mIRC virus?

Learn about Computer Security Other Security Products
1

I just scanned my mIRC program on www.virustotal.com and these are the results it got… Not sure if it’s infected or if they are false positives?

File mirc.exe received on 11.10.2007 04:11:49 (CET)
Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED
Result: 7/32 (21.88%)

Antivirus Version Last Update Result

AhnLab-V3 2007.11.10.0 2007.11.09 -

AntiVir 7.6.0.34 2007.11.09 -

Authentium 4.93.8 2007.11.09 -

Avast 4.7.1074.0 2007.11.09 -

AVG 7.5.0.503 2007.11.09 -

BitDefender 7.2 2007.11.10 -

CAT-QuickHeal 9.00 2007.11.09 ClientIRC.mIRC.616 (Not a Virus)

ClamAV 0.91.2 2007.11.10 PUA.IRC-Client.mIRC-6

DrWeb 4.44.0.09170 2007.11.09 -

eSafe 7.0.15.0 2007.11.08 -

eTrust-Vet 31.2.5284 2007.11.09 -

Ewido 4.0 2007.11.09 -

FileAdvisor 1 2007.11.10 -

Fortinet 3.11.0.0 2007.10.19 Misc/mIRC

F-Prot 4.4.2.54 2007.11.09 -

F-Secure 6.70.13030.0 2007.11.09 Backdoor.Win32.mIRC-based

Ikarus T3.1.1.12 2007.11.10 not-a-virus:Client-IRC.Win32.mIRC.616

Kaspersky 7.0.0.125 2007.11.10 Backdoor.Win32.mIRC-based

McAfee 5160 2007.11.09 -

Microsoft 1.3007 2007.11.10 -

NOD32v2 2650 2007.11.09 -

Norman 5.80.02 2007.11.09 -

Panda 9.0.0.4 2007.11.10 -

Prevx1 V2 2007.11.10 -

Rising 20.17.42.00 2007.11.10 -

Sophos 4.23.0 2007.11.09 -

Sunbelt 2.2.907.0 2007.11.09 -

Symantec 10 2007.11.10 -

TheHacker 6.2.9.122 2007.11.09 Aplicacion/mIRC.16

VBA32 3.12.2.4 2007.11.08 -

VirusBuster 4.3.26:9 2007.11.09 -

Webwasher-Gateway 6.0.1 2007.11.10 -

2

Hi,

you can read here about:
https://forums.comodo.com/comodo_boclean_antimalware/comodo_boc_thinks_mirc_is_a_trojanresolved-t8188.0.html;msg59441#msg59441

3

Hey yeiazel, Thanks for the reply but… That was for BOClean because BOClean detects it as a false positive does it mean these other AV’s are for sure ???

4

Hi Goose17,

technically Mirc’s executable is an “authorized backdoor”, on sense that if it is employed in IRC software all it’s okay.
While if it comes employed in fraudulent manner it can be exploited like malware illegitimate purposes.
Therefore it is normal that all antivirus point out it like malware or least like a danger, but if it is Mirc parts you can be sure.

It is not a false positive but a warning of potential danger, and you can safely exclude it from CAVS scanning option.

Greetings :slight_smile:

5

Ahhh, alrighty then. Thanks for the help :slight_smile: