irbme.exe - Dangerous
irbme.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
This is a network-aware worm that spreads through IRC channels.
Then, it schedules itself to execute remotely created files.
Allows unauthorized remote use of an infected computer.
Deletes the following files if they are found:
%System%\winnt32.dat
%System%\netstat.exe
Manual removal:
Navigate to the keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
and delete the value: "Randex virus built for IRBMe"="irbme.exe"