WORM: Mytob.ED IRC Activity
This signature detects attempts to join IRC channels known to be affiliated with the mytob worm. This can indicate that the source host is infected with this worm.
Extended Description
Worm Mytob.ED opens a back door and lowers security settings on the compromised computer.
Short Name
WORM:MYTOB:ED-IRC
Severity
Major
Recommended
False
Recommended Action
Drop
Category
WORM
Keywords
Activity IRC Mytob.ED
Release Date
05/18/2005
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown