If anyone uses rar files, especially for Mir etc., please look out for a file inside the archives.
It's name changes to any name that it can to make itself look plausible.
The easy way to find it is look in the archive and find a file with a size of 119,438, Type Application and a CRC32 number...