BOT trojan possibly from Facebook

[gpeaslee]

Has anyone seen a trojan that tries to make an IRC connection about every minute? It keeps 'typing' "you are owned" along with some gibberish all over the place. I think I got this from a popup on Facebook asking if I wanted to change a language or something like that. I hit close and have had the problem since shortly after that. Everything else I've done has been very routine.

How to I identify the process using tcp port 6667?

[bashiergui]

Identify ports assigned to services with http://en.wikipedia.org/wiki/List_of...P_port_numbers
port 6667 is irc.

[sammiev]

I would just save the bookmarks and delete the full directory of the Web Browser that you are using and do a fresh install of that Web Browser. Restore your bookmarks and your done.

[bapoumba]

In addition, if you did got it from Facebook, please go to your apps in your Facebook account and remove everything you do not recognize. Same for the browser plugins and extensions.