I was mistaken in stating that BKDR_IROFFER.A was found on our server. It was found on a workstation in the LAN on which the administrator account may have been compromised due to the keystroke logging capability of the backdoor bot.
We found BKDR_IROFFER.A and are investigating its connection to this problem. Has anyone else with the problem found this backdoor? I'm investigating how this irc bot found its way onto our server.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.