w32ircbot.gen
how to get rid of it

Hello Zard39

The remove this virus you need to take the following steps:

1) Disable System Restore (Windows Me/XP). 
2) Update the virus definitions for your anti-virus software (if you
do not have some you will need to get one).
3) Restart the computer in Safe mode.
4) Run a full system scan and delete all the files detected as W32.IRCBot.Gen.

Further detailed instructions for different anti-virus software can be found here:
http://ktp.e-isa.com/av/Viruses/W32.IRCBot.B.htm
http://securityresponse.symantec.com/avcenter/venc/data/w32.ircbot.gen.html
://www.google.com/search?sourceid=navclient&ie=UTF-8&oe=UTF-8&q=W32.IRCBot.Gen+removal

Alternatively you can use the tools here:
http://www.2-spyware.com/parasite-w32-ircbot-b.html

If you have any further questions on this please ask for clarification
and I will do all I can to help.

---

Request for Answer Clarification by zard39-ga on 08 Jun 2004 07:29 PDT

i did a full system scan with norton and it does not find this bot!!!!

---

Clarification of Answer by palitoy-ga on 08 Jun 2004 08:24 PDT

If you have the latest virus definitions and Norton did not find the
bot then you are no longer effected and the virus has been removed
automatically by Norton.

---

Request for Answer Clarification by zard39-ga on 08 Jun 2004 11:47 PDT

yet, strangely, a norton alert re the bot came on my desktop
and a program called IR center runs off and on but has an error mssage
is there an ircbot.gen remover  out the4re somewhere?

---

Clarification of Answer by palitoy-ga on 08 Jun 2004 12:11 PDT

The proper way to remove the ircbot.gen virus is to follow the steps on this page:
http://securityresponse.symantec.com/avcenter/venc/data/w32.ircbot.gen.html

Did you disable System Restore and reboot into "Safe Mode" before
running the virus scan?  If you miss these steps out you WILL NOT get
rid of the virus, they are essential.

---

Clarification of Answer by palitoy-ga on 08 Jun 2004 12:15 PDT

As an additional security check you should also download and run Adaware:
http://www.lavasoftusa.com/software/adaware/

Did you try the removal tool I gave you in my first answer?
http://www.2-spyware.com/parasite-w32-ircbot-b.html

Symantec Information:
http://securityresponse.symantec.com/avcenter/venc/data/w32.ircbot.gen.html

Semantic is the company that makes Norton Antivirus (NAV).  NAV is the
most popular antivirus software for personal computers.  If you have
NAV, follow their detailed instructions.  "W32.IRCBot.Gen" is what
Symantec calls this virus, so presumably you do have NAV.

a.k.a. Backdoor.IRC.BlackRat.gen (AVP)
a.k.a. BackDoor-AIK (McAfee)