Antiy Ghostbusters Advanced Edition
* Antiy Ghostbusters completely removed MSN Worm (Sexy Chicken)
* Serious Warning: CuteFTP Pro may affect the data security
* Emergency Processing Report for Sasser Worm and its variants
* Antiy Ghostbusters 4.0 Released
* Antiy Labs release new product——Antiy Ghostbusters Server Edition
* License file of Antiy Ghostbusters is changed
* Antiy Port 1.02 Release
* AHEVPN’s system detail will be published
* Antiy labs representative participates Senior Proseminar of China Information security
* Numen NET shared edition and issues the advance notice
Antiy Labs released Removal Tool for “IRCBot†virus
Antiy Labs 　　　　2006-8-15
Recently, “IRCBot†Worm （Backdoor.Win32.IRCBot.st）has transmitted in-the-world, it was exploitedthe high damage level of Microsoft Security Bulletin MS06-040. “IRCBot†Worm may break out cosmically like “MSBlast†and “Worm.Sasserâ€. Once on the compromised computer，the system service would breakdown and not connect to the Internet.
According to the analysis of exports, the worm would automatically search the computers which have the system server vulnerability in the Internet, and it would directly lead the computers to download and execute the worm files. If the computers were connected to the Internet and not installed the patch program, they would had been infected. The infected computers would automatically connect to the special channel of IRC backdoor, received the remote control command from the attackers. Some private information such as account of credit card and password may be filched by the attackers.
Pointing to “IRCBot†worm, Antiy Labs released the free Removal Tool, which can remove the virus safely and completely.
Download Address:http://www.antiy.com/download/avlpk.exe
The database of Antiy Ghostbusters had been updated (The update date is August 15, 2006), which can scan and remove the virus completely. Antiy Labs suggest that users upgrade Antiy Ghostbusters immediately, and use the “Patch Information†management tool to download the patch program in order to defend the virus, and start the network monitor of AGuard.