Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


About Mirc

  • Please log in to reply
2 replies to this topic

#1 henrymills


  • Members
  • 1 posts
  • Local time:07:46 PM

Posted 13 November 2014 - 05:54 AM

Hello I need help about figuring if its safe to use mirc.Im using a scriptedMIRC client by kickchat and when i run avast it says win32:MIRC-Z(Pup).So I uploaded the kickchat mirc.exe to virustotal and got this.MIRC1st_zpsc1f093e9.jpg.Then I download the old mirc.exe from www.mirc.com thinking its clean cause its from the officialwebsie itself.I replaced the kickchat mirc.exe with the original old mirc.exe.I uploaded the old mirc.exe in virustotal and got this MIRC2nd_zps779b8a04.jpg.I then run rkill.exe and bootscan my computer with avast and got this avast_zps004cb33c.jpg.As you can see there's an mirc635.exe on my temp folder and I deleted it,but I still dont get where that come from.I run malwarebyte  too and this is the log.

Malwarebytes' Anti-Malware

Database version: 8298

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

11/13/2014 9:09:56 AM
mbam-log-2014-11-13 (09-09-56).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 659201
Time elapsed: 5 hour(s), 46 minute(s), 30 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\windows xp\Appz XP\dvd-cloner iv v4.10\dvd-cloner iv v4.10.exe (Malware.Packer.Gen) -> Quarantined and deleted
c:\windows xp\Appz XP\internet download manager v5.08\internet download manager v5.08(Trojan.Downloader) -> Quarantined
and deleted successfully.
c:\psp-games\new folder\video.enhancer.1.9.6-snd\sndloader\video.enhancer.1.9.6.loader-snd\loader.exe
(PUP.Hacktool.Patcher) -> Quarantined and deleted successfully.
c:\Users\myeminence\downloads\resident_evil_6_1.0.1.130_+_11_trainer\resident evil 6 + 11 trainer.exe
(HackTool.GamesCheat) -> Quarantined and deleted successfully.

So far I deleted all that was found and deleted,but when I uploaded the old mirc.exe in virustotal,6 antivirus still gives same result on it.Is this false positive or  not?I hope you can help me.

BC AdBot (Login to Remove)


#2 Alex&Vanko


  • Banned
  • 1,394 posts
  • Gender:Male
  • Local time:01:46 PM

Posted 13 November 2014 - 03:07 PM

Happened the same to me with mIRC.So I downloaded IceChat and no problems.I think scriptedMIRC is false positive.

#3 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 51,744 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:46 AM

Posted 13 November 2014 - 04:40 PM

Detections on Mirc have been occurring for years:

The file is not-a-virus. However, some programs may at times be detected by anti-virus and anti-malware scanners as a "Risk Tool", "Possible Security Risk", or Potentially Unwanted Program because they can be misused by attackers.


Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users