Client-IRC.Win32.mIRC.621 removal tips

The Client-IRC.Win32.mIRC.621 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Client-IRC.Win32.mIRC.621 virus can do?

Creates RWX memory
Reads data out of its own binary image
Unconventionial language used in binary resources: Hebrew
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Client-IRC.Win32.mIRC.621?


File Info:
crc32: 0153C2F2
md5: 08cce0bd56ae5f1591680959b3ce4f7a
name: kelebekmedia.exe
sha1: ab9b44e7b47405acb4fbb92e75b7bd6d217cbb17
sha256: 802cf6c6ce0a18e71ad53b27183e3ddcf6b7748fe66825a85022ad304095ba5b
sha512: 77ad6d9b521b48d594e5fc68fe80a9c04fff74f66cbac885d208de822ca7de3e1e7c2bd98fd5488a5e3c09ec03a4585e771b902e3f3ffad47723b5d3e4356bb1
ssdeep: 98304:d2I50ik2/wKJXqDHBfxdLuplGG3ckFNvde8bsdn8Lzy3:c+Bk2/wKZqDBfxdkGG3cYre8wdnuU
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: KBSC
InternalName: Kelebek Scriptxae v.Media Setup
FileVersion: Kelebek Scriptxae v.Media
CompanyName: Klavye Bilgisayar
LegalTrademarks: Klavye Bilgisayar
Comments: Klavye Bilgisayar Script Coderleri
ProductName: Kelebek Scriptxae
ProductVersion: Kelebek Scriptxae v.Media
FileDescription: Kelebek Scriptxae
OriginalFilename: Kelebek Scriptxae
Translation: 0x0409 0x04e4

Client-IRC.Win32.mIRC.621 also known as:

NANO-Antivirus	Riskware.Win32.MIRC.dmeclm
Symantec	ML.Attribute.HighConfidence
Kaspersky	not-a-virus:Client-IRC.Win32.mIRC.621
Rising	Trojan.Win32.Generic.155D2166 (C64:YzY0OtOcIlu4OB7k)
Comodo	Malware@#dzowzq1e1ows
DrWeb	Program.mIRC.621
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
Cyren	W32/GenBl.08CCE0BD!Olympus
Webroot	W32.Malware.Gen
MAX	malware (ai score=94)
ZoneAlarm	not-a-virus:Client-IRC.Win32.mIRC.621
Yandex	Riskware.IRC!
Fortinet	PossibleThreat.SB!tr

How to remove Client-IRC.Win32.mIRC.621?

Client-IRC.Win32.mIRC.621 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X