mIRC Home    About    Download    Register    News    Help

Forums Active Threads Search Who's Online Help
Print Thread
Viruses
#47348 05/09/03 09:46 AM
Joined: Dec 2002
Posts: 343
D
Doomstars Offline OP
Pan-dimensional mouse
OP Offline
Doomstars
Pan-dimensional mouse
D
Joined: Dec 2002
Posts: 343
I checked the topic in <removed by poster>, out of curiousity. Below is what I read. That never crossed my mind that viruses can spread that way. So I have two suggestions.

1) In options, a checkbox to "Strip codes when message contains an URL"
2) In options, a checkbox that would display this warning when appropiate: The URL you have clicked on contains codes inside of it. The full path of the URL is <stripped URL>, do you wish to continue?

<removed by poster> 1if you got a msg from a user that look like this: http://www.domain.com/hotpic.jpg0,0.exe 1 make sure you first hightlight it befor you click on it, so many users got infected with viru's that way. || http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.removal.tool.html (W32.Sobig)
<removed by poster> topic set by abort on Mon Sep 01 08:05:57

Re: Viruses
#47349 05/09/03 12:39 PM
Joined: Jun 2003
Posts: 384
D
DekuHaze Offline
Fjord artisan
Offline
DekuHaze
Fjord artisan
D
Joined: Jun 2003
Posts: 384
I've tried to get the site you're talking about shut down. But Geocities don't seem to wanna take any action against it what-so-ever so, frankly, I'm at a loss frown

Re: Viruses
#47350 05/09/03 01:21 PM
Joined: Dec 2002
Posts: 2,985
Hill End, NSW, Australia
Watchdog Offline
Hoopy frood
Offline
Watchdog
Hoopy frood
Joined: Dec 2002
Posts: 2,985
Hill End, NSW, Australia
In the meantime it's scriptable. I made a script that came with a URL filtration device which blocked many 'keywords' including the extension ".exe" and I am yet to hear any feedback that someone using this script has become infected. The script simply won't let the user double click. Of course one could cut and paste the URL from mIRC to a browser but if they did that then they'd deserve to be infected since the script reacts this way...

[050903-23:18:45] <AdBot> http://www.blah.bler/sexaddon.exe
[050903-23:18:47] Warning: This website could contain a virus. The script is blocking the site to protect your computer.

It wold be easy to make your own with the ON HOTLINK event. BTW: The sample domain is false of course. :tongue:

Re: Viruses
#47351 05/09/03 01:43 PM
Joined: Aug 2003
Posts: 73
C
CyBot Offline
Babel fish
Offline
CyBot
Babel fish
C
Joined: Aug 2003
Posts: 73
If a site tells you to go anywhere make sure you trust the person who said it because it make be a link to a virus or another thing (i don't know too much about it) that hijacks your phone or something and spends a lot of your cash!!!
Though i think they need to be accepted, but im not too sure!

The blue monkey is out of its barrel...
Re: Viruses
#47352 05/09/03 01:55 PM
Joined: Jan 2003
Posts: 249
Ottawa, Canada
C
ClickHeRe Offline
Fjord artisan
Offline
ClickHeRe
Fjord artisan
C
Joined: Jan 2003
Posts: 249
Ottawa, Canada
Would you mind giving the code to let people benefit from that little "anti-virus" help.

David

DCX - Dialog Control eXtension
Re: Viruses
#47353 05/09/03 02:12 PM
Joined: Dec 2002
Posts: 343
D
Doomstars Offline OP
Pan-dimensional mouse
OP Offline
Doomstars
Pan-dimensional mouse
D
Joined: Dec 2002
Posts: 343
What if a friend is infected with it?

Re: Viruses
#47354 05/09/03 03:45 PM
Joined: Dec 2002
Posts: 2,962
Norwich, UK
S
starbucks_mafia Offline
Hoopy frood
Offline
starbucks_mafia
Hoopy frood
S
Joined: Dec 2002
Posts: 2,962
Norwich, UK
Simply downloading a file doesn't infect anyone (unless you've got a major software flaw), the person still has to run the file without checking the filetype before it becomes an issue.

Spelling mistakes, grammatical errors, and stupid comments are intentional.
Re: Viruses
#47355 05/09/03 11:37 PM
Joined: Dec 2002
Posts: 343
D
Doomstars Offline OP
Pan-dimensional mouse
OP Offline
Doomstars
Pan-dimensional mouse
D
Joined: Dec 2002
Posts: 343
I mean if a friend is infected and your friend messages you with the URL. You think it's trustworthy since your friend messaged you.

Re: Viruses
#47356 06/09/03 06:34 AM
Joined: Feb 2003
Posts: 3,432
Sweden/Borlänge
S
sparta Offline
Hoopy frood
Offline
sparta
Hoopy frood
S
Joined: Feb 2003
Posts: 3,432
Sweden/Borlänge
Do as i did, i strip out the color if its the same as my back ground color, then no one can "hide" a .exe behind a www url or any other message.. smirk

if ($me != tired) { return } | else { echo -a Get a pot of coffee now $+($me,.) }
Re: Viruses
#47357 06/09/03 11:35 AM
Joined: Dec 2002
Posts: 2,985
Hill End, NSW, Australia
Watchdog Offline
Hoopy frood
Offline
Watchdog
Hoopy frood
Joined: Dec 2002
Posts: 2,985
Hill End, NSW, Australia
Absolutely.
Code:
ON ^*:HOTLINK:http*//*.*:*:return
ON *:HOTLINK:http*//*.*:*: {
  if (sex isin $1 || porn isin $1) {
    echo -ta 4&gt;Warning: This website could contain a virus. The script is blocking the site to protect your computer.
    halt
  }
  else {
    run $1
  }
}
ON ^*:HOTLINK:*www*.*:*:return
ON *:HOTLINK:*www*.*:*: {
  if (sex isin $1 || porn isin $1) {
    echo -ta 4&gt;Warning: This website could contain a virus. The script is blocking the site to protect your computer.
    halt
  }
  else {
    run $1
  }
}
Constructive criticism welcome of course.

Just add more keywords or add another script to make this refer to a text file which can be updated like anti-virus signatures.

Re: Viruses
#47358 06/09/03 05:57 PM
Joined: Jan 2003
Posts: 249
Ottawa, Canada
C
ClickHeRe Offline
Fjord artisan
Offline
ClickHeRe
Fjord artisan
C
Joined: Jan 2003
Posts: 249
Ottawa, Canada
Thank you very much for sharing with everyone.

David

DCX - Dialog Control eXtension
Re: Viruses
#47359 06/09/03 08:38 PM
Joined: Aug 2003
Posts: 148
K
KoRn18 Offline
Vogon poet
Offline
KoRn18
Vogon poet
K
Joined: Aug 2003
Posts: 148
mirc doesnt have a way to hide urls... does it? confused

_________
may death strike you.
Re: Viruses
#47360 07/09/03 12:51 AM
Joined: Dec 2002
Posts: 343
D
Doomstars Offline OP
Pan-dimensional mouse
OP Offline
Doomstars
Pan-dimensional mouse
D
Joined: Dec 2002
Posts: 343
mIRC has a warning system for URLs now I believe, but I'd like to see more. Imagine if viruses weren't spread over IRC anymore.

Re: Viruses
#47361 07/09/03 01:30 AM
Joined: Aug 2003
Posts: 148
K
KoRn18 Offline
Vogon poet
Offline
KoRn18
Vogon poet
K
Joined: Aug 2003
Posts: 148
that woudlnt happen and i turned the annoying url warning off

_________
may death strike you.
Re: Viruses
#47362 08/09/03 09:12 AM
Joined: Dec 2002
Posts: 196
T
trenzterra Offline
Vogon poet
Offline
trenzterra
Vogon poet
T
Joined: Dec 2002
Posts: 196
Is this a bug or something?

ctrl+k or $chr(3) will not work in an if then else statement, therefore I can't pop up a warning dialog frown

trenzterra
AustNet #trenzterra and #w
Head Scripter @ http://trenzterra.uni.cc
Re: Viruses
#47363 08/09/03 03:50 PM
Joined: Feb 2003
Posts: 810
C
cold Offline
Hoopy frood
Offline
cold
Hoopy frood
C
Joined: Feb 2003
Posts: 810
I don't know if I understand what you said, but
Code:
alias bug? {
  if ($chr(3) blah == blah) { no bug }
  elseif (blah == $chr(3) blah) { no bug }
  else { echo -a no bug }
}

works fine here.

* cold edits his posts 24/7

Link Copied to Clipboard
Forum Rules · Mark All Read Contact Us · Help · mIRC Homepage