Need to clean up win2k sp3 of nasty prob!!

[|ToKe|]

well i just recently found out i was/am a victem of an xdcc bot on irc. i know some of the things that are being run on my comp for that purpose, but cannot seem to get rid of all the crap. And fear a format is comming on...If anyone knows how to get rid of iroffer, serv-u daemon, svchost, spoolsv etc. let me know so i can clean this crap from my computer. thanx!

[PresterJohn]

i am a little leery about using search & destroy tools...i can't trust it to do a complete clear. a format & clean install would set things right again...

[|ToKe|]

id really like to avoid that since my dad would kick my ass if i formated the comp..id have to format it and have it EXACTLY the way it is right now with all his email, proggies, etc. And i dont know if i could back all that up on the d: (all his emails stuff and adress books etc.)..if there is an alternate route id rather take that..ill format but as a LAST resort.

[Bertus02]

hey toke. i had to same problem but i didnt know what the problem was until you mentioned those file names. the virus would slowly eat up my cpu usage until the puter froze on me. i had no idea what was causing it. i eventually did a format to get rid of it.

[PresterJohn]

well, then for starters, you'll need to scan the machine with an anti-virus with the latest signatures.

the easiest way would be connect a second machine/laptop to the infected one via nic and do a complete scan (i don't trust those internet-based scanners).

then go to www.wilders.org and d/l some of the trojan checkers/cleaners...and keep your fingers crossed.

[necromancer]

spoolsv.exe is the Printer Spooler Service. I don't think it has anything to do with a trojan.

What is the name of the trojan? It may be MovieWorld.



http://www.brown.edu/Facilities/CIS/...hackservu.html