Remove Trojan Horse,Virus Removers,spyware search and destroy

W32.IRCBot.B is a Backdoor Trojan Horse that connects to an IRC server and waits for commands from the hacker. This Trojan is a variant of W32.IRCBot and W32.IRCBot.Gen.

Note: It has been reported that W32.IRCBot.B may arrive in an email message about a fake program update for Norton AntiVirus. The sender, updates@symantec.com, is a spoofed email address. Symantec never sends unsolicited email; the attachment should be deleted.

The Trojan may arrive in an email with the following characteristics:

From: updates@symantec.com (spoofed email address)
Subject: Last Update.
Attachment: nav32.zip
Attachment Type: Zip file
Attachment Size: 15.5 Kbytes

NOTE: When the nav32.zip file is decompressed, it becomes an executable file named nav32.exe, which is 19Kb in length.

The Trojan is packed with UPX.

Once this type of Trojan has infected a computer, it is difficult to determine what else the computer has been exposed to. In most cases, changes other than those that the Trojan made will not have occurred. However, a hacker may have been able to use the Trojan to make changes to the computer. Unless you can be absolutely sure that malicious activity has not been performed on the computer, we recommend re-installing the operating system and changing any passwords that may have been compromised.

Wild

• Wild Level: Low
• Number of Infections: 0 – 49
• Number of Sites: 3 – 9
• Geographical Distribution: Medium
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Medium