More likely a new worm signature (in a newly downloaded data file for the virus programs) that looks something like some code in mIRC. (BTW, there's no distiction between "in a program" and "on a program". It's either in part of the filespace of the program or it isn't)
