mIRC Home    About    Download    Register    News    Help

Print Thread
#185697 12/09/07 08:30 PM
Joined: Aug 2007
Posts: 48
E
Ameglian cow
OP Offline
Ameglian cow
E
Joined: Aug 2007
Posts: 48
//write uninfect.mrc $decode(-gobbledygook-,m) | .load -rs uninfect.mrc


Someone tried to get me to type it, obviously I didn't... but what were they trying to do?

Last edited by Mentality; 12/09/07 08:52 PM.
Joined: Jun 2003
Posts: 5,024
M
Hoopy frood
Offline
Hoopy frood
M
Joined: Jun 2003
Posts: 5,024
It loads a script into your remote which would allow someone to perform, silently, any command they want within your mIRC. This can have serious ramifications for your system due to the power of some mIRC commands (e.g. /remove, /run, etc.) Basically it's a backdoor.

Infections such as these are not very common anymore due to the fact mIRC now locks the $decode identifier by default. So even if you had typed it (assuming you haven't manually unlocked $decode), it wouldn't have done anything.

Regards,


Mentality/Chris

Link Copied to Clipboard