W32.IRC.BOT virus

Today while scanning my system, norton detected w32.IRC.BOT. It reports as
detecting and fixing it, however not able to delete the infected file.
Details given is c:\windows\system32\ff.exe. When I look for this file, it's
not listed.

I've followed the instructions provided by norton, but there is no folder
listed nor the file names.

Can someone please help me.

Go here. http://www.sarc.com/avcenter/venc/data/w32.ircbot.html


"tim" <> wrote in message
news:bsi1jb$7hq$...
: Today while scanning my system, norton detected w32.IRC.BOT. It
reports as
: detecting and fixing it, however not able to delete the infected file.
: Details given is c:\windows\system32\ff.exe. When I look for this
file, it's
: not listed.
:
: I've followed the instructions provided by norton, but there is no
folder
: listed nor the file names.
:
: Can someone please help me.
:
:

Boot into Safe Mode and delete the file from there. If it's in use,
you will not be able to delete it. Also, it is much more help if
you state any errors or "reports" verbatim.


On Fri, 26 Dec 2003 19:19:08 +0000 (UTC), in
<bsi1jb$7hq$>
tim scrawled:

>Today while scanning my system, norton detected w32.IRC.BOT. It reports as
>detecting and fixing it, however not able to delete the infected file.
>Details given is c:\windows\system32\ff.exe. When I look for this file, it's
>not listed.
>
>I've followed the instructions provided by norton, but there is no folder
>listed nor the file names.
>
>Can someone please help me.
>

--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html

Deleting from normal mode and safe mode, whats the difference? considering
as mentioned the file can not be found, what chances will it be found under
safe mode? I have no idea wot this ff.exe is as its not found in the
mentioned directory, does anyone know what it is or have come across it? If
say it is in use, and you attempt to delete this file, wouldn't a message
pop up saying that it might have been moved,deleted etc etc.... There is no
error or reports given from norton when it detects/fix virus?

"°Mike°" <> wrote in message
news:...
> Boot into Safe Mode and delete the file from there. If it's in use,
> you will not be able to delete it. Also, it is much more help if
> you state any errors or "reports" verbatim.
>
>
> On Fri, 26 Dec 2003 19:19:08 +0000 (UTC), in
> <bsi1jb$7hq$>
> tim scrawled:
>
> >Today while scanning my system, norton detected w32.IRC.BOT. It reports
as
> >detecting and fixing it, however not able to delete the infected file.
> >Details given is c:\windows\system32\ff.exe. When I look for this file,
it's
> >not listed.
> >
> >I've followed the instructions provided by norton, but there is no folder
> >listed nor the file names.
> >
> >Can someone please help me.
> >
>
> --
> Basic computer maintenance
> http://uk.geocities.com/personel44/maintenance.html

I'm not familiar with Norton, in PC-cillin I can manually
clear the virus log or virus Quarantine.

Also, scroll down to Random startup entry #18
http://www.sysinfo.org/startupinfo.php

"tim" wrote:
> Deleting from normal mode and safe mode, whats the difference? considering
> as mentioned the file can not be found, what chances will it be found under
> safe mode? I have no idea wot this ff.exe is as its not found in the
> mentioned directory, does anyone know what it is or have come across it? If
> say it is in use, and you attempt to delete this file, wouldn't a message
> pop up saying that it might have been moved,deleted etc etc.... There is no
> error or reports given from norton when it detects/fix virus?
>
> "°Mike°" <> wrote in message
> news:...
> > Boot into Safe Mode and delete the file from there. If it's in use,
> > you will not be able to delete it. Also, it is much more help if
> > you state any errors or "reports" verbatim.
> >
> >
> > On Fri, 26 Dec 2003 19:19:08 +0000 (UTC), in
> > <bsi1jb$7hq$>
> > tim scrawled:
> >
> > >Today while scanning my system, norton detected w32.IRC.BOT. It reports
> as
> > >detecting and fixing it, however not able to delete the infected file.
> > >Details given is c:\windows\system32\ff.exe. When I look for this file,
> it's
> > >not listed.
> > >
> > >I've followed the instructions provided by norton, but there is no folder
> > >listed nor the file names.
> > >
> > >Can someone please help me.
> > >
> >
> > --
> > Basic computer maintenance
> > http://uk.geocities.com/personel44/maintenance.html
>
>

ff.exe - Fatal Flooder. A program that overloads a connection
by any mechanism, such as fast pinging, causing a DoS attack.
http://www.pestpatrol.com/PestInfo/f...0and%20Removal

"tim" <> wrote in message news:bsig7m$kp0$...
> Deleting from normal mode and safe mode, whats the difference? considering
> as mentioned the file can not be found, what chances will it be found under
> safe mode? I have no idea wot this ff.exe is as its not found in the
> mentioned directory, does anyone know what it is or have come across it? If
> say it is in use, and you attempt to delete this file, wouldn't a message
> pop up saying that it might have been moved,deleted etc etc.... There is no
> error or reports given from norton when it detects/fix virus?
>
> "°Mike°" <> wrote in message
> news:...
> > Boot into Safe Mode and delete the file from there. If it's in use,
> > you will not be able to delete it. Also, it is much more help if
> > you state any errors or "reports" verbatim.
> >
> >
> > On Fri, 26 Dec 2003 19:19:08 +0000 (UTC), in
> > <bsi1jb$7hq$>
> > tim scrawled:
> >
> > >Today while scanning my system, norton detected w32.IRC.BOT. It reports
> as
> > >detecting and fixing it, however not able to delete the infected file.
> > >Details given is c:\windows\system32\ff.exe. When I look for this file,
> it's
> > >not listed.
> > >
> > >I've followed the instructions provided by norton, but there is no folder
> > >listed nor the file names.
> > >
> > >Can someone please help me.
> > >
> >
> > --
> > Basic computer maintenance
> > http://uk.geocities.com/personel44/maintenance.html
>
>

Problem sorted now, I just kept on running norton about 5 times and on the
5th time norton automatically deleted the infected file as normal. I donno
why it did not delete as normal the 1st time round.

"Liz" <> wrote in message
news:lP3Hb.72106$...
> I'm not familiar with Norton, in PC-cillin I can manually
> clear the virus log or virus Quarantine.
>
> Also, scroll down to Random startup entry #18
> http://www.sysinfo.org/startupinfo.php
>
> "tim" wrote:
> > Deleting from normal mode and safe mode, whats the difference?
considering
> > as mentioned the file can not be found, what chances will it be found
under
> > safe mode? I have no idea wot this ff.exe is as its not found in the
> > mentioned directory, does anyone know what it is or have come across it?
If
> > say it is in use, and you attempt to delete this file, wouldn't a
message
> > pop up saying that it might have been moved,deleted etc etc.... There is
no
> > error or reports given from norton when it detects/fix virus?
> >
> > "°Mike°" <> wrote in message
> > news:...
> > > Boot into Safe Mode and delete the file from there. If it's in use,
> > > you will not be able to delete it. Also, it is much more help if
> > > you state any errors or "reports" verbatim.
> > >
> > >
> > > On Fri, 26 Dec 2003 19:19:08 +0000 (UTC), in
> > > <bsi1jb$7hq$>
> > > tim scrawled:
> > >
> > > >Today while scanning my system, norton detected w32.IRC.BOT. It
reports
> > as
> > > >detecting and fixing it, however not able to delete the infected
file.
> > > >Details given is c:\windows\system32\ff.exe. When I look for this
file,
> > it's
> > > >not listed.
> > > >
> > > >I've followed the instructions provided by norton, but there is no
folder
> > > >listed nor the file names.
> > > >
> > > >Can someone please help me.
> > > >
> > >
> > > --
> > > Basic computer maintenance
> > > http://uk.geocities.com/personel44/maintenance.html
> >
> >
>

tim wrote:
> Problem sorted now, I just kept on running norton about 5 times and
> on the 5th time norton automatically deleted the infected file as
> normal. I donno why it did not delete as normal the 1st time round.

It obviously needed a darn good thrashing !

>
> "Liz" <> wrote in message
> news:lP3Hb.72106$...
>> I'm not familiar with Norton, in PC-cillin I can manually
>> clear the virus log or virus Quarantine.
>>
>> Also, scroll down to Random startup entry #18
>> http://www.sysinfo.org/startupinfo.php
>>
>> "tim" wrote:
>>> Deleting from normal mode and safe mode, whats the difference?
>>> considering as mentioned the file can not be found, what chances
>>> will it be found under safe mode? I have no idea wot this ff.exe is
>>> as its not found in the mentioned directory, does anyone know what
>>> it is or have come across it? If say it is in use, and you attempt
>>> to delete this file, wouldn't a message pop up saying that it might
>>> have been moved,deleted etc etc.... There is no error or reports
>>> given from norton when it detects/fix virus?
>>>
>>> "°Mike°" <> wrote in message
>>> news:...
>>>> Boot into Safe Mode and delete the file from there. If it's in
>>>> use, you will not be able to delete it. Also, it is much more
>>>> help if you state any errors or "reports" verbatim.
>>>>
>>>>
>>>> On Fri, 26 Dec 2003 19:19:08 +0000 (UTC), in
>>>> <bsi1jb$7hq$>
>>>> tim scrawled:
>>>>
>>>>> Today while scanning my system, norton detected w32.IRC.BOT. It
>>>>> reports as detecting and fixing it, however not able to delete
>>>>> the infected file. Details given is c:\windows\system32\ff.exe.
>>>>> When I look for this file, it's not listed.
>>>>>
>>>>> I've followed the instructions provided by norton, but there is
>>>>> no folder listed nor the file names.
>>>>>
>>>>> Can someone please help me.
>>>>>
>>>>
>>>> --
>>>> Basic computer maintenance
>>>> http://uk.geocities.com/personel44/maintenance.html

Now days you can get charged with 'abuse'.


"Patrick" <> wrote in message
news:rO5Hb.11128$...
: tim wrote:
: > Problem sorted now, I just kept on running norton about 5 times and
: > on the 5th time norton automatically deleted the infected file as
: > normal. I donno why it did not delete as normal the 1st time round.
:
: It obviously needed a darn good thrashing !
:
: >
: > "Liz" <> wrote in message
: > news:lP3Hb.72106$...
: >> I'm not familiar with Norton, in PC-cillin I can manually
: >> clear the virus log or virus Quarantine.
: >>
: >> Also, scroll down to Random startup entry #18
: >> http://www.sysinfo.org/startupinfo.php
: >>
: >> "tim" wrote:
: >>> Deleting from normal mode and safe mode, whats the difference?
: >>> considering as mentioned the file can not be found, what chances
: >>> will it be found under safe mode? I have no idea wot this ff.exe
is
: >>> as its not found in the mentioned directory, does anyone know what
: >>> it is or have come across it? If say it is in use, and you attempt
: >>> to delete this file, wouldn't a message pop up saying that it
might
: >>> have been moved,deleted etc etc.... There is no error or reports
: >>> given from norton when it detects/fix virus?
: >>>
: >>> "°Mike°" <> wrote in message
: >>> news:...
: >>>> Boot into Safe Mode and delete the file from there. If it's in
: >>>> use, you will not be able to delete it. Also, it is much more
: >>>> help if you state any errors or "reports" verbatim.
: >>>>
: >>>>
: >>>> On Fri, 26 Dec 2003 19:19:08 +0000 (UTC), in
: >>>> <bsi1jb$7hq$>
: >>>> tim scrawled:
: >>>>
: >>>>> Today while scanning my system, norton detected w32.IRC.BOT. It
: >>>>> reports as detecting and fixing it, however not able to delete
: >>>>> the infected file. Details given is c:\windows\system32\ff.exe.
: >>>>> When I look for this file, it's not listed.
: >>>>>
: >>>>> I've followed the instructions provided by norton, but there is
: >>>>> no folder listed nor the file names.
: >>>>>
: >>>>> Can someone please help me.
: >>>>>
: >>>>
: >>>> --
: >>>> Basic computer maintenance
: >>>> http://uk.geocities.com/personel44/maintenance.html
:
: