Maggie wrote:
Quote:
> I believe my computer was affected by some virus.
> Somehow program called 'mirc.exe' has been installed. I tried to unistall
> it, however problem exists. Every time after turning on my computer, the
> winsow pops -up with the message:
> COULD NOT LOAD OR RUN 'C:\WINDOWS\SYSTEM32\SETUP\DRONA\MIRC.EXE' SPECIFIED
> IN THE REGISTRY. MAKE SURE FILE EXISTS ON YOUR COMPUTER OR REMOVE THE
> REFERENCE TO IT IN THE REGISTRY
>
> Is there a way to get rid of it? please, help.
> thank you
>
I found this which looks interesting, as does the product that goes with
it (Link on page).
http://www.threatexpert.com/files/mirc.exe.html
There is a legitimate mirc executable, but be aware that internet relay
chat is also a good way to get people to infect themselves with trojans
etc, so look on that page about 15 lines down and you will see your
critter is clearly identified by the "DRONA" in the path name.
It's gone, you nailed it, but the registry entry that tries to run it is
still there. It won't do anything, the error message tells you that it
cannot find the file you removed, but you need to edit the registry to
stop that message.
See if anything Malke suggested gets it first.