Forum Home
Press F1
 
Thread ID: 80885 2007-07-08 05:26:00 MIRC?IRCFlood - Help!!! EFFIGY (12530) Press F1
Post ID Timestamp Content User
566960 2007-07-08 05:26:00 It had to happen, my first ever virus! This one got through, mail guardian & E Trust, and I was dumb enough to think it was a genuine client.
I have checked on removals for it and can only find manual methods listing dlls to unregister and files to remove, but when I try using regsvr /u ... it cant find the library, and search cant find the files. I'm stumped! if I can't find them how can I remove them? Suggestions appreciated
I'm looking for the following.
dev.dll
flood.dll
timedinterp.dll
flood.ini
winconf.mrc
EFFIGY (12530)
566961 2007-07-08 05:33:00 Get trojan remover in my sig.

Download / install / update it. Then click on scan.

Then select all options under the utilities menu.

I think these files belong to Zapchast, which is an IRC trojan.

If youre in IRC now, get out of it.
Speedy Gonzales (78)
566962 2007-07-08 05:42:00 I think these files belong to Zapchast, which is an IRC trojan.

If youre in IRC now, get out of it.[/QUOTE]

I would if I knew what IRC was...?
EFFIGY (12530)
566963 2007-07-08 05:55:00 I would if I knew what IRC was...?

Oh ok then. Dont worry about that bit then.

Just download trojan remover. Its in my sig below.
Speedy Gonzales (78)
566964 2007-07-08 08:07:00 Just download trojan remover. Its in my sig below.[/QUOTE]

Did that - it didn't even find it! Wouldnt put too much faith in that one.
I have the directories from the various virus scans I have done, but when I follow them the files aren't visible.
EFFIGY (12530)
566965 2007-07-08 08:23:00 The first post u posted, when u went to unregister them did u type Regsvr or Regsvr32?? Its Regsvr32

Did u turn system restore OFF first, then:

Did u type:

regsrv32 /u dev.dll
regsrv32 /u flood.dll
regsrv32 /u timedinterp.dll

Then find and delete these files?

dev.dll
flood.dll
flood.ini
timedinterp.dll
winconf.mrc
Speedy Gonzales (78)
566966 2007-07-08 08:41:00 Yep did all that, cant find the library. And I'm running in safe mode. EFFIGY (12530)
566967 2007-07-08 08:49:00 Yep did all that, cant find the library. And I'm running in safe mode.

Umm, so if you go to start/search and type in the names of those dlls they dont appear??

Is show all files and folders selected?? (under tools/folder options / view tab).

In My computer?

Altho, I dont think it matters if its on dont show or show.
Speedy Gonzales (78)
566968 2007-07-08 09:21:00 :waughh:Yes -no nothing and i ckecked show dnt show. However I'm now getting the strongest sense that this thing prevents downloads of anything that might want to hurt it. I cant access Trend site, E-trust PestPatrol downloaded but wont work, and several others either wont download or wont work. How can I manually search the registry? EFFIGY (12530)
566969 2007-07-08 09:30:00 Ok what we'll try is get hijackthis in my sig below if u can.

Put it in its own folder. Run it click on scan and save a log. Copy and paste the log here.

We'll see whats in it.
Speedy Gonzales (78)
1 2 3 4