IRC Trojan virus

[rsasalm]

Hi all,

I was trying to download a file when I got a message from Norton antivirus program that it detected IRC Trojan virus and cann't repair because it doesn't get access to the file.
Now I tried manually to delete this file but I couldn't because I also got access denied message.
Now I wonder what to do and how dangereous this verus could be.
Uptill now I don't find any remarkable change except that I have difficult to read mail and it may depend some other factors.
please help me and suggest what to do.

any kind of help in this regard
regars
/rsasalm

[rsasalm]

Hi all again,

After searching the mail archive I found a mail where it is stated that "The cleaner" from MooSoft can be used to detect and repair trojans virus.
After running the tool it detected 16 such files which were affected with trojans virus and for few of the files it reported in the log file following message:

******************************
PROBLEM: I could not scan this file. Error Code 32: "Access denied because the file is being used by another process."

SOLUTION: A common reason for this error is that Windows has locked the file for
SOLUTION: exclusive access. A swap file is a common example. Also, an antivirus
SOLUTION: program might be denying access to the file. In that case, you can
SOLUTION: temporarily disable the anti-virus to clean the trojan.
********************************
In the solution part of this message what is meant by the following sentence

" In that case, you can temporarily disable the anti-virus to clean the trojan"

i.e. how to disable the antiversur program?

Eagerly waiting for your help.
thanks for your help.

regards

/rsasalm

[Mocha]

It means to make sure your AV (anti-virus) program isn't running during the cleaning process.

[Nana]

rsaslm,

To temporarily disable your AV programme, right click the icon in the task bar. It should give you the option to Disable Auto Protect.

Just make sure you turn your AV programme back on again. To do that, just repeat the process. This time it will say Enable Auto Protect.

Nana /images/forums/icons/smile.gif

[crash_keith]

I just had that one! All you gotta do is boot in safe mode, then navigate to the infected file (On mine it was "C:\WINDOWS\COMMAND\Rundle2.exe") now delete the file. now go into "MSConfig" click the "Startup" Tab and look in the list for a string that has that file name (Rundle2.exe) and UNCHECK the string. now restart your system normaly.