Threat Search: 

ThreatExpert's Statistics for not-a-virus:Client-IRC.Win32.mIRC.602 [Kaspersky Lab]:

not-a-virus:Client-IRC.Win32.mIRC.602 [Kaspersky Lab] is also known as:
Threat AliasNumber of Incidents
Backdoor.IRCBot [PC Tools]244
Backdoor.Trojan [Symantec]210
Backdoor:Win32/Kirsun.A [Microsoft]165
Troj/Kirsun-A [Sophos]165
Win-Trojan/Kirsun.652800 [AhnLab]120
BKDR_KIRSUN.A [Trend Micro]90
not-a-virus:Client-IRC.Win32.mIRC [Ikarus]63
IRC.Backdoor.Trojan [Symantec]52
BKDR_FLOOD.BC [Trend Micro]6
TROJ_KIRSUN.A [Trend Micro]4
Backdoor:Win32/IRCbot [Microsoft]3
Generic PUP.x [McAfee]3
Mal/Generic-A [Sophos]3
not-a-virus:RiskTool.Win32.HideWindows [Kaspersky Lab]3
Backdoor.mIRC-based.P [PC Tools]2
not-a-virus:NetTool.Win32.Sniffer.c [Kaspersky Lab]2
Trojan.DR.Duckirc.Gen [PC Tools]2
Adware.2Search [Symantec]1
Application.Ardamax_Keylogger [PC Tools]1
Backdoor.IRC.Zapchast [Ikarus]1
BKDR_FLOOD.B [Trend Micro]1
Dropper/Malware.904117 [AhnLab]1
Generic BackDoor [McAfee]1
Generic BackDoor!bf [McAfee]1
Hacktool.Flooder [Symantec]1
IRC/Flood.mirc [McAfee]1
not-a-virus:PSWTool.Win32.PassView.162 [Kaspersky Lab]1
not-a-virus:RiskTool.Win32.HideWindows [Ikarus]1
W32/Spybot.worm!bm [McAfee]1
Win-Trojan/Xema.variant [AhnLab]1

not-a-virus:Client-IRC.Win32.mIRC.602 [Kaspersky Lab] has the following possible countries of origin:
OriginNumber of Incidents
Germany7
France2
Russian Federation2
Israel1
United Kingdom1

not-a-virus:Client-IRC.Win32.mIRC.602 [Kaspersky Lab] is known to be created as:
%FontsDir%\taksmgr.exe
%FontsDir%\wacult.exe
%System%\iexplorer.exe
%System%\mnut\wacult.exe
%System%\schost.exe
%System%\sysinfo.exe
%System%\taksmgr.exe
%System%\tasmgr.exe
%System%\wacult.exe
%System%\web\windows.exe
%System%\winxp.exe
%Windir%\eren.exe
%Windir%\ok\taksmgr.exe
%Windir%\system\windows.exe
c:\mirc script\mirc script irc op v2.1\mirc.exe
c:\sex1.exe
c:\system32\dllx\taksmgr.exe
c:\taksmgr.exe
Notes:
  • %FontsDir% is a variable that refers to a virtual folder containing fonts. A typical path is C:\Windows\Fonts.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.