IRC.Backdoor.Trojan

Nortons has specific removal instructions:

The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.


Disable System Restore (Windows Me/XP).
Update the virus definitions.
Restart the computer in Safe mode or VGA mode.
Run a full system scan and delete all the files detected as Backdoor.IRC.Aladinz.G, Backdoor.Trojan, Trojan Horse, Hacktool.DoS, Hacktool, IRC.Backdoor.Trojan, or Hacktool.HideWindow.

http://www.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.g.html


If problems persist beyond this, please run our tutorial:

http://forums.majorgeeks.com/showthread.php?t=35407

And check back with us!

 

You must run ALL steps in the link ( http://forums.majorgeeks.com/showthread.php?t=35407 ) Major Attitude gave to you. This includes running Windows Defender and also the two online scans given in step 6. Then you must attach the two logs from the online scans as requested.

Yout alternative is to just try deleting all files in the below folder:
C:\Documents and Settings\iaburto\Local Settings\Temp

 

You forgot to empty your Norton Quarantine folder as step 0 requests!

Your quarantine is here:
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine

Did you delete all file in the below folder:
C:\Documents and Settings\iaburto\Local Settings\Temp

 

I repeat my question. Did you delete ALL files in the Temp folder? Not just the problem DLL. Did you delete ALL files?

Download & run Blacklight Beta

• Hit I accept. It will take you to download page.
• Download blbeta.exe and save it to the Desktop.
• Once saved... double click blbeta.exe to install the program.
• Click accept agreement and Click scan
  This app too may fire off a warning from antivirus. Let the driver load.
  Wait for it to finish.
• If it displays any items...don't do anything with them yet. Just hit exit (close)
• It will drop a log on Desktop that starts with fsbl....big number

Please attach the Blacklight log file here.

 

There are plenty of hits on that out there, but you don't need to find any info on it anyway. Bitdefender deleted the file! But this is related to your DLL file too.

Did you install this program? http://www.mybestsoft.com/iesec/index.html

Or what about the below?
O2 - BHO: MSNToolBandBHO - {49E0E0F0-5C30-11D4-945D-000000000000} - C:\WINDOWS\system32\msntb.dll

 

I thought it was the problem. The CLSID was for Internet Explorer Security Pro but then name was saying MSN. I wanted to be sure you had not installed them and then was going to have you fix that BHO.