IRC Trojan Virus

[smile11]

helllo all,

Every time I sign onto my PC I get the virus allert message that there is a IRC Trojan on my PC. I am able to remove the virus by doing a scan and then deleting the files from my quaranteened items.
I then run a full system scan and it comes up clean with no viruses or trojans.

Then, the next time I sign on the same thing happens again. This happens every time I sign on??

Any idea what this may be and how to get rid of it once and for all?

Thanks

 

[SESaskDFC]

Howdy:

What operating system are you using??

Murray

 

[smile11]

I use Windows XP Pro

 

[wbg34]

Have you disabled system restore? You will need to disable system restore to clear a virus infection.

http://virusall.com/remrestore.html

 

[SESaskDFC]

Howdy:

Disable System Restore.. That will kill the virii located there. Run another scan.. Once that shows clean, re-enable System Restore.

Murray

 

[smile11]

Hi Murray,

Of course, I forgot all about the system restore! I did this and it seems to be ok now. I'll keep a close eye on it and see if it happens again.

Thanks for the tip. )

 

[SESaskDFC]

No problem !!

Murray

 

[smile11]

Here's the update:

I disabled system restore and cleared all the history and temperary inernet files.

I then ran a scan and it came out clean. I then restarted the PC and ran it again and it came out clean again. I then re enabled system restore.

Then while I was online I got the folling Virus alert messages:

Trojan Dropper
Bat.Trojan
IRC.Backdoor.Trojan

And the message said that it is unable to repair and access the file is denied.

So, then I run another scan and it comes out clean????

What is going on?? Is there a tool I can download to get rid of these once and for all???

Please help.

 

[Boyds]

Did you also delete the files from back-up? Also, delete all temporary internet files. And check the registry. Just do a search on RUN. Check all RUN and RUNONCE for suspicious entries.

 

[SESaskDFC]

Howdy:

The message simply says you were attacked by the trojan.. Norton found it, stopped it and quarantined it.. You aren't infected.

BTW, stay out of the warez sites and those messages will stop !!

Murray

 

[smile11]

thanks for the tips. What kind of sites are warez sites?