Bugtraq mailing list archives

Re: mIRC Worm


From: prw () BESTWEB NET (Paul Wilson)
Date: Thu, 18 Dec 1997 19:57:08 -0500


Newer versions of script.ini will not allow the user to use /remote off or
/unload. script.ini aliases these commands to make the users actually
delete command.com, config.sys, etc. The safest way to get rid of the file
is to have the user close down mIRC and delete script.ini before they load
mIRC again.

Paul.

On Thu, 18 Dec 1997, Nigel Reed (Non-HP) wrote:

It might also be worth pointing out how to get rid of the
script.ini program in the first place for those who are
not sure.

Load up mIRC

/remote off
/unload -rs script.ini
/remove script.ini
/sreq ask
/remote on




Current thread: