This is the new home of the egghelp.org community forum.
All data has been migrated (including user logins/passwords) to a new phpBB version.
For more information, see this announcement post. Click the X in the top right-corner of this box to dismiss this message.
All data has been migrated (including user logins/passwords) to a new phpBB version.
For more information, see this announcement post. Click the X in the top right-corner of this box to dismiss this message.
trojan scan script
trojan scan script
Our room is getting hit by a few turkish spam scripts including kelebek, khlayve, sohbet, and others. I understand that these are infected mirc scripts and replicate with installation. Is anyone else having problems with these bots, and are there any effective scanners or methods to deal with them. My eggies currently run netbots with sentinel, no!spam by ppslim, and clone protection. Any help would be appreciated
-
demond
- Revered One
- Posts: 3073
- Joined: Sat Jun 12, 2004 9:58 am
- Location: San Francisco, CA
- Contact:
how do you detect these? if by some signature in their nick/ident/irc name, you can use xchannel; if by ctcp version, you need another script (i plan on adding such check to mine)
connection, sharing, dcc problems? click <here>
before asking for scripting help, read <this>
use
before asking for scripting help, read <this>
use
Code: Select all
tag when posting logs, codeTurkish Spam bots
Well, other than hoping our 'spy' eggie (the main tcl from no!spam) detects the spam messages on join, I have so far noticed 5 seperate idents, so I have loaded a tcl i found on egghelp called 'badident' and added the following idents to scan for ...
*TurkMirc*"
"*Kacak*"
"*Yuzuk*"
"*TurkChat*"
"*KELEBEK*"
So far this is working pretty well, but I was hoping there was a more efficient method of scanning for these damn things, possibly a version reply
*TurkMirc*"
"*Kacak*"
"*Yuzuk*"
"*TurkChat*"
"*KELEBEK*"
So far this is working pretty well, but I was hoping there was a more efficient method of scanning for these damn things, possibly a version reply
Just wait for him to finish.demond wrote:[...] (i plan on adding such check to mine) [...]
Anyway, back to topic. This kind of stuff have been discussed before and some solutions/answers/etc. where given. You should try a search and see what others have debated on this and decide your next move.Once the game is over, the king and the pawn go back in the same box.
Until Demond does his script I wonder if this will help? It is a version checker, pretty simple but it does work ok.
http://longshanks.dyndns.org/eggdrop/vhunter.tcl
Regards callisto
http://longshanks.dyndns.org/eggdrop/vhunter.tcl
Regards callisto
-
Alchera
- Revered One
- Posts: 3344
- Joined: Mon Aug 11, 2003 12:42 pm
- Location: Ballarat Victoria, Australia
- Contact:
Re: Turkish Spam bots
I doubt a version reply would help actually; they use mIRC and unless there is something "quirky" in their real name field you're better sticking to what is actually working for you right now.AWoL wrote:So far this is working pretty well, but I was hoping there was a more efficient method of scanning for these damn things, possibly a version reply