I noticed that mIRC got installed on my system. It appears in the system tray without an Icon. I did the following:

1. Tried to exit mIRC but it restarts.
2. Tried to uninstall mIRC, but it says it must be stopped.
3. Ran the latest Norton antivirus. It did not find any virus.
4. Looked in the registry as suggested to remove it on startup. It was not there.
5. Ran the cleaner. It did not find anything.

Any idea where I can get some help in removing this?

Thanks,

Hi, i can give you some help


Ok, first up, press and hold on your keyboard (once)

Ctrl Alt Delete


and a Windows Task Manager window should pop up (windows xp)(should be the same for windows 98/ME)

and click the Processes tab, look for mIRC in it list, it maybe under another name but this might allow you to
atleast stop the program from running, just click the name and then End Process.


Also goto http://www.grisoft.com and download AVG antivirus, install that and see if that gets rid, i dont use Norton
as i found it too buggy and didnt find virus on my HD.

Hope this helps
ShadowDemon

I started Task Manager and there was no mIRC running. So I thought while I watch task manager, I would exit mIRC. When I did that, it restarted but I couldn't tell which task it was. So I exited mIRC again and this time, it did NOT restart.

I am downloading the AVG anti-virus and will try that. I'll let you know what happens after that.

Thanks,

Hmm, strange behavior on the task manager part, wanting to restart.

I know that some trojans and virus like to hide the mirc under different names,
i cant remember which version Khaled introduced the no renaming of mIRC exe files
some trojans use earlier versions of mIRC to do their work, but most Antivirus
programs out there should detect them and remove them.


On a side not what Operating System are you on ?
If it is windows xp, you could Click Here and follow Parabrats suggestion, not sure if i can help you anymore than i can

ShadowDemon

I think you misunderstood a little(or maybe I did). It was not Task Manger that restarted, but mIRC. Then when I exited it again, it did NOT restart.

I'm running windows 2003 server.

Thanks,

Hmm, windows 2003 server ?, sorry i cannot help you anymore on
that im afraid, as i dont have much knowledge on how that system works.

I hope somebody else here can help you tho.

ShadowDemon

try this thread

some virus/trojans will use mIRC as their way to distribute themselfs and make attacks as part of zombie networks... so that's why it might have been installed when you got infected