To answer your question... No, mIRC does not install files in your \system32\drivers directory, or anywhere but the designated program folder. This is definitely a sneaky installation. Also search your harddrive for the file "mirc.ini" which can often locate a sneaky install.

Since you are using an NT flavor of Windows, you should benifit from the freeware program TCPView, available at www.sysinternals.com. This program will list all processes that are making or attempting to make an internet connection. If your little "drone" (irc trojan) is active and connecting to IRC, this will tell you.

Good luck.

- Raccoon


Well. At least I won lunch.
Good philosophy, see good in bad, I like!