IRC Bot/Worm Removal Tool
This application was designed to remove many IRC bots/worms that are often not detected by antivirus software. It was particularly designed to remove variations of the W32.SpyBot.Worm although it may remove other bots/worms/malware as well.
The application detects infections by scanning the startup keys of the registry. Duplicate values in these keys is a sure sign of malware; as far as I know, no legitimate program does this (or should.) Blacklist will extract the data from those values and use it to attempt to find and kill the process, executable file, and registry values.
Instructions
- Run “Blacklist.exe” by double clicking it.
- Press the "Scan And Clean" button to scan and remove bots/worms.
- The scan should run fairly quickly (a few seconds.) It will take longer if a definition file is used.
- If desired, save the results to a file.
Known Issues
-
Error on some computers: "Component 'MSCOMCTL.OCX' or one of it's dependencies not correctly registered." This is
because on some machines the needed ActiveX control is either not installed, corrupted, or not registered.
This is fixed as of version 3.0.1! I pared down the interface by removing the status bar and progress bar. In version 3.0.3 I recreated a progress bar using a dynamically resized shape. -
In some cases the bot's exe file would not be removed. This may be because I/O on the file is not finished
immediately after the process is killed. Initially I added a 1 second wait just before the file was deleted;
this fixed all but 90% of the problem.
This is fixed as of version 3.0.4! If the file is not successfuly removed after the 1 second wait, it is marked for deletion after the next reboot.
License & Disclaimer:
If you distrubute this program, please provide a link back to this web page.
This program is by no means perfect and if a computer gets damaged by it… IT’S NOT MY FAULT!
Download Version 3.0.4
- Download the current zipped archive here.