A colleague's computer has mIRC mysteriously installed and it autostarts itself upon starting W2K. He used McAfee and found irc.mimic. The trojan is deleted but mIRC is still on the computer and autostarts itself. It is not on the list of programs in Control Panel -> Add/Remove Program. I did a file search, but there is no obvious mIRC installation files.

How can I uninstall mIRC on this computer?

Thanks!!!!!!

Hi!

Just delete the folder containing the executable

or in the registry (regedit.exe):
HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > Current Version > Run

Delete the suspicious keys or print them here for some help.

Thanks for the info. That's quite helpful since msconfig doesn't run on the computer (W2K).

I ran the free online virus scan on Trend Micro. It found 7 infected files, including BKDR_IROFFER, IRC_BOUNCE, TROJ_HIDEWND, TROJ_FLOOD.C. They were digusted as vm32.exe. winclock.exe and smnt.exe.

(Norton with the most updated virus signature couldn't find those infected files)

After the scan and removal, no more mIRC autostart problem anymore.

Thanks again!!

Wow, I just looked up what each trojan files found do... It is AMAZING!!!

In summary, it downloads a modified copy of mIRC to the computer, sends out a list of MPG, AVI, ASF, RAR, ZIP, and CUE files on the computer, connects itself to IRC servers and lets ppl download the files.

Pretty wild!!!!