Forums mIRC Help startkeylogger

Whenever someone says startkeylogger in IRC, my Norton antivirus disconnect the IRC connection. It only happens in mIRC, I also tried Chatzilla and there it didn't happen
here you can find the description.

So norton closes the connection when somebody types "startkeylogger" but you think this is a mIRC bug? Oh god..

Maybe it's norton's problem, maybe not..
I just tested this, with my plain new mIRC norton has now blocked it but with my new mIRC with NNScript installed, nothing happened
Has to be something going on

Just for extra details, I'm running the latest Norton Internet Security 2005 and my NNScript is version 4.01 (latest so far)

This really needs to be looked at

It doesn't matter what scripts you have loaded, this is a norton problem!

what version/year of nortons does this happen on, becuase i checked with corperate and the single user version, and i cant reproduce this.

I am however NOT saying it isnt nortons, just i cant seem to cause it. (i know it well be nortons)

I had it happen with Norton SystemWorks 2004, but not with Norton SystemWorks Premiere 2006. I don't have a copy of 2005 to test. Single user versions in my case.

Confirmed here too.
Using Norton AntiVirus 2005.

Everyone, this is NOT A MIRC PROBLEM!.
This is a Norton problem which is monitoring your connection and looking for certain catch phrases which have been reported in trojan/backdoors for mIRC. mIRC is working as it should be, therefore; this is not a mIRC issue. Your mIRC disconnects because of Norton and only Norton. mIRC plays no faulty in this. Also, if you could maybe try messing with the Norton settings to see if you can exempt mIRC.

-Zach

Yeah i think we established that a while ago. But thanks for saying it again.

LOL that's so fanny.

I just read about it in irc-junkie.org:

Norton Internet Security DoS Vulnerability - Fri Feb 24, 2006 9:06 am
"I'm not quite sure what the problem is with this, but I'm told its a problem with norton personal firewall", this URL starts which have been going around IRC as a running fire.

Users who make use of the Norton Internet Security package will be disconnected from their IRC server when they receive any message, be it channel, private, notice when they contain the words startkeylogger or stopkeylogger.

These two commands are part of the list of commands for Spybot for which Norton released new code which introduced this bug.

Some users are going around populated channels now pasting the two commands. Some networks, like EFnet are acting against such users with kills, as we can see from the publicly available list of last executed kills and their reasons.




I always claimed that Norton Personal Firewall is a total crap.

workaround for the moment is to deselect "Spybot keylogger commands" in systemworks Intrusion detection (advanced settings)

Tauchy

ok i have no norton products on this computer at all
when someone types
[01:24:45] <impulse9\substance> DCC SEND "startkeylogger" 0 0 0

that into a channel im in, i'm disconnected

[01:24:45] * Quits: @krac (~krak@UnkindSouls.on.EnterTheGame.Com) (Read error: Connection reset by peer)

[01:24:45] * Quits: @krak (~krak@UnkindSouls.on.EnterTheGame.Com) (Write Error: Connection reset by peer)

This DCC SEND line is something I've been seeing today, can't find any information on it yet, actively searching.

As for the startkeylogger items, you can find instructions to prevent this here:
http://www.gamesurge.net/forums/FTqbf1TMBX/

Hope this helps.

ok this is some sort of mirc bug

[01:55] <@krak> DCC SEND "12345678910"
[01:55] <@krak> DCC SEND "1234567891011"

the 2nd line will disconnect me even when i type it myself

tedddee: I've been trying to figure out what this is as well... I'm not affected by it (mIRC 6.16) but I've seen others disconnect because of it. Interestingly, I've seen Windows and Mac users disconnect because of it so what I'm wondering is.. what kind of router and modem do you have? I'm wondering if one of them could possibly be the culprit? If its not the OS or the client then what else could it be?

I'm behind a Netgear WGR614 v5 that is connected to a SB4200 cable modem by Motorola.

Oh and my ISP is Cox.

you should stop talking about this in multiple places, i just gave a possable explanation in bug reports.

Sorry to revive this but this startkeylogger 0 0 0 thing, it only affects irc? it doesnt go and take private information? i got this today from a chan but nothing really happened, but i am still curious and a nervous as to what it and what it does
if anyone could tell me please id appreciate it, thank you

it just disconnects you
fun to watch in 800+ big chan people get ditched

ah i see, alright thanks, cause i saw this in my status screen and i was like wtf cause ive never seen it before. so yea tad bit nervous, thanks for the info