In the case of script.ini or server.ini, the script file is not loaded by itself. It is loaded by a VBScript sent to your C: drive by the website. The VBScript then writes the mIRC script. When the script is loaded the VBScript is deleted. I am sure Micro$oft made a patch for IE to stop this but I am not 100%. Even if I am right there the fact is that millions of people around the world simply don't bother to patch their systems, either because of ignorance (they don't know an update system exists) or because of the "It won't happen to me" syndrome.
