Danger level 6
Type: Spyware

Client.IRC.mIRC

Client.IRC.mIRC is considered a Potentially Dangerous Tool, which can further be classified as a spyware application.

A Potentially Dangerous Tool is an application that is not harmful in its design, the only time this type of tool will become a PC threat is if deployed by unauthorized parties, for potentially malicious intent.

Also known as ClientIRCmIRC, Client IRC.mIRC, ClientIRC mIRC, or by its many aliases:
- AMC.exe
- Explorer.exe
- iexplores.exe
- kernel32.exe
- mirc.exe
- system.exe

Client.IRC.mIRC is further given the classification as a low risk application, which generally speaking should do no harm to a computer system, unless installed without the knowledge or permission from the system’s user.

Being a low risk program, Client.IRC.mIRC may track online habits - as provided for in a privacy policy or End User License Agreement (EULA) - or may display advertising within the applications themselves, these programs have only vague, minimal or negligible effects on the system’s privacy.

A further classification Client.IRC.mIRC receives is to be regarded by some experts as a Backdoor.IRCBot, from the family of IRC backdoors. It has been claimed that if Client.IRC.mIRC allows for the unauthorized access to an infected PC, then Client.IRC.mIRC will then have capability to spread over a network exploiting various Windows vulnerabilities.

Client.IRC.mIRC may come bundled with other malware and ensure that they are executed each time Windows starts. A malicious Trojan horse or Bot may represent a higher security risk for the compromised system and/or its network environment.

Accordingly, Client.IRC.mIRC may be considered a malicious backdoor Trojan infection that runs in the background and allows remote access to the compromised system.

Client.IRC.mIRC has been seen to display the following behavior:

* The Process is packed and/or encrypted using a software packing process
* Can make outbound communication to other computers, IM chat rooms and other services using IRC protocols
* This Process Contains User Mode Rootkit Functionality and can hide itself from the running process list
* This process creates other processes on disk
* Includes file creation code which could be used to test for interception by security products
* Opens browser pop ups
* Uses DNS to retrieve the IP address for web sites
* Uses reverse DNS to retrieve the host names on IP addresses
* Uses your PC to connect to Chat rooms
* This Process Deletes Other Processes From Disk
* Adds products to the system registry
* Executes Processes stored in Temporary Folders
* Executes a Process
* Writes to another Process\'s Virtual Memory (Process Hijacking)

The best thing to do to rid any computer system of the presence of Client.IRC.mIRC and all its components, would be to employ the services of a fully functional and up to date, not to mention legitimate antispyware tool.

Download Spyware Removal Tool to Remove* Client.IRC.mIRC
  • Quick & tested solution for Client.IRC.mIRC removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Client.IRC.mIRC

Files associated with Client.IRC.mIRC infection:

AMC.exe
mirc.exe
Explorer.exe
kernel32.exe
system.exe
winup.exe
iexplores.exe
kernel32.exe
system.exe
Explorer.exe
AMC.exe
mirc.exe

Client.IRC.mIRC processes to kill:

winup.exe
iexplores.exe
kernel32.exe
system.exe
Explorer.exe
AMC.exe
mirc.exe
kernel32.exe
mirc.exe
AMC.exe
Explorer.exe
system.exe

Remove Client.IRC.mIRC registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ msngers
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SYS1
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WinXPService
RUNNING PROGRAM\mirc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ systemfile
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ AMC
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN AMC
RUNNING PROGRAMmirc.exe
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN systemfile
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN SYS1
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN WinXPService
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN msngers
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.