mIRC Home    About    Download    Register    News    Help

Print Thread
#80527 25/04/04 03:41 AM
Joined: Apr 2004
Posts: 2
S
Bowl of petunias
OP Offline
Bowl of petunias
S
Joined: Apr 2004
Posts: 2
i have reacently been kicked out of several servers for using a flood bot.....i dont even know what it is or how i got it..alot less how to get rid of it..all i know is that while im in a server ppl start to msg me saying that i msged them first....so im really confused on what to do so if someone could help me i would really greatful

#80528 25/04/04 08:07 AM
Joined: Jun 2003
Posts: 5,024
M
Hoopy frood
Offline
Hoopy frood
M
Joined: Jun 2003
Posts: 5,024
The most likely explanation is that you have some sort of IRC virus. This means that when someone joins a channel, you message them with some sort of link for free pornography, or a promise a picture of yourself etc, when actually the link contains an exploit that will infect other people's computers.

The "floodbot" is also called a GTBot - or Global Thread Bot - and they are used to attack users, flood channels and attack servers. Quite a big problem on the Internet would be removed if nobody in the world was infected with a virus smile - Unfortunately, people are out to trick and deceive you everywhere you go, it's a bit like playing some sort of video game nowadays. You just got caught out I'm afraid!

However, fear not! There are a huge amount of good guys to help you out and they've invented a large number of virus scanners etc that scan your computer and delete or quarantine (isolate) the virus threat. This thread will help you stay safe in the future, and also suggests some ideas for cleaning viruses you have right now. I strongly suggest you read the entire thread and don't just skip down to the links.

There is a channel on DALnet called #NoHack and those guys came up with a script to remove quite a few IRC virus threats. I would download their script here and try it out (That is a direct download link). I suggest this separately because some IRC viruses are more annoyances than dangerous to your harddrive or anything, and so some antiviruses such as Norton may not be set to detect them. Again, make sure you read the instructions to the letter.

I suggest you run 2-3 virus scanners, as no ONE can detect everything. Almost all AntiViruses will have an 'update' feature so you can stay safe from the latest viruses. Before you scan you should use the update feature to get any updates for the software before scanning. You should also definitely close mIRC and any other running applications, even ones in the taskbar, MSN etc.

G'luck & stay safe! smile

Regards,


Mentality/Chris
#80529 25/04/04 12:42 PM
Joined: Nov 2003
Posts: 2,327
T
Hoopy frood
Offline
Hoopy frood
T
Joined: Nov 2003
Posts: 2,327
i noticed that nobody ever tells people to try /!remote off.
4 out of 5 spammers i see have been infected with a script rather than an executable.


New username: hixxy
#80530 25/04/04 12:54 PM
Joined: Jun 2003
Posts: 5,024
M
Hoopy frood
Offline
Hoopy frood
M
Joined: Jun 2003
Posts: 5,024
Whilst I was writing that answer I did consider suggesting /!remote off - however, that is only a temporary fix and also disables other possibly useful scripts that they may have.

A lot of the time IRC viruses are activated through scripts and /remote off will help. But as soon as remotes are enabled again, so will the 'virus'. A more permanent removal of the script is needed, and as I can't possibly say exactly what they are infected with, if infected at all, I think a professional and proper scan with well known antiviruses is the best course of action to take smile

It can't do any harm to run a full virus scan anyway - to have probably contracted this virus it is likely they are not aware of the dangers of IRC or the Internet (i.e. clicking URLs, typing things to get ops etc etc) - so it's possible they may also have a trojan of some description that has not made any visible marks on their system yet. A simple /remote off would obviously not effect this. Often a virus scan can turn up more than expected.

But yeah, if you're scanning with mIRC open (which I do not recommend) then /remote off is a good idea to try and prevent spamming for now.

Regards,


Mentality/Chris
#80531 25/04/04 09:46 PM
Joined: Apr 2004
Posts: 2
S
Bowl of petunias
OP Offline
Bowl of petunias
S
Joined: Apr 2004
Posts: 2
Mentality i got to thank u dude cause i got rid of my flood bot (i think) and its awsome....without u i wouldent be able to join servers without getting banned..so i just gota thank u again for all the help u gave me!!!!

big thanks ShadowRenegade

#80532 26/04/04 07:04 AM
Joined: Jun 2003
Posts: 5,024
M
Hoopy frood
Offline
Hoopy frood
M
Joined: Jun 2003
Posts: 5,024
You're welcome, glad you got it sorted smile

Remember to be wary of the dangers mentioned in the AntiVirus sticky post to ensure that you don't get infected again!

Happy chattin'!

Regards,


Mentality/Chris

Link Copied to Clipboard