COMMAND

    pIRCH

SYSTEMS AFFECTED

    pIRCH32/98

PROBLEM

    Mike Arnold  found following.   pIRCH version  32 and  98 save the
    users  NickName  password  onto  disk  in  c:\pirch32\pirch.ini or
    c:\pirch98\pirch.ini depending  on what  version.   pIRCH Encrypts
    the  password  but  Mike  released  a  program  that can crack the
    password  if  you  supply  the  .ini  you  need to get the victims
    pirch.ini file somehow maybe Social Engineering or whatever,  then
    run pIRCHCrack against it. The user may also use the same password
    for their ISP, E-mail ETC.  pIRCHCrack is available at

        http://members.xoom.com/zaiman/pirchcrack.zip

SOLUTION

    Nothing yet.