Trojan.IRC

Trojan.IRC is a stealthy computer infection, which is powerful enough to spy on your browsing activity, use your email accounts to spread the infection and hide all of its malicious processes from detection and removal. Trojan.IRC has no interface and does not necessarily expose noticeable symptoms, but if you are experiencing loss of control over your Windows’ components, decreased system’s performance or existence of unfamiliar software (adware, fake antispywares, etc.), it is possible that Trojan.IRC is secretly disabling your Windows privileges and stealing your personal information! If you have the slightest suspicion, do not disregard it for paranoia, and install security tools, which will remove Trojan.IRC, before it manages to develop any further into your system.

Trojan.IRC travels through various security loopholes, from infected USB devices to encrypted downloads, and its hackers have implemented rootkit method to hide the malicious infection and all of its processes. This is done by the malicious system.exe file, which can also disable the highly important Windows File Protection system, responsible for preventing system files’ replacement. In fact, Trojan.IRC consists of many malignant files that are responsible for different tasks of the infection, and can remove multiple Windows privileges. And because Trojan is of a highly stealthy nature, most .dll and .exe files (system32.exe, Windows.exe, WindowsLive.exe, etc.) are cloaked, meaning that they are named after original Windows files, when in reality they modify Windows security policies, change home page settings and add Trojan.IRC processes to the system’s start-up.

Once Trojan.IRC is fully hidden, the malicious files start stealing your information. Temp.dll infiltrates BHO (browser helper objects), which allows hackers to gather your browsing data, obgarg.exe sends MIME emails, and iTunesHelp.exe reads your emails addresses, copies phone book data and secretly connects your account to Chat rooms, using IRC (internet related chat) protocols. Trojan.IRC component csrss.exe can reconfigure Windows Security Center settings, which removes all of Antivirus and Firewall notifications about the stealthy Trojan, and svchost.exe, another cloaked malware, downloads additional malware, secretly sends mail from your accounts, connects to websites and modifies USB drives to spread Trojan.IRC infection.

Trojan.IRC components will restrict access to Registry Editor and Task Manager, which will make it impossible for you to discover and remove the Trojan from your computer. Even the safe mode will be disabled by malicious files, because of which you will not be able to operate your system normally, until you fully remove Trojan.IRC from your PC. Because of the rootkit technique and various other stealthy methods, it will be difficult to delete Trojan.IRC manually; this is why it is recommended for every PC user to install AV tools, which will be able to terminate malicious processes and delete Trojan.IRC smoothly and quickly. Most importantly, these legitimate tools will guard you against malware in the future.