Computing.Net > Forums > Security and Virus > Can't delete of IRC Trojan with NAV

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

Can't delete of IRC Trojan with NAV

Reply to Message Icon

Name: cinnamoons
Date: November 13, 2004 at 09:07:35 Pacific
OS: Win XP Home
CPU/Ram: 2.08GHz/512
Comment:

Hi

I have read all the posts concerning IRC Trojan before posting but I can't find anything.

NAV 2003 has found 2 files infected with what it calls an IRC Trojan.

They are in WINDOW\System32 so NAV tells me it can't repair them... only quarantine them.

I have tried to follow the instructions on Symantec page concerning IRC Trojans here

http://securityresponse.symantec.com/avcenter/venc/data/irc.trojan.html#removalinstructions

but when I scan my PC with 'System Restore' disabled, I get the same answer as previously... NAV can't repair the files.

I have also tried to remove the file manually but when I open the System32 folder and scroll to the infected file, I get a *Censored* Norton dialog popup telling me (thanks a lot) that my PC is infected with this file! I then have to restart my session to get rid of the damn message!

What should I do? Is quarantine enough to prevent the Trojan from communicating with it's source?
If not, what can I do?

I am quite a newbie with Windows and call me paranoid but I don't really trust 'Trojan removers' software that are programmed and distributed by "companies" that for all I know could be installing other Trojans on my PC while removing the others!

Anyway... Help? Please?

Thanks

Carla



Sponsored Link
Ads by Google

Response Number 1
Name: ddp59
Date: November 13, 2004 at 09:21:14 Pacific
Reply:

try avg6(free version)from www.grisoft.com that is what i use. is your xp in fat32 or ntfs

david


0

Response Number 2
Name: cinnamoons
Date: November 13, 2004 at 09:30:17 Pacific
Reply:

fat32 or ntfs?

I'm not sure. I am new to Windows. I used to have a good old Mac which never got infested or anything and now that I have a PC, I get virus problems every 2 months or so! And I have NAV, Firewall, S&D and Ad-aware!

How can I get the info?

Thanks



0

Response Number 3
Name: ab2ms
Date: November 13, 2004 at 10:13:31 Pacific
Reply:

Did u try removing in safe mode?
That's how I have most of my success removing stubborn crap.


0

Response Number 4
Name: ddp59
Date: November 13, 2004 at 10:14:42 Pacific
Reply:

go to my computer, open it , do right click on c drive, open properties & on file system line it says either fat32 or ntfs

david


0

Response Number 5
Name: cinnamoons
Date: November 13, 2004 at 10:25:21 Pacific
Reply:

ok... my xp is in ntfs... good to know for later I guess :-)

I finally successfully deleted the b---tard after rebooting. I wasn't sure if it was safe to do so since symantec never mentioned it in their 'removal procedure'.

I didn't find anything in Regedit.

I'm rescanning the whole drive right now and I hope it's over!

Thanks for the help guys! :-)

Carla


0

Related Posts

See More



Response Number 6
Name: murve
Date: November 13, 2004 at 18:20:49 Pacific
Reply:

hi carla,
bill g. asked me to tell you:(joke)
welcome to the wonderful world of windows in all its beautiful and colourful flavours.
another thing, norton doesn't repair files, it only quarentines them, if you want a good anti-virus, get rid of norton, and try out nod32, kapersky labs, or hauri.
they do repair files, weigh alot less, and you'll get better results.
all the best,
murve


0

Response Number 7
Name: cinnamoons
Date: November 14, 2004 at 14:20:54 Pacific
Reply:

Thanks Murve! (give my regards to Bill! ;-)

I changed to Zone Alarm since NPF was getting on my nerves with all the constant alerts.

I have been hearing good stuff about Kapersky vs NAV so I'll definitely look into it! Thanks for the advice Murve!

Carla



0

Sponsored Link
Ads by Google
Reply to Message Icon

Weird Processes...Trojans... TO: Tommyo



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Can't delete of IRC Trojan with NAV

Can't delete exe file infected with www.computing.net/answers/security/cant-delete-exe-file-infected-with/13847.html

Can't DELETE Virus: trojan.vundo www.computing.net/answers/security/cant-delete-virus-trojanvundo/17042.html

Can't delete W32KLEZH@mm infected email www.computing.net/answers/security/cant-delete-w32klezhmm-infected-email/985.html