 Home
Spyware Database
"Trojan.IRCBot Removal Guide" |
Trojan.IRCBot Removal Guide
Trojan.IRCBot Description
Trojan.IRCBot is a malicious banking Trojan that runs in the background and displays characteristics of a ZBot. Trojan.IRCBot can disable the firewall and will attempt to steal sensitive financial data (credit card numbers, online banking login details). Trojan.IRCBot creates startup registry entries that loads when Windows boots up. Trojan.IRCBot may represent a severe security risk to the compromised system or its network environment and should be removed immediately.
Alias: Trojan.Win32.Buzus.czvx (Kaspersky Lab) , W32/IRCbot.gen.a (McAfee) , W32/Autorun-AYN (Sophos) , Worm:Win32/Slenping.X (Microsoft) , Win32.SuspectCrc (Ikarus) , Win-Trojan/Xema.variant (AhnLab),
Alias: Trojan.Win32.Buzus.czvx (Kaspersky Lab) , W32/IRCbot.gen.a (McAfee) , W32/Autorun-AYN (Sophos) , Worm:Win32/Slenping.X (Microsoft) , Win32.SuspectCrc (Ikarus) , Win-Trojan/Xema.variant (AhnLab),
Trojan.IRCBot or W32.IRCBot Automatic Detection (Recommended)
Is your PC infected with Trojan.IRCBot? To safely & quickly detect Trojan.IRCBot, we highly recommend you...
 |
Download SpyHunter's* Malware Scanner. |
Trojan.IRCBot Manual Removal Instructions
Backup Reminder: Always be sure to back up your PC before making any changes.Step 1 : View the Trojan.IRCBot Components with its MD5s
Remove the "Trojan.IRCBot" components:| File Name | File Size | MD5 |
|---|---|---|
| CLADD | 15872 | 47b3ffcb7d8c548419e59016bbc928f4 |
| CLADD | 23040 | 420b2a09840556eb17e271b1040a8edf |
| CLADD | 10752 | da18b5716996f7baec2599e19e895732 |
| CLADD | 102400 | 74ce0a1fc6e88ac6747cf8371929f997 |
| CLADD | 82432 | 6c20afc772cadf040dc11fa40976e00f |
| CLADD | 17920 | 314ed40ca15f0df95f657cc4aad6b478 |
| CLADD | 20480 | d54b8553e6eb00f0b9b90c863ef30c38 |
| CLADD | 32768 | 3665733a6f7243e7cb1401f72c643139 |
| CLADD | 20480 | c8f0941ace0b44110eb52ec79312408e |
| CLADD | 37888 | fd3f2ef797503ef9fb24a498875c4e0e |
| CLADD | 40960 | cbd1d397d488095b7875f329cf3bad8d |
| CLADD | 17920 | 67db0ab7ad4904df4ad0e9fb09a2b673 |
| CLADD | 22016 | 76cfa64ca20d71a5235f8b3be6f90f6e |
| CLADD | 78336 | 817fb825cd427fc8da2b7e1cdcdfa167 |
| CLADD | 45056 | af9271019a3a47030229326d33282278 |
| CLADD | 196096 | d059e984f3390403595e24de8b31e4be |
| CLADD | 34816 | 20726cf8c05a02d73745c44e97b6dcc6 |
| CLADD | 15360 | 74713af69c2da4481a25495f6c59daaa |
| svchost.exe | 77824 | afa1b389c56b194ffbc8b4a12ac42edd |
| WindowsLive.exe | 1892696 | 485f7fa25b3d0d38a4f14495c02eca54 |
| CLADD | 226816 | af84769f839528652c480e016fc76c5b |
| CLADD | 24576 | f1ffec482bfedb9a0e7aefe124602241 |
| CLADD | 120320 | 80ff0ba83fc543af5c4f7a1bda5921be |
| CLADD | 12288 | 97947c0c63e5635d86a1add389950305 |
| CLADD | 37888 | 41f13c8013d553422d30df143894f8e1 |
To remove Trojan.IRCBot, you must first stop any Trojan.IRCBot processes that are running in your computer's memory. To stop all Trojan.IRCBot processes, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the "Processes" tab, search for Trojan.IRCBot, then right-click it and select "End Process" key.
To delete Trojan.IRCBot registry keys, open the Windows Registry Editor by clicking on the Windows "Start" button and selecting "Run." Type "regedit" into the box and click "OK." Once the Registry Editor is open, search for the registry key "HKEY_LOCAL_MACHINE\Software\Trojan.IRCBot." Right-click this registry key and select "Delete."
Finally, to completely get rid of Trojan.IRCBot, you must manually remove other Trojan.IRCBot files. These Trojan.IRCBot files can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, Trojan.IRCBot might create a file like
%PROGRAM_FILES%\Trojan.IRCBot\Trojan.IRCBot.exe. Locate and remove these files.
Site Disclaimer
Publication Date: Mon Feb 22 2010 04:36:19 EST
User Comments
| There are no comments posted for this page. |