This trojan has some lovely script that may make the reader think they are going to do nasty things to 
the infected persons computer if they try to remove it. Like ... deltree /y c:\*.* ... don’t be fooled 
read all script carefully this is just an amsg that plays to channel. There are several in the mirct.ini. 
It is an interesting read.


The trojan adds: pkmkni.cfg to c:\

poo.txt to c:\

bud.coo to c:\

mirct.ini to c:\mirc

mirc.ini to c:\mirc

mirc55t.exe to various locations in c:\

the line C:\Windows\winn.com is added to autoexec.bat 

C:\Windows\winn.com may also be added to c:\windows. Do not confuse it with c:\windows\win.com

This one spreads fast, so it is best to keep the yourself isolated & out of any channels until the trojan is removed. 
Or best type /join #virusfix and seek trained help.

NOTE: This is a new trojan at the time of this update. So there is not much more to tell at this point.

 

    Source: geocities.com/timessquare/alley/2794

               ( geocities.com/timessquare/alley)                   ( geocities.com/timessquare)