View Full Version : W32/IRCbot.worm!MS05-039 help me plllll
7up4000
09-04-2005, 09:20 PM
W32/IRCbot.worm!MS05-039 is in my pc it has not started 2 reboot non stop but 4 some reson i have the newest updates and just got mcafee a month or so a go and it will not go away i have tryed 2 use there free program called stinger but 4 some reason it will not work eather i really want this virus off 4 free i need help some one pl help me thx
Ex_Brit
09-05-2005, 04:20 AM
I moved this to Virus Discussions & Removal Assistance.
Please go to your taskbar "M" and right click, then go to each application and click "About" - please post full details from there.
Also what operating system you are using...98, ME, XP SP1 or 2 and are you up to date with Microsoft Updates?
Please check this topic out for some basic steps for virus removal.
Announcement: **Please read this before posting in this forum!!!** (http://forums.mcafeehelp.com/viewtopic.php?t=30839&start=0&postdays=0&postorder=asc&highlight=)
Try a safe mode virus scan...tapping F8 while booting up.
Ex_Brit
09-05-2005, 04:22 AM
Also read here: http://vil.nai.com/vil/content/v_135491.htm
Viruscan or Stinger should remove it as long as you are up to date with them...again try safe mode for best chance.
JayneLeeH
09-05-2005, 11:18 AM
My notebook HAS been totally disabled by the worm; all it does is reboot and reboot and . . . . . . .
I have contacted McAfree, bought a recovery disk a couple of weeks ago that I am told won't be shipped for six weeks (?), paid for support with someone who had no idea how to deal with the problem, and chatted with customer support, which also had no idea what I was talking about. These folks did not even understand English! Why am I paying for the entire Suite of McAfee products, plus the Gold support (or whatever it is), if no one will help? I am really disgusted with McAfee right now! I need my computer for my online business - doesn't anyone understand that? Someone please help me, just point me in the right direction . . . . .
Ex_Brit
09-05-2005, 11:30 AM
You can't get it to boot into safe mode at all? It's unusual for a worm to cause continual reboot.
If it's totally unbootable then the only alternative would be to format the hard drive and reinstall Windows using the installation CD. There's not much anyone can do if it's doing this, apart from maybe a PC repair shop.
Ex_Brit
09-05-2005, 11:51 AM
If you can use a non infected PC create a bootscan disk as per this link. The infected machine should be able to boot from it.
http://ts.mcafeehelp.com/displaydoc.asp?frames=1&docid=71629&CategoryId=85787
JayneLeeH
09-05-2005, 03:22 PM
Thanks for the replies, but nothing worked. The infected computer does not have a 3.5 inch floppy drive, only a CD drive. I burned all the files to a CD and set the computer to boot from the CDROM, but nothing happens. I can get to the page to choose safe mode, but nothing from the menu works, it just boots over and over after I make a choice. I have gone into the setup and changed the 1st device chosen to CDROM and that doesn't do anything either. Any other suggestions?
Ex_Brit
09-05-2005, 03:32 PM
I've already escalated this but being a long weekend there probably wont be an answer until Tuesday.
Ex_Brit
09-06-2005, 05:02 AM
The consensus is that the only solution is to format to wipe your drive totally clean and reinstall Windows.
Sorry about that, but if the machine will not stay in even safe mode there isn't much anyone can do about it other than that.
secured2k
09-06-2005, 12:48 PM
It is possible to repair this virus damage without formatting, but the steps to perform probably require quite a bit of technical knowledge to be performed on the computer physically.
An In-Place reinstall should also fix the problem without having to erase your data.
Ex_Brit
09-06-2005, 01:08 PM
An In-Place reinstall should also fix the problem without having to erase your data
But that would keep the virus too. Format and install wouldn't but would erase all data.
JayneLeeH
09-11-2005, 04:53 PM
I contacted Dell and they told me my hard drive had failed and are sending a new one. However, I managed to get into DOS (was installing Windows XP to a new directory and jumped out into DOS). Is there anything I can do in DOS to eliminate the worm, if it is present? I ran chkdsk and found the volume has some errors and am getting ready to fix them. Any help is greatly appreciated! Jayne
vBulletin® v3.6.8, Copyright ©2000-2008, Jelsoft Enterprises Ltd.