egghelp/eggheads community

Please Help -- need to find Eggdrop in code for website...

2002-12-09T18:16:08-04:00

Nope - no windrop here .. just appended the .exe as .. um .. habit.

/me runs debian... honest!!!

Glad you got it sorted out anyway!!

Statistics: Posted by Photon — Mon Dec 09, 2002 6:16 pm

Please Help -- need to find Eggdrop in code for website...

2002-12-09T16:55:04-04:00

Thanks ppslim & Photon! Your help was MOST appreciated!

I spoke with the hosting provider and they're letting me reinstate the account after explaining the whole situation. They did find the eggdrop application in one of the sub-directories.

Needless to say, I've changed the passwords so that won't happen anymore.

Again, THANK YOU!!
Scott

Statistics: Posted by Guest — Mon Dec 09, 2002 4:55 pm

Please Help -- need to find Eggdrop in code for website...

2002-12-09T16:26:11-04:00

Photon! Are you running windrop? YUK

Eggdrop does not come with the .exe extention on *nix, like 99.9% of other software.

Somthing you may liek to search for, is *.so, *.tcl, *.conf, tcl-command.doc, MOTD, *.log

Look for files that don't seem to have been linked to on your site.

Statistics: Posted by ppslim — Mon Dec 09, 2002 4:26 pm

Please Help -- need to find Eggdrop in code for website...

2002-12-09T16:22:56-04:00

Eggdrop is compiled software, and was creating in the C programming language, not PHP.

Some things you will need to look out for include.

It may not be a eggdrop. There are other IRC robots available, and it's just as plausable to be one of them. Eggdrop just happens to be the most well known/used robot, and as such, the provider, or your search result may be wrong.

The provider may be wrong. The provider may not be doing there homework, and may possibly blaimg you for a faulse reason.

Are you at all running a chatroom within your web-page? Either this being IRC, or a board where people can chat live? Many providers may think this is a bot, when it is not. You should check the T&S's of the provider to see if this is allowed.

Somthing else you could ask the provider. Ask for an exact copy of the files, they beleive to be a bot. These may help find your cuplpret (it will be in one of his chat-rooms).

SOmthing else you may like to ask your web-host. Allthough it may cost you, it will get you back in there good books. Ask them to do a security audit, or to recomend some1 that can do a audit on your site.

Statistics: Posted by ppslim — Mon Dec 09, 2002 4:22 pm

Please Help -- need to find Eggdrop in code for website...

2002-12-09T16:17:13-04:00

It cant be in the PHP code, eggdrop is a C only bot ... whether or not it was interfaced into the code somehow ... well...

look for eggdrop.exe, perhaps a modules dir or a scripts dir. Also look for a file with a .conf or .tcl extension.

Statistics: Posted by Photon — Mon Dec 09, 2002 4:17 pm

Please Help -- need to find Eggdrop in code for website...

2002-12-09T15:15:22-04:00

Hi ppslim,

Thank you very much for your reply. I sent an email asking our hosting provider to reinstate service and told them basically what you told me.

In the meantime, is there anyway I can determine if eggdrop is in the php pages code and/or files? Is there a string of text or a certain document type that I can look for?

Thanks!
Scott

Statistics: Posted by Guest — Mon Dec 09, 2002 3:15 pm

Please Help -- need to find Eggdrop in code for website...

2002-12-09T15:00:06-04:00

There is a probable chance that an eggdrop was running in your web-space.

Whilst it is not the normal way of doing things, it is possible to run it.

First off, I sugest you check the details on THIS page. Make sure these are your details, or some1 that has authorty over the domain name.

Second, contact the web-host, explaining you where not aware of what eggdrop is, and the fact it was running on there systems.

Explain that the developer of your site (if need be, provide receipts (you have got receipts)), had sole access to the site, and you had not conducted a security audit after regaining control from the person.

The web-host may be within there rights to prevent you ever accessing there service again, without refund, or access to your files. The web-developer was your contractor, and as such, your responsibility.

You should also ask the web-host if they can provide access to access logs, so that you can contact the authorties regarding this breach of trust.

Statistics: Posted by ppslim — Mon Dec 09, 2002 3:00 pm

Please Help -- need to find Eggdrop in code for website...

2002-12-09T13:59:35-04:00

Hi,

A developer created our website for us (blueabaco.com) and now the hosting company pulled our website because they say we were running the eggdrop bot (even though I have no idea why our developer would be using it for a shopping cart website).

Can somebody please tell me what I could search for in all the PHP files that I have to see if we really were running EggDrop? Is there some lines of code I could search for? Or a certain file name?

I have HomeSite so I can do a search through all the files, but I have no idea what I'm looking for since I'm not familiar with it. And of course, our developer has vanished into thin air.

I want to get our website up as quickly as possible, so if I can come back to the hosting company and say they made a mistake (because I think they did), then we would be great appreciated.

Thanks for any help you can provide!
Scott

Statistics: Posted by Guest — Mon Dec 09, 2002 1:59 pm