Home Blog

W32.IRCBot.NG Removal – How to Remove W32.IRCBot.NG instantly

Posted by in Blog Worm
on January 8th, 2013 | Leave a comment

W32.IRCBot.NG is a worm that is mainly distributed via social networks and instant messengers. When the worm is executed at the first time, it will modify windows registry, kill some processes and adds itself as a Window’s trusted network process. Security program processes are the most possible one that W32.IRCBot.NG tries to disable. Even your security program is just unable to update, the worm will be safe from being detected. Next time you turn on the computer, the worm can run automatically. And then it will send spam via instant messenger and social media platforms. Moreover, W32.IRCBot.NG could open back door and thus bring in other threats such as. You need to remove the threat quickly.

Solution for Removing W32.IRCBot.NG
1. Boot your infected computer into safe mode by continuously pressing F8 once windows states that it is loading. You will be brought up with several options and one should be “safe mode with networking” choose that option and continue on.
2. Open Windows Task Manager, end the following processes in memory:
%UserProfile%\Application Data\[RANDOM CHARACTERS].exe
3. Use windows search to find out all the files related to this application and remove them permanently from PC. These files may be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN hided on your computer.
%UserProfile%\Application Data\[RANDOM CHARACTERS].exe
4. Click start button on the lower right corner of desktop – go to run – type in regedit and press Enter. Remove all the registry entries made by this application:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”[RANDOM CHARACTERS]” = “%UserProfile%\Application Data\[RANDOM CHARACTERS].exe”

What is the most effective way to get rid of W32.IRCBot.NG?
The other removal way is to adopt a third party removal program like an antivirus program. Such programs could find out the infected files and registry items correctly and force remove them from the pc. The advantage is it could effectively avoid any manual mistake, which could lead to system crashes.

When your antivirus program could not remove W32.IRCBot.NG effectively, you should consider downloading another powerful one like Spyware Cease. It is an antispyware program enjoying high reputation. The removal could be done within a couple of simple steps.
1. Download and install Spyware Cease
2. The antispywarae program will update itself automatically
3. Perform an online scan
4. Click remove button to wipe off W32.IRCBot.NG and other threats

Comments are closed.