[IRCServices] Major fizzer worm problem

[CaliMonk]

At 12:00 AM 5/15/2003 +0800, CPUMAN wrote:
>We run on Unreal on Serenia and are getting hit by hundreds of bots as well,
>we've just taken and made a bot that periodicly searchs for channels with
>these bots in it and takes over the channel, killing the bots in the
>process.  After which in enables a channel forward forcing all the bots into
>a main channel in which we can easily pick the rest off with scripts and
>such...
>
>The Fizzer worm's channels are easy to detect considering they always have
>the channel mode format of '+slk 1000 somerandomkey'.
>
>CPUMAN
>irc.serenia.net

There are large discussions running for this issue on other mailing lists, 
this one is only for services :)

On an offtopic note, if you just make a bot to send a privmsg with 001ECHO 
Any msg here to any connecting host you'll crash the IRC thread of the 
trojan, it'll respawn and go to a diffrent network though.

>----- Original Message -----
>From: "Terrance Thornsley" <terry at xevion.net>
>To: <ircservices at ircservices.za.net>
>Sent: Wednesday, May 14, 2003 11:03 PM
>Subject: [IRCServices] Major fizzer worm problem
>
>
> > Our IRC net is one of those targeted by the
> > fizzer worm and we are getting huge amounts of
> > connects.  Is anyone aware of any
> > module/fix/patch for services that we may be able
> > to use to ban these connects?  We're currently
> > using the most recent ver. of ircservices as well
> > as Unreal IRCd.
> >
> > Any help would be greatly appreciated.
> >
> > Thanks,
> >
> > Terry
> >
> >
> >
> >
> > ------------------------------------------------------------------
> > To unsubscribe or change your subscription options, visit:
> > http://www.ircservices.za.net/mailman/listinfo/ircservices
> >
>------------------------------------------------------------------
>To unsubscribe or change your subscription options, visit:
>http://www.ircservices.za.net/mailman/listinfo/ircservices

---------------------------------------
CaliMonk
Network Administrator
Axenet IRC Network
http://www.axenet.org
ICQ#: 12000049
MSN: calimonk at gmx.net
---------------------------------------
Webmaster & Co-Founder
Gabber-nation.net
http://www.gabber-nation.net
calimonk at gabber-nation.net
---------------------------------------