Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Need Help with a variant of W32/IRCBOT.EJ

Started by glee1976 , Dec 08 2008 11:09 PM

Please log in to reply

#1
glee1976

Posted 08 December 2008 - 11:09 PM

New Member

Member
1 posts

One of my computers has been infected by a self healing variant of w32/IRCBOT.EJ. CA Antivirus (CAAV) reported the problem a week ago, and said it was quarrantined and deleted. Unfortunatey the infect reappears after each reboot when IE7 is launched. I am running XP Pro and up to date with my updates. I have done the following with an re-infection with IE7 after each reboot.

- Deleted the entire contents of all Temp folders
- Deleted the entire contents of all Start Up folders
- CAAV in normal mode
- CAAV in safe mode
- MalwareByte in normal mode
- MalwareByte in safe mode
- MalwareByte then CAAV in normal mode
- MalwareByte then CAAV in safe mode
- HiJack This

I have the log from HiJack This if anyone is interested.

Can us any help that can be offers to prevent a full re-installation of XP Pro.

Glee

Edited by glee1976, 08 December 2008 - 11:10 PM.