°TÅkè~Õ\/ë®° fõ® mIRC FIX
By: FuNkMuNkY ScRipTinG
Subject: RaIN.exe "virus"

--------------------------( Introduction )---------------------------

	First let me explain what is happening.  When you run the 
 original .exe it will do a few things.  One is it will modifiy 
 your win.ini.  The second is it will place a faulty mirc.ini
 at c:\mirc.ini which will allow other mIRC users to control you,
 making you join, part, say things or even delete important files
 like autoexec.bat, making your computer unable to start!.  And 
 the other problem is that it creates a winhelper.exe which makes 
 it so you are unable to delete the fake mirc.ini... Below are 
 steps you can take to find out if you are infected and what to do
 about an infection.


----------------------------( Detection )----------------------------

 -If someone sent you a program and when you ran it, it said
  "Unknown file format" and ever since problems occur...
 -If when someone types .x. you reply to him with a bold .x.
 -If people are controlling your mIRC with a !do command
 -If you have noticed C:\mirc.ini and are unable to delete it
 -If when u load mIRC, you notice a file called mirc.ini loaded 
  in yer remotes and you are unable to unload it...

----------------------------( Quick Fix )----------------------------

	For a quick fix, type /remote off ... It will not get rid
 of the problem, but disable your remotes, making it so the commands
 will not work (but will make it so nothing else in the remotes will
 work either)... only use this if you NEED to be on mIRC and someone
 is controlling you!  For a FULL fix, read below :)	


------------------------( Fixing the problem )-----------------------

 1. Repair win.ini
     - Search your Drive for win.ini.  This can be done by clicking
       on the start button, find, files or folders.  Once you've done
       this a box should appear.  Make sure your searching the whole
       drive.  Once it finds the file double click it to open it up.
	
     - Now that your have win.ini opened up find and delete this:
       run=c:\windows\WinHelper.exe - After you delete this line,
       save and close the file.

 2. Remove winhelper.exe
     - Once again open up the search box.  This time search for
       winhelper.exe.  When you find it highlight and hit the delete
       key.

 3. Finish the job
     - Now search for mirc.ini.  You'll probably see more than one of
       these but you only want to delete one that is located on the
       c:\ folder - do not delete any of the other ones. 

---------------------------------------------------------------------

 This will fix the problem... If you have any further questions, 
 e-mail FuNkMuNkY ScRipTinG at FuNkMuNkY@hotmail.com

-----------------------------( Credits )-----------------------------

 Squatch: Head Author - Email: FuNkMuNkY@hotmail.com
 Thanat0s: Organization - Email: thanat0s@geocities.com
 VeNoM: Consultant - Email: medlicot@caboolture.net.au
 Og: Beta tester - Email: burkh@hotmail.com 

 Also, thanks to Pei, for finding the winhelper.exe problem!

--------------------------------------------------------------------- 
 [FM§ © 1998 http://FMS.cjb.net]