i got infected recently with the W32.ircbot.gen trojan.

i removed the entries it added in the registry, deleted some files, and i have one thing left infected: syscfg32.exe

the thing is that i'm pretty sure this is a system file - infected with the trojan. (it's in C:\windows\system)
if i delete it, i might mess something up in windows. i need a clean copy of this file.
anyone know where i can get it? or any suggestions??

Maybe from the disc u installed ur OS from.

i'm running Windows98 SE and all i have is the Win98 CD. it's not SE

and it's not on the cd.

Ok... Sorry I don�t know where u can find the file. maybe u can ask on some support site, and remember to be polite.

I looked into some facts and the file syscfg32.exe is not a system file.

This is what I found:
---------------------------------------
syscfg32.exe
Worm P2P.Lolol.
Shares via Kazaa network.
Stop thsi process and remove from startup.
------------------------------------------

u can probarly remove it from ur system.

i asked a couple of ppl who have win2000, XP and they told me that there's no such file on their system. i guess it isn't a system file after all.

i deleted it. hope you're right

np

Use a good antivirus to fix it or reinstall windows. Save your registry and format, reinstall. Go!

i got rid of the virus.
by the way, it was able to run commands through IRC so i didn't load irc during the time.
but now after i got rid of it, whenever i try to go on DALnet i get an error that says: "Unable to connect (Can't assign requested address)"
what is this? y can't i log on DALnet? have i been banned?
i went on the dalnet site and read about their recent DoS attacks. is this the problem? i don't think so....
suggestion anyone?

p.s: i could log on any other server

I know Dalnet was done for a while this week, are u sure the problem still accurs now?

yah