Bot Removal

[.Eli]

Tutorial on a botnet removal made by Eli at Ibotmodz.net

 

Hello there!, First off let me just say that this tutorial is to remove a botnet off your computer if you have been infected.

 

Faqs VVVVV

 

What is a bot?

Well a bot or Botnet is a virus that has been infected into your CPU

 

Can this hurt Me?

Not always, Most bots are used to boot people offline. So you should be pretty safe. But you may get an Error each time you load your CPU.

 

How did i obtain this?

Most people are gullable enough to Download a such called "MS point gen" or an "XBL 3month gen" From youtube, Limewire, Or mininova.

So DO NOT DL ANYTHING FROM THERE. There is no "real" ms point gen or Month gen for xbl.

You might have dl'd a "Con resigner" Dont dl those either.... The only real one i know about, is the one you pay 20$ for.

 

Im really nervous

Dont be nervous, thats why im here to help.

 

Okay back to the tutorial.

 

What does the error look like?

The most common error is CSRSS.exe is missing from the Config file in system 32. It looks like this.

http://www.ibotmodz.net/forum/uploads/remoteimages/28161-169.jpg

Csrss.exe is not suppost to be in the config folder. Its suppost to be in system 32 thats it. So this is a bot!!!

 

How can i remove this bot?

 

Here are the steps to removal

1 Run your virus software for a full system scan

2 Run your spyware for a full system scan

3 Download this program COMBO FIX http://rapidshare.com/files/125712154/Comb...915667159397699http://rapidshare.com/files/125712154/C ... 7159397699

4 Run combofix, Do everything it tells you to do. Close everything out, [ Internet, Limewire, Ect]

 

This will take like 15mins tops to do, After you have done everything it told you to, You should have to restart your computer. When you do this, you should log in. And your bot is now removed.

 

 

Hooray!! You have reached Success!

 

Notes:

From now on, Only download stuff from trustworthy people. Scan the program first. And gain common sense.

 

Tutoraial made by Eli at Ibotmodz.net This tutorial is ANTI RIP. Please if you re post this somewhere else, Give me credit.

[Guest]

This is only to remove one type of bot. There are many variants that range from easy to remove to near-impossible. If you're lucky, then you will simply have a bot that runs on startup. If you are unlucky, then you will have a both that has intergrated itself into the Operating system.

All of these bots can be removed given the correct steps.

Also note that I also sell my CON resigner, so now there are only 2 resigners out there.

 

a better way to detect if your computer is a bot:

- go to start -> run -> type in "CMD". from here, run the command "netstat -n". Look for any connection that runs on the port "6667". If you see anything that looks like 84.203.14.102:6667, then that is a botnet. Any botnet will always listen on the 6667 port!

 

So the idea is that if you do not have anything listening on that port, then it isn't a botnet. It could be a virus, or just a program doing something it shouldn't be doing.

[.Eli]

This is the most common bot though.

 

 

So its a tut on that one.

[SmokiestGrunl]

I just dragged mine into the rubbish bin but mine was inactive.

[Curtis]

Wow thanks.

 

Bye bye fattwam bot.

[xxI Plazma Ixx]

my computer crashed cause of that and ur right never dl the microsoft point generator i had to buy a new computer

[Dark Slipstream]

Massive bumps ftw? Topic Closed.

[SmokiestGrunl]

Topics rarely need to be locked in off-topic, reopened.

[Curtis]

hello

[PREPPY DIABLO]

this should be in computer support

[Quinn]

my computer crashed cause of that and ur right never dl the microsoft point generator i had to buy a new computer

 

 

Fail.

Format, reinstall OS

Takes 40 mins.

[Lockon]

Depends if he knows how to do it so the real time would be 4 hours

[Quinn]

Depends if he knows how to do it so the real time would be 4 hours

 

 

Meh, it takes me 40 mins to format and install XP on a PC

Edited July 1, 2009 by Quinn