egghelp/eggheads community

trojan scan script

2006-11-16T20:55:03-04:00

can someone modify it please so if user doesn't giving a reply within x mins, the bot will ban him. Thank you

Statistics: Posted by VanDaMe — Thu Nov 16, 2006 8:55 pm

Re: Turkish Spam bots

2006-08-14T19:50:19-04:00

So far this is working pretty well, but I was hoping there was a more efficient method of scanning for these damn things, possibly a version reply

I doubt a version reply would help actually; they use mIRC and unless there is something "quirky" in their real name field you're better sticking to what is actually working for you right now.

Statistics: Posted by Alchera — Mon Aug 14, 2006 7:50 pm

trojan scan script

2006-08-14T16:32:43-04:00

Until Demond does his script I wonder if this will help? It is a version checker, pretty simple but it does work ok.
http://longshanks.dyndns.org/eggdrop/vhunter.tcl

Regards callisto

Statistics: Posted by Callisto — Mon Aug 14, 2006 4:32 pm

trojan scan script

2006-08-14T15:44:04-04:00

[...] (i plan on adding such check to mine) [...]

Just wait for him to finish. Anyway, back to topic. This kind of stuff have been discussed before and some solutions/answers/etc. where given. You should try a search and see what others have debated on this and decide your next move.

Statistics: Posted by caesar — Mon Aug 14, 2006 3:44 pm

Turkish Spam bots

2006-08-14T13:58:38-04:00

Well, other than hoping our 'spy' eggie (the main tcl from no!spam) detects the spam messages on join, I have so far noticed 5 seperate idents, so I have loaded a tcl i found on egghelp called 'badident' and added the following idents to scan for ...
*TurkMirc*"
"*Kacak*"
"*Yuzuk*"
"*TurkChat*"
"*KELEBEK*"

So far this is working pretty well, but I was hoping there was a more efficient method of scanning for these damn things, possibly a version reply

Statistics: Posted by AWoL — Mon Aug 14, 2006 1:58 pm

trojan scan script

2006-08-14T10:56:18-04:00

how do you detect these? if by some signature in their nick/ident/irc name, you can use xchannel; if by ctcp version, you need another script (i plan on adding such check to mine)

Statistics: Posted by demond — Mon Aug 14, 2006 10:56 am

trojan scan script

2006-08-14T10:18:34-04:00

Our room is getting hit by a few turkish spam scripts including kelebek, khlayve, sohbet, and others. I understand that these are infected mirc scripts and replicate with installation. Is anyone else having problems with these bots, and are there any effective scanners or methods to deal with them. My eggies currently run netbots with sentinel, no!spam by ppslim, and clone protection. Any help would be appreciated

Statistics: Posted by AWoL — Mon Aug 14, 2006 10:18 am