mIRC Home    About    Download    Register    News    Help

Topic Options
#2737 - 20/12/02 03:34 PM Infected, and cant find the virus
flubpy Offline
Self-satisified door

Registered: 20/12/02
Posts: 3
You are infected with an onjoin spam virus - remove it using an up-to-date antivirus.
-
Closing Link: flubpy by Boopers.OR.US.GamesNET.net (K-lined)


running my 3rd anti-virus now...cant find it.

Top
#2738 - 20/12/02 03:47 PM Re: Infected, and cant find the virus
NeX Offline
Ameglian cow

Registered: 15/12/02
Posts: 27
Loc: Europa -> Belgium
Maybe it isn't a virus but a trojan ! And he is in the windows register
_________________________
__NeX»»» smirk

Top
#2739 - 20/12/02 03:48 PM Re: Infected, and cant find the virus
watcher Offline
Ameglian cow

Registered: 15/12/02
Posts: 18
Loc: Finland
You should get a better scanner.
_________________________
-watcher

Top
#2740 - 20/12/02 04:43 PM Re: Infected, and cant find the virus
Poppy Offline
Hoopy frood

Registered: 09/12/02
Posts: 843
Loc: UK
It is almost certainly a trojan. Go here and run a free online virus scan, which will probably work better than Norton or MacAfee (or whatever you're using). You should then uninstall mIRC and then do a clean re-install. Be wary of clicking on links that are spammed to you on IRC. Even if it's from someone you know, they could be infected and not realise it. Go here for more links to security and virii information, and here for more information on trojans. Hope this helps!


Edited by Poppy (20/12/02 04:47 PM)
_________________________
Never compare yourself to others - they're more screwed up than you think.

Top
#2741 - 20/12/02 05:07 PM Re: Infected, and cant find the virus
starbucks_mafia Offline
Hoopy frood

Registered: 09/12/02
Posts: 2962
Loc: Norwich, UK
Personally I think the others might be jumping the gun a bit here.

A simple reason for getting that message and also not being able to find the virus is that it's simply a mIRC script with an on JOIN event that's causing the trouble. If that's what it is then simply typing /!remote off is a temporary solution until you can find precisely what script file is causing the problem. If you know any scripters I'd recommend having them take a look at your remote files, or if you know scripting take a look yourelf. Otherwise I'd recommend deleting your script files. Don't forget to turn your remotes back on again once you're sure the script is fixed/removed (/!remote on).

Obviously it's possible that it IS really a virus/trojan. But the chances are any good virus scanner would have detected it.
_________________________
Spelling mistakes, grammatical errors, and stupid comments are intentional.

Top
#2742 - 21/12/02 12:10 AM Re: Infected, and cant find the virus
Karen Offline
Vogon poet

Registered: 07/12/02
Posts: 177
Loc: SE Pennsylvania, USA
You don't say which virus scanners you tried running, but I'll agree with Starbuck here.
You simply might be getting caught with an impropper user name for that server. There are several possibilities here. If you've tried reliable virus scanners, and you've turned your remotes off, try connecting to a different server. See if you still receive the message.

NEVER EVER EVER go into your Windows registry unless you truly KNOW what you're doing. It is just VERY bad advice to tell anyone to root around in the registry.

Top
#2743 - 25/12/02 07:23 AM Re: Infected, and cant find the virus
flubpy Offline
Self-satisified door

Registered: 20/12/02
Posts: 3
ok, went to moosoft, did their anti-virus thing...all it found was the kazaa spyware...it didn't find this virus or whatever...did a clean instal of mirc...still getting it.


any other suggestions?

Top
#2744 - 25/12/02 08:44 AM Re: Infected, and cant find the virus
flubpy Offline
Self-satisified door

Registered: 20/12/02
Posts: 3
one more thing...heres a message i get when i try to connect:


You are infected with an onjoin spam virus - remove it using an up-to-date antivirus.
-
Closing Link: fubpy by Abyss.TX.US.GamesNET.net (K-lined)


what does the K-lined mean?

Top
#2745 - 25/12/02 09:33 AM Re: Infected, and cant find the virus
Collective Offline
Planetary brain

Registered: 10/12/02
Posts: 3138
Loc: London, UK
A k-line is a line in the ircd configuration file that stops people with a certain [email]user@host[/email] combination connecting.

Top
#2746 - 25/12/02 04:56 PM Re: Infected, and cant find the virus
druid Offline
Ameglian cow

Registered: 08/12/02
Posts: 29
Loc: Pula, Croatia

ALT + R


Check your remote scripts. If you see omething like this

on 1:JOIN:#:/notice $nick Visit www.mysite.com

try put # before on 1:
Then try connect.
_________________________
--
http://www.globirc.net
irc.globirc.net

Top