ColdLife 4.1.0.0


· Overview ·
· Origins ·
· Operation ·
· Detection and Removal ·
· Research ·



Overview

Alias:

Backdoor/EvilLife [Computer Associates], Bck/IRC.Coldlife.51 [Panda], Bck/IRC.Mirc.Based [Panda], IRC/Flood.ak [McAfee], security risk named W32/Coldbot [F-Prot], W32/Coldbot [Panda], Win32.IRCFlood [Computer Associates], Worm Generic.LC [Panda]

Category:

Flooder: A program that overloads a connection by any mechanism, such as fast pinging, causing a DoS attack.

Backdoor: A secret or undocumented means of getting into a computer system, or software that uses such a means to penetrate a system. Some software has a backdoor placed by the programmer to allow them to gain access to troubleshoot or change the program. Software that is classified as a "backdoor" is designed to exploit a vulnerability in a system, and open it to future access by an attacker.

Worm: A program that propagates itself by attacking other machines and copying itself to them. Both worms and viruses are self-replicating code that travels from machine to machine by various means. Both worms and viruses have, as their first objective, merely propagation. Both can be destructive, depending on what payload, if any, they have been given. But there are some differences: worms may replace files, but do not insert themselves into files. In contrast, viruses insert themselves in files, but do not replace them.

Similar Pests:

Flooder · Backdoor · Worm

Origins

Author:

ColdLife

Date of Origin:

February, 2003

Operation

Storage Required:

  • ColdLife 4.1.0.0: at least 705 KB
  • Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.



    Manual Removal:

    Follow these steps to remove ColdLife 4.1.0.0 from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Unregister DLLs:

    Unregister these DLLs with Regsvr32, then reboot:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:

  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • PestPatrol's Pest Research Center
  • Last Revised:

    March 03, 2005