Forums Bug Reports Spyware Doctor

Hi!

After install spyware doctor doesn´t detect mirc in any way, but after mirc has been run the first time Spyware doctor wrongly detects mirc as:

Backdoor.mIRC

Threat Level: High

Description: Backdoor.mIRC is a backdoor trojan which makes use of the popular mIRC client. It opens ports and allows unauthorized access to an attacker. It is also capable of hijacking a users browser startpage.

http://www.pctools.com/en/mrc/infections/id/Backdoor.mIRC

You might wanna contact them at http://www.pctools.com/mrc/dispute/

regards Jens

maybe your infected, ever considered that?

nope no infection ... my mate told me about this problem ... so I

1. did a full search with SWD - no alerts
2. installed mirc, did a full search - no alerts
3. ran mirc once, without changing a single setting or connecting, shut it down. did a full search - alerts for backdoor

Have you tried scanning using Microsoft Windows defender?
Here. or Add aware from <a href="www.lavasoft.com" target="_blank">Here.</a> ?

Also you may need to try a virus scanner like <a href="www.kaspersky.com" target="_blank">Kaspersky</a> or <a href="www.symantec.com" target="_blank">Norton antivirus</a>.

I assure you that these scanners won’t detect mIRC as a Trojan. I blame Spy ware doctor

I reveiced this same report from Spyware Doctor. Spy Sweeper, Spybot S&D, Kaspersky, Ad Aware and F-Prot reported the same system clean.

I tried this same test on a system without mIRC. It was reported clean. I did a fresh install of mIRC, ran mIRC and then ran Spyware Doctor - it then reported 18 registry keys as an "infection".

I ran SpyVsSpy and it said i had one spyware device installed.... named "Microsoft Windows" !!!!!!!!

same here .. just SWD reports backdoor ... same 18 alerts

The registry keys that Spyware Doctor reports are the DDE keys... This are the keys which alow websites to have links like <a href="irc://server.com/channel" target="_blank">irc://server.com/channel</a>
And when you click on one of those links it auto start mIRC and connect to server.....
Without those registry keys, the DDE will not work.


The reason Spyware doctor doesn't find anything is because mIRC ads the registry keys to your registry only after you start mIRC

Spyware doctor sucks... Adaware if more accurate and you might also consider trying X-Cleaner which is preaty good on finding stuff that others can't.