Copied From
http://www.zincplay.com/forum/vi ... ;highlight=cuteworm NOT MINE
Hello d3r,
it appears that your brother might be infected by the trojanh.cuteworm.
Symptoms:
1. you would do an action or say: [ - playbears n merlin83 pwned cuteworm! money rules!!! - ]
2. you would slap CuteWorm
3. your default homepage is
http://www.cuteworm.com on your browser. (you may or may not have this)
4. you cannot visit
http://www.zincplay.com (you may or may not have this)
What you need to do is:
1. Fix your HOSTS file as it has been modified so you cannot visit
http://www.zincplay.com
More technical information:
The 'hosts' file is located in different folders for the different version of Windows:
Windows Vista = C:\WINDOWS\SYSTEM32\DRIVERS\ETC
Windows XP = C:\WINDOWS\SYSTEM32\DRIVERS\ETC
Windows 2K = C:\WINNT\SYSTEM32\DRIVERS\ETC
Win 98/ME = C:\WINDOWS
Look for entries like these and remove them:
?????????? zincplay.com
??????????
www.zincplay.com
2. Delete the whole mIRC folder that your brother has. The trojan may work by looking for all available mIRC's and infecting them. Therefore you need to delete all folders that contains mIRC.exe
3. After deleting all mIRCs, reinstall Zion.
4. Simply set your browser homepage to your favourite website.