Forums Connection Issues question about ZoneAlarm finding trojan in mirc

Greetings:

I've been a fan of mirc for a few years. A few weeks ago my ZoneAlarm Pro (ZA) detected a trojan (spyware) in my mirc. I quarantined it, which effectively disabled (and deleted) the application. I did another scan and ZA was happy since mirc was deleted. I downloaded the application again a few days later (version 6.21) from www.mirc.com and immediately did another scan. ZA found the same problem with it again. A few people have reported the same scan result on the ZA forum. Some of us have submitted a report to ZA that it might be a "false positive". We haven't heard back from ZA. Has any one else experienced similar problems with mirc and/or ZoneAlarm? My roomate suggested I copy mirc from a CD he has into a new folder on my PC, then scan the folder. I do NOT run scripts, nor do I accept files from anybody while using irc.

ZoneAlarm Pro (Version: 7.0.337.000. Anti-spyware engine version: 5.0.172.0. DAT version: 01.200707.1905) found the following:

= = = = =
Trojan: Win32.Generic.32
The detail section said the trojan resided in the following areas:
File: C:\Documents and Settings\Owner\Desktop\mIRC.Ink
File: C:\Documents and Settings\Owner\Start Menu\Programs\mIRC\mIRC.Ink
File: C:\Program Files\mIRC\mirc.exe
= = = = =

Spysweeper found nothing (Program Version: 5.5.1.3356. Definition Version: 942)

Spybot found nothing (Version 1.4)

AVG Free found nothing (Program version: 7.5.476. Virus base: 269.10.0/886)

SanaSecurity (Primary Response) has not alerted me to a problem

I also used the on-line scanner at www.virustotal.com . The on-line scanner found the following in my mirc.exe file:
= = =
Ikarus - not-a-virus:Client-IRC.Win32.mIRC.621
Kaspersky - not-a-virus:Client-IRC.Win32.mIRC.621
McAfee - potentially unwanted program Generic PUP
= = =

From reading other postings, I understand the McAfee "warning". That one doesn't bother me. I use XP Professional Edition. --HELP-- I WANT TO USE mIRC AGAIN !!

In advance, Thanks

David (aka, cigarpig) (Eastern Upstate NY)

To make a long story short, if you downloaded from the official download location, which it appears you did, based on your post, this is called a False Positive, and mIRC is perfectly safe to use.

This has been reported numerous times before.

Just ignore Zone Alarm. They are too fixated on preventing people from using mIRC for no reason. Put mIRC on a safe/protected list in Zone Alarm if there is such a list. If not, then you probably should save yourself the headache and use something other than Zone Alarm.

RusselB and Riamus2:

Thanks for the replies. I've come to the conclusion that ZoneAlarm just does not like irc. With that in mind, I'm surprised they don't have their own brand of irc (Hehehe).

ZoneAlarm (at least the Pro version I use), does have a place where I can have irc ignored during a scan. I can also have the so-called virus it found ignored. I'll probably use that option just in case something DOES creep into irc.

Thanks again
David (aka cigarpig, Eastern Upstate NY)