irc trojan

[Peter]

Hi Guys
My Nortons 2005 has just found 2 viruses on my pc. As I have no idea how to
remove them Im turning to you guys for a bit of help. Both of the files have
now been placed in quarantine till I know what to do with them.
The first one is called "Crim.exe " or threat name being "IrcTrojan"
and the second is called "steal.dll" or threat name being "Irc Trojan"
I have tried turning off the system restore, rebooting in safe made, full
virus scan but still am unable to remove these files.
Were do i go from here and also while these files are in Quarantine can they
do damage.
Thx guys

 

[David H. Lipman]

Read the following MS URL on Clean Booting WinXP the try to scan again...

http://support.microsoft.com/kb/310353

--
Dave




| Hi Guys
| My Nortons 2005 has just found 2 viruses on my pc. As I have no idea how to
| remove them Im turning to you guys for a bit of help. Both of the files have
| now been placed in quarantine till I know what to do with them.
| The first one is called "Crim.exe " or threat name being "IrcTrojan"
| and the second is called "steal.dll" or threat name being "Irc Trojan"
| I have tried turning off the system restore, rebooting in safe made, full
| virus scan but still am unable to remove these files.
| Were do i go from here and also while these files are in Quarantine can they
| do damage.
| Thx guys
|
|

 

[Peter]

Thx David

 

[Peter]

Hi David and thx for your advice.
I have done what you said with a clean boot, but the pronlem and irc trojans
are still there.
I think i have tried every possible avenue to try and remove them all with
no success.
Now im thinking about reformating and starting from scratch.
Before I do this would you have any other suggestions at all.
Regards
Peter

 

[Roy]

Hi Peter, you may have seen this page already but take a look. The bottom
of the page relates to some keys they may need to be removed, but follow
instructions to the letter when messing with the registry. See:

http://securityresponse.symantec.com/avcenter/venc/data/irc.trojan.html

Good luck,
Regards,
Roy.

Untitled Document IMPORTANT PLEASE READ Please do not add my address to any
on-line address book. Or send me, e- greetings cards and web page links via
their site to this address. I'm trying to cut down on junk mailers getting
my address. Thanks. www.btinternet.com/~godalming
Hi Guys
My Nortons 2005 has just found 2 viruses on my pc. As I have no idea how to
remove them Im turning to you guys for a bit of help. Both of the files have
now been placed in quarantine till I know what to do with them.
The first one is called "Crim.exe " or threat name being "IrcTrojan"
and the second is called "steal.dll" or threat name being "Irc Trojan"
I have tried turning off the system restore, rebooting in safe made, full
virus scan but still am unable to remove these files.
Were do i go from here and also while these files are in Quarantine can they
do damage.
Thx guys

 

[Ian Kenefick]

Hi Guys
My Nortons 2005 has just found 2 viruses on my pc. As I have no idea how to
remove them Im turning to you guys for a bit of help. Both of the files have
now been placed in quarantine till I know what to do with them.
The first one is called "Crim.exe " or threat name being "IrcTrojan"
and the second is called "steal.dll" or threat name being "Irc Trojan"

IRC Trojan is a heuristic detection in Symantec products. It is
suspicious for being IRC related malware but since there is no
signature for exact detection Norton doesn't know what to do with it
or how to disinfect it. Use Norton's Scan & Deliver to submit the
malware for analysis and have an exact detection written for it.

I have tried turning off the system restore, rebooting in safe made, full
virus scan but still am unable to remove these files.

read the next part...

Were do i go from here and also while these files are in Quarantine can they
do damage.

Files stored in Quarentine typically cannot do any damage.
In the mean time you should use Dave's virus/apyware removal
procedure. This is available from a very helpful website - the URL is
http://www.claymania.com/removal-trojan-adware.html

Thx guys

No problem.


Regards,
Ian Kenefick
http://www.IK-CS.com