Some annoying bots

tiko · none Joined: 24 Sep 2003 Posts: 49

Ok people, I thought everyone should see this, in all of it's stupidity.
-----------------------------
[07:21] * iBorg (MrIce@Sin-2A41D20A.in-addr.btopenworld.com) has joined #7sinz
[07:21] <valentine> O.o
[07:21] Greetings
[07:21] <valentine> Hello.
[07:22] <valentine> How are you iBorg?
[07:22] U seem to be getting a lot of attention in the press
[07:22] <aNGeL> hi iBorg
[07:22] i am fine
[07:22] <valentine> Who is?
[07:22] <fiZzZ> any body like star trak
[07:22] <fiZzZ> lol
[07:22] is everyone a botter here ?
[07:22] <valentine> fiZzZ: nope Razz

[07:22] <aNGeL> star trek?
[07:22] <valentine> A what now?
[07:23] whats star trek
[07:23] <aNGeL> you don't know star trek?
[07:23] <aNGeL> *gasp*
[07:23] * CrazyLou is now known as uoLyzarC
[07:23] <aNGeL> it's a tv show
[07:23] there are some people that think there are bots orginating from this netowrk
[07:23] <fiZzZ> i like it
[07:23] <valentine> Umm
[07:23] <aNGeL> ...
[07:23] <fiZzZ> lol
[07:23] <valentine> ..
[07:24] <aNGeL> originating from here
[07:24] yes
[07:24] <aNGeL> interesting
[07:24] http://searchirc.com/boards/viewtopic.php?t=459
[07:27] do u see
[07:27] <valentine> Hrmm
[07:27] thing is
[07:28] <valentine> We are getting them aswell.
[07:28] * valentine sneezes like hell.
[07:28] <aNGeL> bless you
[07:28] <aNGeL> austnet has them too
[07:28] if the owner dont remove them soon, there are some people with over 750,000 bots that are probably going to get pissed at the intrusion
[07:28] yea
[07:29] but they believe their comming from here
[07:29] <valentine> lol no
[07:29] read those posts
[07:30] perhaps 1 of you may reply to it..... i thought u should know
[07:30] hmm
[07:30] ok
[07:30] take care
[07:31] <valentine> Hmm
[07:31] * iBorg (MrIce@Sin-2A41D20A.in-addr.btopenworld.com) has left #7sinz
---------------------------------------------

Notice where the thread is pointing to.. right here. So, you guys think the bots are from 7sinzNet? eh? If someone has a problem, you need to talk to me.

I can't believe that I try and help the IRC community as a whole, and someone goes and does something incredibly stupid like threatening my users and my network.

--tiko-mad as hell.

tiko · none Joined: 24 Sep 2003 Posts: 49

I'd also like to point out that I infected myself in order to obtain this bot. As well, I've already sent the damned thing to two people; brut and Plasma.

-ARGH

bordem · none Joined: 13 Nov 2003 Posts: 1

i've noticed today that there apears to be another load "infecting" my net. this time however they are replying to CTCP Versions.... same message though, not very nice.

one thing i've never understood is, if they have the time and knowledge (all be it most of the time not THAT much knowlege but still) why not do something productive with their time.... not write stupid viri / spam bots / trojans / etcetcetc ....

I think i might be an idea to compile a list of all these bots + hosts and start getting something done about them.

Also on a side note, i noticed these bots appearsing not to long after my net was added to ifirc ...

w

ed · Posted: Nov 13, 2003 9:27pm Post subject:

Ok, folks. After seeing the source code to one of these bots, I have come up with a fix. I wrote it up in mIRC, but I'm sure someone here can convert it as needed.

I must say, the author of this script took lots of time and effort. It is a fairly smart bot (in the sense of checking who it should and should not spam).

Anyhow, if you are interested in it, please feel free to email me.

Jason · Posted: Nov 13, 2003 9:46pm Post subject:

Here is ed's mIRC script:
http://searchirc.com/files/antispam.mrc

ed · Posted: Nov 13, 2003 10:14pm Post subject:

If anyone would translate this into other various forms (x-chat perl or python, bitchx, tcl, etc) - please email me using the link below.

skerg · none Joined: 14 Jul 2003 Posts: 5

thanks ed

me and my friends were trying to come up with something like this but neaither of us are good with mirc scripts so lol.
will you be posting the code once someone translates it into python, ect? could use that on one of my bots so i dont have to run quite as many mirc clients. thanks again Very Happy

ed · Posted: Nov 14, 2003 12:16am Post subject:

If I can find someone who can do it, yes - we will post it for everyone to use.

skerg · none Joined: 14 Jul 2003 Posts: 5

o just discovered something, the bots dont spam a url at first, they spam like "Come see me..." and then the url (at least all of the ones that ive noticed do, i just slapped in (Come see me* iswm $1-) instead, just figured id let people know incase its doing the same to them

skerg · none Joined: 14 Jul 2003 Posts: 5

hey ed, had one join the server a few hours after ya left, here's the logs:

tiko · none Joined: 24 Sep 2003 Posts: 49

ed, my idea did not work.

newswire · Guest

hi tiko lol :lol:

tiko · none Joined: 24 Sep 2003 Posts: 49

lol, hey news guy!

shinjii · none Joined: 15 Nov 2003 Posts: 1

I am apart of a team on Undernet that deals with Drones of a varying nature from the basic common donres to the mroe complex. We also keep a database record of each chan the user and the type of drone they where and how we removed them. Sometimes, but not to often, we find that the same sort of things exist across many networks.

If more of this sort of thing is noted, then perhaps having an alliance with this team on Undernet could be of some benefit.

Mary · SearchIRC Admin Joined: 03 May 2003 Posts: 696

shinjii, GMTA. We see the need. SearchIRC actually has an administrators section in development. sprinkler (from Undernet) and ed (from SearchIRC) are leading the team. I think both are gone for the weekend, but if you leave a PM for either of them, they can use all the help you are willing to offer.