mIRC Home    About    Download    Register    News    Help

Print Thread
#5463 08/01/03 02:22 AM
E
emlee
emlee
E
HELP!!!!! We somehow got the program on our computer and it got hit with some trojan viruses. I was finally able to remove the viruses but still cannot remove this program, I have tried everything, I even renamed the program and removed but it just reinstalled itself. When I try to remove it says to close the program, but I can't. Is there any way to remove the program without reformatting my hard drive.

Thanks

#5464 08/01/03 02:48 AM
Joined: Dec 2002
Posts: 2,958
W
Hoopy frood
Offline
Hoopy frood
W
Joined: Dec 2002
Posts: 2,958
Try killing it with the Windows Task manager. Then try deleting it. Then again the anti-virus software should detect and remove bad files for you.

Also, there is a virus going around that pretends to be an old version of mIRC but isn't. Are you it's not this instead of real mIRC?

#5465 08/01/03 08:11 AM
Joined: Dec 2002
Posts: 222
K
Fjord artisan
Offline
Fjord artisan
K
Joined: Dec 2002
Posts: 222
I think it was the other way around; you got infected with some virus, and that virus installed a (modified) copy of mIRC on your PC.

If mIRC, as part of the payload of a virus, is (re-)installed (in any modified and/or incomplete form) on your PC I'm sure your viral infection has not been cured effectively. First cure your infection properly, then weed out its remains, like this modified mIRC you found on your PC.

Most probably you are infected with (some version of) Trojan.IrcBounce. There has been a firm outbreak of this trojan. The trojan includes a copy of mIRC that hides as Taskmngr.exe actually being mIRC32.exe version 5.7. The Trojan uses this file to run all of its mIRC scripts, including Dll32.hlp, Dll32NT.hlp, Xvpll.hlp, Httpsearch.ini, and NT32.ini. Read more, and detailed removal instructions at http://securityresponse.symantec.com/avcenter/venc/data/trojan.ircbounce.html.
Note how this page tells you how the Norton virus scanner will remove the infection itself, but NOT the files in its payload. It will not remove mIRC or the registry setting starting mIRC! You'll have to do this yourself, by hand. Symantec's info page provides most info you neec to do that. Carefully read the section that says "To delete from the registry the value that refers to Taskmngr.exe".

You are infected with a Trojan Virus or Worm if your mIRC is secretly running at startup of windows, or suddenly sending files to strangers, or joining channels or speaking strange messages you never typed, or whatever else! Please realize that we at mIRC.com are in no way affiliated with the creators of these virusses.

Several recent virusses use mIRC and IRC to multiply themselves next to their primary distribution among Microsoft Outlook users. Well known examples of such trojans are the I LOVE YOU virus, SirCam and Klez, remember? Several virusses install mIRC somewhere on your PC and start it everytime you switch on your PC. This way you can have mIRC on your PC while you never installed it


Make sure to collect lots of information and take the appropriate action. A virus infection is not something you can simply solve by deleting some files or re-installing mIRC! You need to get and use a good virus scanner and probably change your attitude towards strange files. It would be great if reading the info on our website learned you what caused your problem, how you were involved and how you can prevent this from happening again in the future smile

I hope you get well soon!


Link Copied to Clipboard