Hi, I'm an IT assistant at my workplace, and according to a network management fellow, one of the user's computers (Win2K OS) is sending traffic to an IRC server without her knowledge (she doesn't even know what IRC is).
I did a scan with Adaware and found/removed Alexia and VX2. But the traffic is still going on. I used HJT, and the logfile had an entry which I could not find any info about:
O4 - HKLM\..\Run: [MSKCES32] D:\WINNT\msapps\dir\clt.exe
Anyone know what this is? I've checked a few other Win2K workstations, and none of them had this clt.exe file, let alone a dir folder in msapps.
here's the complete logfile also in the next post. thanks to anyone who can help.