Remove IrcWorm. Description and removal instructions

Title: IrcWorm
Type: Worms	Severity scale: (33 / 100)

IrcWorm is a relatively harmless worm that propagates through IRC chat network channels. It sends messages to IRC users asking to accept a Zip file containing a copy of the worm. Once executed, IrcWorm secretly installs itself to the system and continues spreading. It does not carry any destructive payload. The parasite runs on every Windows startup.

FORUM:
Discuss IrcWorm in
spyware removal forum

Related files: rdfhost.dll, photo album.zip

IrcWorm properties:
• Hides from the user
• Stays resident in background

Automatic IrcWorm removal:

remover for IrcWorm

IrcWorm manual removal:

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\rdshost
HKEY_CLASSES_ROOT\CLSID\{5344BB88-3DE1-409F-8307-C85923A1F4DD}

HELP:
how to remove registry entries

Unregister DLLs:
rdfhost.dll

HELP:
how to unregister malicious DLLs

Delete files:
rdfhost.dll, photo album.zip

HELP:
how to remove harmful files

Misc:
Exact file location:
photo album.zip - C:\WINDOWS or C:\WINNT
rdfhost.dll - C:\WINDOWS\System32 or C:\WINNT\System32

Other programs to remove IrcWorm:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 28/03/07
Information updated: 28/03/07

Additional resources related to IrcWorm:

Attention: If you know or you have a website or page about IrcWorm removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about IrcWorm parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.