I cannot, however, duplicate this. I got him to send me a copy of the same old mirc32.exe and the scanner isn't touching it.

I uninstalled the beta antivir and installed the final and it's fully up to date, while he had relied on the program updates to bring him up to final. The build number he's showing is correct so I don't think that has anything to do with it.

All he knows for sure is that his mIRC was there last night (he was using it on that machine). He cannot get it to happen again either now, the scanner isn't deleting it.