Updated: February 13, 2007 11:33:35 AM
Type: Trojan Horse, Worm, Virus
Infected users should do the following:
- Delete all files detected as VBS.Illen or Backdoor.TheThing.c
- Restore any .vbs files from a clean backup.
- Restore c:\mirc\script.ini and c:\mirc\mirc.ini from a clean backup.
- Delete the c:\...\MyPicture.bmp.vbs value from the HKLM...\RunServices\Winload registry key.
- Restore the Registry entries modified on December 31st to their correct values (if applicable).