Viruses - mIRC Discussion Forums

I checked the topic in <removed by poster>, out of curiousity. Below is what I read. That never crossed my mind that viruses can spread that way. So I have two suggestions.

1) In options, a checkbox to "Strip codes when message contains an URL"
2) In options, a checkbox that would display this warning when appropiate: The URL you have clicked on contains codes inside of it. The full path of the URL is <stripped URL>, do you wish to continue?

<removed by poster> 1if you got a msg from a user that look like this: http://www.domain.com/hotpic.jpg0,0.exe 1 make sure you first hightlight it befor you click on it, so many users got infected with viru's that way. || http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.removal.tool.html (W32.Sobig)
<removed by poster> topic set by abort on Mon Sep 01 08:05:57

I've tried to get the site you're talking about shut down. But Geocities don't seem to wanna take any action against it what-so-ever so, frankly, I'm at a loss

In the meantime it's scriptable. I made a script that came with a URL filtration device which blocked many 'keywords' including the extension ".exe" and I am yet to hear any feedback that someone using this script has become infected. The script simply won't let the user double click. Of course one could cut and paste the URL from mIRC to a browser but if they did that then they'd deserve to be infected since the script reacts this way...

[050903-23:18:45] <AdBot> http://www.blah.bler/sexaddon.exe
[050903-23:18:47] Warning: This website could contain a virus. The script is blocking the site to protect your computer.

It wold be easy to make your own with the ON HOTLINK event. BTW: The sample domain is false of course. :tongue:

If a site tells you to go anywhere make sure you trust the person who said it because it make be a link to a virus or another thing (i don't know too much about it) that hijacks your phone or something and spends a lot of your cash!!!
Though i think they need to be accepted, but im not too sure!

Would you mind giving the code to let people benefit from that little "anti-virus" help.

What if a friend is infected with it?

Simply downloading a file doesn't infect anyone (unless you've got a major software flaw), the person still has to run the file without checking the filetype before it becomes an issue.

I mean if a friend is infected and your friend messages you with the URL. You think it's trustworthy since your friend messaged you.

Do as i did, i strip out the color if its the same as my back ground color, then no one can "hide" a .exe behind a www url or any other message..

Absolutely.

Code:

ON ^*:HOTLINK:http*//*.*:*:return
ON *:HOTLINK:http*//*.*:*: {
  if (sex isin $1 || porn isin $1) {
    echo -ta 4&gt;Warning: This website could contain a virus. The script is blocking the site to protect your computer.
    halt
  }
  else {
    run $1
  }
}
ON ^*:HOTLINK:*www*.*:*:return
ON *:HOTLINK:*www*.*:*: {
  if (sex isin $1 || porn isin $1) {
    echo -ta 4&gt;Warning: This website could contain a virus. The script is blocking the site to protect your computer.
    halt
  }
  else {
    run $1
  }
}

Constructive criticism welcome of course.

Just add more keywords or add another script to make this refer to a text file which can be updated like anti-virus signatures.

Thank you very much for sharing with everyone.

mirc doesnt have a way to hide urls... does it?

mIRC has a warning system for URLs now I believe, but I'd like to see more. Imagine if viruses weren't spread over IRC anymore.

that woudlnt happen and i turned the annoying url warning off

Is this a bug or something?

ctrl+k or $chr(3) will not work in an if then else statement, therefore I can't pop up a warning dialog

I don't know if I understand what you said, but

Code:

alias bug? {
  if ($chr(3) blah == blah) { no bug }
  elseif (blah == $chr(3) blah) { no bug }
  else { echo -a no bug }
}

works fine here.