| View previous topic :: View next topic |
| Author |
Message |
AWoL
Voice
Joined: 14 Aug 2006
Posts: 6
|
 Posted: Mon Aug 14, 2006 10:18 am Post subject: trojan scan script |
 |
|
| Our room is getting hit by a few turkish spam scripts including kelebek, khlayve, sohbet, and others. I understand that these are infected mirc scripts and replicate with installation. Is anyone else having problems with these bots, and are there any effective scanners or methods to deal with them. My eggies currently run netbots with sentinel, no!spam by ppslim, and clone protection. Any help would be appreciated |
|
| Back to top |
|
 |
demond
Revered One
Joined: 12 Jun 2004
Posts: 3073
Location: San Francisco, CA
|
| Posted: Mon Aug 14, 2006 10:56 am Post subject: |
|
|
how do you detect these? if by some signature in their nick/ident/irc name, you can use xchannel; if by ctcp version, you need another script (i plan on adding such check to mine)
_________________
connection, sharing, dcc problems? click <here>
before asking for scripting help, read <this>
use [code] tag when posting logs, code |
|
| Back to top |
|
|
AWoL
Voice
Joined: 14 Aug 2006
Posts: 6
|
| Posted: Mon Aug 14, 2006 1:58 pm Post subject: Turkish Spam bots |
|
|
Well, other than hoping our 'spy' eggie (the main tcl from no!spam) detects the spam messages on join, I have so far noticed 5 seperate idents, so I have loaded a tcl i found on egghelp called 'badident' and added the following idents to scan for ...
*TurkMirc*"
"*Kacak*"
"*Yuzuk*"
"*TurkChat*"
"*KELEBEK*"
So far this is working pretty well, but I was hoping there was a more efficient method of scanning for these damn things, possibly a version reply |
|
| Back to top |
|
|
caesar
Mint Rubber
Joined: 14 Oct 2001
Posts: 3741
Location: Mint Factory
|
| Posted: Mon Aug 14, 2006 3:44 pm Post subject: |
|
|
| demond wrote: | | [...] (i plan on adding such check to mine) [...] |
Just wait for him to finish.  Anyway, back to topic. This kind of stuff have been discussed before and some solutions/answers/etc. where given. You should try a search and see what others have debated on this and decide your next move.
_________________
Once the game is over, the king and the pawn go back in the same box. |
|
| Back to top |
|
|
Callisto
Halfop
Joined: 13 Mar 2005
Posts: 86
|
|
| Back to top |
|
|
Alchera
Revered One
Joined: 11 Aug 2003
Posts: 3344
Location: Ballarat Victoria, Australia
|
| Posted: Mon Aug 14, 2006 7:50 pm Post subject: Re: Turkish Spam bots |
|
|
| AWoL wrote: | | So far this is working pretty well, but I was hoping there was a more efficient method of scanning for these damn things, possibly a version reply |
I doubt a version reply would help actually; they use mIRC and unless there is something "quirky" in their real name field you're better sticking to what is actually working for you right now.
_________________
Add [SOLVED] to the thread title if your issue has been.
Search | FAQ | RTM |
|
| Back to top |
|
|
VanDaMe
Voice
Joined: 02 Nov 2006
Posts: 8
|
| Posted: Thu Nov 16, 2006 8:55 pm Post subject: |
|
|
| can someone modify it please so if user doesn't giving a reply within x mins, the bot will ban him. Thank you |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
