> Spyware Encyclopedia Page 43 > Dark IRC

Dark IRC removal

Spyware Dark IRC Information
Name: Dark IRC Category: IRC Killer Date: 2002-01-23 Author: Stalky Coded in: Delphi Dangerous: Yes

Dark IRC is one of IRC Killer spywares.
Finding it on your computer means that your computer is infected with IRC Killer and crucial data could be endangered or even lost.

Dark IRC description by Stalky:

Creator: ´This application is to be used to try your own irc server & your own box or with the admin of the box´s permision.. Do not use darkirc if your planning on doing bad with it... If you do use this application for bad you agree that the aurthur will not be held responasble for anything illegal you do with it. Gr33tz To: darkirc crew , silicon , elly , steven , ResinDog , #fl00dcentral , #delphi , Austnet crew , Welcome back Ryan1918! , Thanks freedumb for all the help!! [BUG FIXES] Fixed alt tab (cant be seen now) Fixed .cloneload4 (it used to quit the bot) Fixed Disconnection problem (wouldnt come back/ Now reconnects) Fixed Editserver (generaly f*cked) Fixed clone problem (Could run more than 1 server.exe at once) Fixed nick problem (used to be random nicks banned easily) Fixed .clonemsg (would only msg 1 word) Fixed .spambotmessage (Read above) Fixed .msg (Read above) Fixed Editserver bug... Didnt open (thanks Ars0nik) Added .findsubseven (finds subseven editserver settings) Added .cloneload to 20 clones Added .find c:\*.mpeg (finds any file on the victims pc (very handy) Added Removes most lame bots (gt / litmus) Added New login system (two people cant use it at once) Added .logoff Added .cloneusermode Added .spread (distributes darkirc via the victims email (NASTY :P))

This IRC Killer is also known as:

•Backdoor.IRC.Dark.40.a.
• Backdoor.IRC.Dark.a.
• DarkIRC.
• DDoS.Win32.Palukka.
• Win32.DarkIRC - named by Computer Associates.
• Win32/DDofS.Palukka trojan - named by Eset.

>> Delete Dark IRC automatically - Download Spyware Doctor

Dark IRC Removal Instructions
Kill the following processes edit.exe, editserver.exe, server.exe, glpod.exe
Delete these registry entries HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\winxp
Remove the following files darkirc.txt, edit.exe, editserver.exe, help.txt, server.exe, w32darkirc.vex. glpod.exe in Windows\

Bookmark Dark IRC page

Previous Spyware: Remove Dark ICQ

Next Spyware: Remove Dark IRC 1.0