I got this great antispam script from mirc.net and it blocks lots of spam messages and also updates itself whenever there is a new update....

The problem is that now there is a new kind of spams
I got lots of:
Hardrcore Full Videos www.spam-removed.com


The file on this website is actualy a Trojan!!!!


The spam trojan sometimes PMs the user (and then the anti spam script I use blocks it), but I saw that this spam trojan also sends a notice (which is not bad cause it doesn't open a new window).... But the biggest problem is that it opens a window with a private message, but it is not a provate message window.

I see something like this:
* ugpsea Hardrcore Full Videos www.spam-removed.com

Where ugpsea is the nickname of the spammer and both * and ugpsea has a purple color (so I thought that it might have to do with /action command)...

The On text even doesn't catch it, and it doesn't seem to be a chat window.... (and On chat event doesn't catch anything). So what kind of messaging system the spammer uses??

(I would like to send a mail to the person who created that anti spam script so it will also block this awefull thing).


Thanks.

mmmm, I think that the spammer opens a query window or PM window and then uses /action SPAM So if thats the case then this thread is no lnger needed, but it also means that the spammers found a new way to spam people cause all the spam blockers that I know of block private messages and not actions.

Time for all spam blockers scripters to code a new protection...

Screw all spammers!!!!

That's not using Windows Messaging is it? (not the same as the instant messaging like MSN messenger, Yahoo messenger, AIM, or ICQ)

No.... it is using mIRC...
It is probably opening a query window and then uses /Action SPAM
It also uses notices for spamming

How exactly can you send an action to a specific window???

If I do:

alias test {
query $me
action hello
}

then the action is being send to the status window, or to the last active window and not the new query window.

Syntax: /test <nick> <text>

alias test {
describe $$1 $$2-
}

consider using the ignore command
/ignore [-lrpcntikdwxu#] <on|off|nick/address> [type] [network]

Where p = private, c = channel, n = notice, t = ctcp, i = invite, k = control codes, d = dccs.

on *:join:#:{ ignore -pntikdu30 $nick }
on *:part:#:{ ignore -pntikdu30 $nick }

seems like the spambots dont stay long, so ignoring them for 30 seconds works most of the time, that can be set longer of course.
this allows for channel posts to get through and nothing else.

Thanks for the "describe" thingy... never used it before....