" or ".js" such as "dmsetup.exe". (http://***.*********.***/SiliconValley/Heights/3652/dmsetup.html) These days nearly all trojans are spread in the guise of a bugfix, free game or other software. You probably downloaded one from a *** or FTP archive, *** file exchange, or through IRC'* **C file transfer (by manual /**c get or, even worse, an "auto **C get" feature which allows anybody to send you anything, including not only trojan* but also viruses, ****, and other illegal things). Typically the trojan needs to be run manually, and installs hacked files all over your disk silently.
When you run the program they infect your computer and often install various programs like mIRC on your computer. We call this "dropping a payload". The worm then distributes itself by *-**** or over IRC.
The worms often make sure their payload (mIRC) starts when your computer is booted. This copy of mIRC, in combination with a malicious script, is then used to further distribute the worm, and to gain control over your computer. Your computer then can be used to create a group of infected computers that can be used to attack webservers and IRC server. Such an attack is called a Distributed Denial of Service (DDoS) attack.

0 Comments:
Post a Comment
<< Home