Mytob Virus
The Sdbot functionality in the Mytob virus worm is designed to contact the IRC server named, irc.blackcarder.net , join a specified channel, and wait for further instructions. This bot can accept commands to download and execute other programs. The bot also contains code to spread via the LSASS exploit.
Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning the Mytob virus with the recommended engine and DAT combination (or higher).
Net-Worm.Win32.Mytob (AVP)
W32.Mytob
W32/Mytob
|