Welcome to the Virus Encyclopedia of Panda Security.
It connects to IRC servers in order to notify its author that the computer has been affected. It acts as a backdoor, thus allowing to download and execute files.
|First detected on:||July 27, 2004|
|Detection updated on:||Feb. 6, 2007|
|Yes, using TruPrevent Technologies
Mabutu.A is a worm that connects to different IRC servers, in order to notify its author that the computer has been affected. This action allows it to wait for remote control commands.
Mabutu.A also acts as a backdoor, thus allowing a remote user to download a DLL (Dynamic Link Library) to the affected computer and run its code.
Mabutu.A spreads via e-mail in a message with variable characteristics.
Mabutu.A is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.