Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Need Help with a variant of W32/IRCBOT.EJ


  • Please log in to reply

#1
glee1976

glee1976

    New Member

  • Member
  • Pip
  • 1 posts
One of my computers has been infected by a self healing variant of w32/IRCBOT.EJ. CA Antivirus (CAAV) reported the problem a week ago, and said it was quarrantined and deleted. Unfortunatey the infect reappears after each reboot when IE7 is launched. I am running XP Pro and up to date with my updates. I have done the following with an re-infection with IE7 after each reboot.

- Deleted the entire contents of all Temp folders
- Deleted the entire contents of all Start Up folders
- CAAV in normal mode
- CAAV in safe mode
- MalwareByte in normal mode
- MalwareByte in safe mode
- MalwareByte then CAAV in normal mode
- MalwareByte then CAAV in safe mode
- HiJack This

I have the log from HiJack This if anyone is interested.

Can us any help that can be offers to prevent a full re-installation of XP Pro.

Glee

Edited by glee1976, 08 December 2008 - 11:10 PM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP