Ident FAQ
Windows Ident
Macintosh Ident
Unix Ident
Microsoft ICS
Proxies & Firewalls
Routers
Security Check
Akill Information
Specific Fixes
Contact Us

TROJAN : Mirc55t
AKILL CODES : [exp/mirc55]

This trojan is spread by DCC or by downloading from the web. It's around 30-40Kb in size (the real mIRC executable is over 1Mb) and must be executed by you before you will become infected. If you have downloaded or received this file AND HAVE NOT EXECUTED IT you are not infected and can simply delete the file.

If you find you are bing autokilled with this code and have never received the mIRC55t.exe file, please see the instructions on resetting your ident - http://kline.dal.net/exeploits/winident.htm

If you HAVE executed the file, please follow these instructions

1. From the Start menu, use find files or folders to search for files called mirc55t.exe (or the name of the file you downloaded) Delete all the files you find.

2. Repeat step one, searching for games.exe this time. Delete all the files you find.

3. From the Start menu, select programs, accessories and click on Notepad. Choose File, Open from within notepad and enter c:\autoexec.bat in the filename box then hit return. Remove the line which reads c:\windows\winn.com then save the file and close notepad.

4. Go to Windows Explorer. Click on View, then go down to Folder Options. Click on the view tab and go to "Hidden Files" and click "Show all files"

5. Go to C:\windows and delete winn.com (Do NOT delete win.com)

6. Delete your mIRC folder (usually c:\mirc).

7. Go to www.mirc.co.uk and download a new copy of mIRC and reinstall.

You should never accept files from untrusted sources. Always scan all files you receive with an up to date virus scanner before opening them.