mIRC Home    About    Download    Register    News    Help

Print Thread
#143471 25/02/06 12:21 AM
Joined: Jan 2003
Posts: 45
R
rela Offline OP
Ameglian cow
OP Offline
Ameglian cow
R
Joined: Jan 2003
Posts: 45
Whenever someone says startkeylogger in IRC, my Norton antivirus disconnect the IRC connection. It only happens in mIRC, I also tried Chatzilla and there it didn't happen
here you can find the description.


@#botwars @Kreynet
#143472 25/02/06 01:18 AM
Joined: Sep 2005
Posts: 2,881
H
Hoopy frood
Offline
Hoopy frood
H
Joined: Sep 2005
Posts: 2,881
So norton closes the connection when somebody types "startkeylogger" but you think this is a mIRC bug? Oh god..

#143473 25/02/06 02:10 AM
Joined: Feb 2006
Posts: 32
Ameglian cow
Offline
Ameglian cow
Joined: Feb 2006
Posts: 32
Maybe it's norton's problem, maybe not..
I just tested this, with my plain new mIRC norton has now blocked it mad but with my new mIRC with NNScript installed, nothing happened
Has to be something going on

Just for extra details, I'm running the latest Norton Internet Security 2005 and my NNScript is version 4.01 (latest so far)

This really needs to be looked at

#143474 25/02/06 03:21 AM
Joined: Sep 2005
Posts: 2,881
H
Hoopy frood
Offline
Hoopy frood
H
Joined: Sep 2005
Posts: 2,881
It doesn't matter what scripts you have loaded, this is a norton problem!

#143475 25/02/06 03:56 AM
Joined: Sep 2003
Posts: 4,230
D
Hoopy frood
Offline
Hoopy frood
D
Joined: Sep 2003
Posts: 4,230
what version/year of nortons does this happen on, becuase i checked with corperate and the single user version, and i cant reproduce this.

I am however NOT saying it isnt nortons, just i cant seem to cause it. (i know it well be nortons)

Last edited by DaveC; 25/02/06 03:57 AM.
#143476 25/02/06 04:34 AM
Joined: Aug 2004
Posts: 7,252
R
Hoopy frood
Offline
Hoopy frood
R
Joined: Aug 2004
Posts: 7,252
I had it happen with Norton SystemWorks 2004, but not with Norton SystemWorks Premiere 2006. I don't have a copy of 2005 to test. Single user versions in my case.

#143477 25/02/06 06:58 AM
Joined: Jul 2004
Posts: 150
D
Vogon poet
Offline
Vogon poet
D
Joined: Jul 2004
Posts: 150
Confirmed here too.
Using Norton AntiVirus 2005.

#143478 25/02/06 02:31 PM
Joined: Apr 2004
Posts: 218
P
Fjord artisan
Offline
Fjord artisan
P
Joined: Apr 2004
Posts: 218
Everyone, this is NOT A MIRC PROBLEM!.
This is a Norton problem which is monitoring your connection and looking for certain catch phrases which have been reported in trojan/backdoors for mIRC. mIRC is working as it should be, therefore; this is not a mIRC issue. Your mIRC disconnects because of Norton and only Norton. mIRC plays no faulty in this. Also, if you could maybe try messing with the Norton settings to see if you can exempt mIRC.

-Zach


Live to Dream & Dream for Life
#143479 25/02/06 03:18 PM
Joined: Sep 2003
Posts: 4,230
D
Hoopy frood
Offline
Hoopy frood
D
Joined: Sep 2003
Posts: 4,230
Quote:
Everyone, this is NOT A MIRC PROBLEM!.


Yeah i think we established that a while ago. But thanks for saying it again. smile

#143480 26/02/06 10:29 AM
Joined: Nov 2004
Posts: 148
D
Vogon poet
Offline
Vogon poet
D
Joined: Nov 2004
Posts: 148
LOL that's so fanny.

I just read about it in irc-junkie.org:

Norton Internet Security DoS Vulnerability - Fri Feb 24, 2006 9:06 am
"I'm not quite sure what the problem is with this, but I'm told its a problem with norton personal firewall", this URL starts which have been going around IRC as a running fire.

Users who make use of the Norton Internet Security package will be disconnected from their IRC server when they receive any message, be it channel, private, notice when they contain the words startkeylogger or stopkeylogger.

These two commands are part of the list of commands for Spybot for which Norton released new code which introduced this bug.

Some users are going around populated channels now pasting the two commands. Some networks, like EFnet are acting against such users with kills, as we can see from the publicly available list of last executed kills and their reasons.




I always claimed that Norton Personal Firewall is a total crap. grin

#143481 27/02/06 11:11 PM
Joined: Feb 2006
Posts: 1
T
Mostly harmless
Offline
Mostly harmless
T
Joined: Feb 2006
Posts: 1
workaround for the moment is to deselect "Spybot keylogger commands" in systemworks Intrusion detection (advanced settings)

Tauchy

#143482 03/03/06 06:34 AM
Joined: Jan 2004
Posts: 9
T
Nutrimatic drinks dispenser
Offline
Nutrimatic drinks dispenser
T
Joined: Jan 2004
Posts: 9
ok i have no norton products on this computer at all
when someone types
[01:24:45] <impulse9\substance> DCC SEND "startkeylogger" 0 0 0

that into a channel im in, i'm disconnected

[01:24:45] * Quits: @krac (~krak@UnkindSouls.on.EnterTheGame.Com) (Read error: Connection reset by peer)

[01:24:45] * Quits: @krak (~krak@UnkindSouls.on.EnterTheGame.Com) (Write Error: Connection reset by peer)

confused

Last edited by tedddee; 03/03/06 06:35 AM.
#143483 03/03/06 06:43 AM
Joined: Apr 2005
Posts: 12
M
Pikka bird
Offline
Pikka bird
M
Joined: Apr 2005
Posts: 12
Quote:
ok i have no norton products on this computer at all
when someone types
[01:24:45] <impulse9\substance> DCC SEND "startkeylogger" 0 0 0

that into a channel im in, i'm disconnected

[01:24:45] * Quits: @krac (~krak@UnkindSouls.on.EnterTheGame.Com) (Read error: Connection reset by peer)

[01:24:45] * Quits: @krak (~krak@UnkindSouls.on.EnterTheGame.Com) (Write Error: Connection reset by peer)

confused


This DCC SEND line is something I've been seeing today, can't find any information on it yet, actively searching.

As for the startkeylogger items, you can find instructions to prevent this here:
http://www.gamesurge.net/forums/FTqbf1TMBX/

Hope this helps.

#143484 03/03/06 07:03 AM
Joined: Jan 2004
Posts: 9
T
Nutrimatic drinks dispenser
Offline
Nutrimatic drinks dispenser
T
Joined: Jan 2004
Posts: 9
ok this is some sort of mirc bug

[01:55] <@krak> DCC SEND "12345678910"
[01:55] <@krak> DCC SEND "1234567891011"

the 2nd line will disconnect me even when i type it myself

#143485 03/03/06 12:37 PM
Joined: Sep 2003
Posts: 7
J
jdp Offline
Nutrimatic drinks dispenser
Offline
Nutrimatic drinks dispenser
J
Joined: Sep 2003
Posts: 7
tedddee: I've been trying to figure out what this is as well... I'm not affected by it (mIRC 6.16) but I've seen others disconnect because of it. Interestingly, I've seen Windows and Mac users disconnect because of it so what I'm wondering is.. what kind of router and modem do you have? I'm wondering if one of them could possibly be the culprit? If its not the OS or the client then what else could it be?

#143486 04/03/06 01:15 AM
Joined: Jan 2004
Posts: 9
T
Nutrimatic drinks dispenser
Offline
Nutrimatic drinks dispenser
T
Joined: Jan 2004
Posts: 9
I'm behind a Netgear WGR614 v5 that is connected to a SB4200 cable modem by Motorola.

Oh and my ISP is Cox.

#143487 04/03/06 02:41 AM
Joined: Sep 2003
Posts: 4,230
D
Hoopy frood
Offline
Hoopy frood
D
Joined: Sep 2003
Posts: 4,230
you should stop talking about this in multiple places, i just gave a possable explanation in bug reports.

rela #181517 25/07/07 05:07 AM
Joined: Jul 2007
Posts: 2
M
Bowl of petunias
Offline
Bowl of petunias
M
Joined: Jul 2007
Posts: 2
Sorry to revive this but this startkeylogger 0 0 0 thing, it only affects irc? it doesnt go and take private information? i got this today from a chan but nothing really happened, but i am still curious and a nervous as to what it and what it does
if anyone could tell me please id appreciate it, thank you

Joined: Jun 2007
Posts: 157
W
Vogon poet
Offline
Vogon poet
W
Joined: Jun 2007
Posts: 157
it just disconnects you
fun to watch in 800+ big chan people get ditched laugh


The harder I chase my dreams the more I experience the time for smiles and tears...
Joined: Jul 2007
Posts: 2
M
Bowl of petunias
Offline
Bowl of petunias
M
Joined: Jul 2007
Posts: 2
ah i see, alright thanks, cause i saw this in my status screen and i was like wtf cause ive never seen it before. so yea tad bit nervous, thanks for the info


Link Copied to Clipboard