please help with this regex

These are old archives. They are kept for historic purposes only.
Post Reply
Guest

please help with this regex

Post by Guest » Thu Feb 09, 2006 7:34 am

please help ,
trojan/drone spamples:
ARG|268146!~qmppko@Abadan-14210405.dup.prima.net.ar:ARG|268146
ARG|823618!~kkakvggy@200.42.158.211:ARG|823618
ESP|052476!~algupd@233ECF3.8E49AA6F.45891375.IP:ESP|052476

I tried this ,
^([A-Z]{3}|[0-9]{6})!~[a-z]{6}@.+:\1

IRCD version: Unreal3.2.4
(backrefrences is supported in Unreal?)
thanks in advance

Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Post by Stealth » Thu Feb 09, 2006 8:31 pm

Code: Select all

^([a-z]{3}\|\d{6})!.+@.+:\1$

Guest

Post by Guest » Fri Feb 10, 2006 3:43 am

thanks , works well.

Code: Select all

-*- [Spamfilter] MEX|786385!~ahcsnscs@200.66.189.70 matches filter '^([a-z]{3}\|\d{6})!.+@.+:\1$': [NICK: 'MEX|786385!~ahcsnscs@200.66.189.70:MEX|786385'] [you are infected]
-*- [Spamfilter] ESP|896050!~cahpfg@200.65.131.10 matches filter '^([a-z]{3}\|\d{6})!.+@.+:\1$': [NICK: 'ESP|896050!~cahpfg@200.65.131.10:ESP|896050'] [you are infected]
:evil:

Jason
Posts: 570
Joined: Mon Jun 14, 2004 5:09 pm

Post by Jason » Sat Feb 11, 2006 3:12 am

Woah. I got these same exact drones recently. Who is your shell provider?
Why the hell can't my signature be empty?
"Your message contains too few characters."

Post Reply