two-pot screamer dot com

From Slashdot | Botnet on Botnet Action

Re:Note to Editors (Score:5, Interesting)
by karmatic (776420) on Friday April 20, @12:23PM (#18812887)

I certainly wouldn’t complain if someone started actively dismantling these networks.

Some of us try.

A while ago, I got a spam message, trying to infect me and connect me to a botnet - the software was a hacked up mIRC client with some DLL plugins. The client would automatically open a second connection, connect to a random network and channel, and proceed to spam people with virus messages on join. (”Type //some evil command to get op!, etc.”)

After talking to the admins, we banned the owners (only certain nicknames were allowed to control the bots), and replaced them with an eggdrop that had the infected people download and install an automatic cleaner. Thousands of infected computers were cleaned overnight, and hundreds more over the next few weeks. Is it possible that the cleaner broke a machine or two in the process? Possible, but unlikely (would be most likely due to a variant of the bot). Oh well - it made the IRC servers I used a lot more useful.

This entry was posted on Sunday, April 22nd, 2007 at 2:36 pm and is filed under Scrapbook. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.