hi all
Someone can make a Spam filter for this virus
http://socold.de/stuff/schnappi_death.jpg
Not Klick on this Link
New irc Virus
We've been getting hit by this, too
Here are some examples of how it works
«so``funny``» http://www.irc-fun.tk/stuff/schnappi_death.jpg <-----fun!!!!! http://www.irc-fun.tk/stuff/schnappi_death.jpg <--- YOU HAVE NEVER SEEN THIS BEFORE!!!
«Mastahunter» ‹ EDGEMANIAC › ARE YOU HARDCORE?! http://www.irc-fun.tk/stuff/schnappi_death.jpg <- ONLY HARDCORE PEOPLE CAN VIEW THIS PICTURE ~~ http://www.irc-fun.tk/stuff/schnappi_death.jpg ~~ http://www.irc-fun.tk/stuff/schnappi_death.jpg WARNING: ARE YOU ELEET ENOUGH?!
.:13·10·16:. «EDGEMANIAC» ARE YOU HARDCORE?! http://www.irc-fun.tk/stuff/schnappi_death.jpg <- ONLY HARDCORE PEOPLE CAN VIEW THIS PICTURE ~~ http://www.irc-fun.tk/stuff/schnappi_death.jpg ~~ http://www.irc-fun.tk/stuff/schnappi_death.jpg WARNING: ARE YOU ELEET ENOUGH?!
It seems they're changing the URL as they go.
Here are some examples of how it works
«so``funny``» http://www.irc-fun.tk/stuff/schnappi_death.jpg <-----fun!!!!! http://www.irc-fun.tk/stuff/schnappi_death.jpg <--- YOU HAVE NEVER SEEN THIS BEFORE!!!
«Mastahunter» ‹ EDGEMANIAC › ARE YOU HARDCORE?! http://www.irc-fun.tk/stuff/schnappi_death.jpg <- ONLY HARDCORE PEOPLE CAN VIEW THIS PICTURE ~~ http://www.irc-fun.tk/stuff/schnappi_death.jpg ~~ http://www.irc-fun.tk/stuff/schnappi_death.jpg WARNING: ARE YOU ELEET ENOUGH?!
.:13·10·16:. «EDGEMANIAC» ARE YOU HARDCORE?! http://www.irc-fun.tk/stuff/schnappi_death.jpg <- ONLY HARDCORE PEOPLE CAN VIEW THIS PICTURE ~~ http://www.irc-fun.tk/stuff/schnappi_death.jpg ~~ http://www.irc-fun.tk/stuff/schnappi_death.jpg WARNING: ARE YOU ELEET ENOUGH?!
It seems they're changing the URL as they go.
-
- Former UnrealIRCd head coder
- Posts: 811
- Joined: Sat Mar 06, 2004 8:47 pm
- Location: United States
- Contact:
Code: Select all
spamfilter {
regex "^[a-z0-9.-]+/stuff/schnappi_death\.jpg <--- LOOOOOOOOOOOOOOOOOOOOOOOOOL$";
target channel;
action block;
reason "Infected by unknown mIRC worm/trojan";
};
spamfilter {
regex "^[a-z0-9.-]+/stuff/schnappi_death\.jpg <-----fun!!!!! [a-z0-9.-]+/stuff/schnappi_death\.jpg <--- YOU HAVE NEVER SEEN THIS BEFORE!!!$";
target channel;
action block;
reason "Infected by unknown mIRC worm/trojan";
};
spamfilter {
regex "^ARE YOU HARDCORE\?! [a-z0-9.-]+/stuff/schnappi_death\.jpg <- ONLY HARDCORE PEOPLE CAN VIEW THIS PICTURE ~~ [a-z0-9.-]+/stuff/schnappi_death\.jpg ~~ [a-z0-9.-]+/stuff/schnappi_death\.jpg WARNING: ARE YOU ELEET ENOUGH\?!$";
target channel;
action block;
reason "Infected by unknown mIRC worm/trojan";
};
-- codemastr