MyMoon (Was: new threat)

These are old archives. They are kept for historic purposes only.
aquanight
Official supporter
Posts: 862
Joined: Tue Mar 09, 2004 10:47 pm
Location: Boise, ID

Post by aquanight »

If he were to tell, the bot coder need only look here, change the bot and the module becomes broken...
Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Post by Stealth »

Same goes for just looking at the module source :P

And Syzop has my email too :)
Cheese

Post by Cheese »

If the bot maker does come here, Big deal, we'll just find other ways of preventing it from happening, Besides its either this or we put up with the constant spamming in our networks :|
Stormdancing
Posts: 14
Joined: Mon Sep 27, 2004 3:29 pm

Syzop, have I told you lately that I love you?

Post by Stormdancing »

LOL

Will install this tonight and report back with my results.

Dana
Stormdancing
Guest

Post by Guest »

Installed and slamming spammer worms right and left. So far no real users caught in the trap or any apparent problems.

Thanks Syzop!
Stormdancing
Posts: 14
Joined: Mon Sep 27, 2004 3:29 pm

Post by Stormdancing »

Guest was me.

Sorry
Syzop
UnrealIRCd head coder
Posts: 1977
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Post by Syzop »

Good. And yes, normal users have a very low chance of being caught accidently (in fact, it's near 0.0%).
(also ->stealth) Let's not get into too much details ;).

I've only had positive reports, so I'm confident that it works just fine.
Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Post by Stealth »

Syzop, will this modue be added to the Win32 module pack? (unless it has been already) And if it is not already in the Win32 module pack, when will it be added? (so I can add it to the Win32 module site until it is added to the module pack)
Syzop
UnrealIRCd head coder
Posts: 1977
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Post by Syzop »

I'm not sure if this worm is active on any unrealircd win32 nets.
If someone on those nets is affected, they can mail me of course.
I'm not always in the mood to compile and package a mod for 2 unreal versions etc ;).
Stormdancing
Posts: 14
Joined: Mon Sep 27, 2004 3:29 pm

Post by Stormdancing »

This worked great but now today they are slipping through.
I wonder if they have changed their tactics? Did I miss something?

[14:35] * Joins: Iamenusbradley (~Iamenus@Stormdancing-22E362A9.dial.infosky.net)
[14:35] <Iamenusbradley> i have new version Microsoft Office XP (english) key generator at my private webserver , you can download it while im online ;) here http://195.250.104.27:1100/
Iamenusbradley was ~Iamenus@104-65.dial.InfoSky.Net * bradley6941
Iamenusbradley using StormDancing.Edison.NJ.US.StormDancing.Net Fri Oct 1 12:37:38 2004
End of WHOWAS


[15:16] * Joins: Gargardean (~Gargar@Stormdancing-2AF62C27.mia.bellsouth.net)
[15:17] <Gargardean> who need new cracks and cool p-o-r-n screen savers go to my server... http://192.168.1.97:8000/

Gargardean was ~Gargar@adsl-10-142-70.mia.bellsouth.net * dean1622
Gargardean using Heartsfire.Larkspur.CO.US.StormDancing.Net Fri Oct 1 13:18:58 2004
End of WHOWAS
pak
Posts: 17
Joined: Thu Mar 11, 2004 8:26 pm

Post by pak »

it looks like the owner has updated the nick list

[edit] it isn't new, a few were just missed....

bradley
bishop
dean
boyd

[/edit]
w00t
Posts: 1136
Joined: Thu Mar 25, 2004 3:31 am
Location: Nowra, Australia

Post by w00t »

Perhaps so, but one that was mentioned as "getting through" is in the nicklist.

Stormdancing, check the module is loaded... on all servers... etc etc etc.
-ChatSpike IRC Network [http://www.chatspike.net]
-Denora Stats [http://denora.nomadirc.net]
-Omerta [http://www.barafranca.com]
pak
Posts: 17
Joined: Thu Mar 11, 2004 8:26 pm

Post by pak »

neither dean or bradley are in the nicklist that the module holds, those are the two examples you gave, I would be interested to see what nick that was on the list got through
w00t
Posts: 1136
Joined: Thu Mar 25, 2004 3:31 am
Location: Nowra, Australia

Post by w00t »

[14:35] * Joins: Iamenusbradley (~Iamenus@Stormdancing-22E362A9.dial.infosky.net)
[14:35] <Iamenusbradley> i have new version Microsoft Office XP (english) key generator at my private webserver , you can download it while im online Wink here http://195.250.104.27:1100/

^^ from the post before.
-ChatSpike IRC Network [http://www.chatspike.net]
-Denora Stats [http://denora.nomadirc.net]
-Omerta [http://www.barafranca.com]
pak
Posts: 17
Joined: Thu Mar 11, 2004 8:26 pm

Post by pak »

I have searched the module source again and there is no reference to bradley. You require both nicks to be in the list for a match to be made
Post Reply