| mIRC - please read [concerning safety on #jedi-academy & others] | |
|
Jacen Aratan - Student |
OK, the deal is, there is a trojan running around in the JA right now. By accident it has been spread. So if you recieve any link from people, containing "kate.krashed" [rest is censored, but it will be a .jpg] and the words <--- mine  after it, DO NOT CLICK IT! If you *do* press it, it will probably be a thing saying "page could not be found". Don't believe it. Go to scripting stuff (alt+r) and look in Remote/Aliases for anything odd, e.g. a link, or a strange .txt file. If you find something odd, delete it. Immedeatly.EDIT: Please note that if someone sends you this link, these things should be followed; 1) Don't press the link, as said above 2) Notice the guy sending you the link that he has done it, this might save a lot of trouble 3) It is not their fault. They don't know when they send the link, and can certainly not help it, so don't blame them EDIT2: If you have clicked the link, download and run this program This post was edited by Jacen Aratan on Dec 19 2003 06:56am. |
| < Recent Comments | Login and add your comment! |
| Comments |
|
Wolfwood - Student 
|
Yes, I was as stupid as you were and also clicked the link  download that removal tool to remove it _______________ ~ Honor is a fool's prize. Glory is of no use to the dead ~ |
|
Garos - Student 
|
AAAH! I opened that! All it said was Page Cannot be found, so do I have the virus??? ?!?!?!!??!?! |
|
Orion - Retired 
|
This Is A Virus here is a link for the removal tool. this a worm virus defined as w32.welchia.worm http://www.symantec.com/avcenter/FixWelch.exe _______________ When a Man lies he murder's some part of the world. These are the pale deaths which men misscall there lives. All this I cannot bear to witness any longer. Cannot the kingdom of salvation take me home? -Cliff Burton Owner of Smily's 1900th comment | <Lady_Catherine> i love your sexy white socks! | (Lady_Catherine) i adore u! | (Lady_Catherine) onion (Lady_Catherine) i lub u This comment was edited by Orion on Dec 19 2003 05:52am. |
|
OcarinaLink - Student 
|
m;eh...haven't seen it around... _______________ memento mori |
|
Aron - Retired 
|
what quakenet server are you connecting to? If you aren't sure, type //echo -a $server .. This comment was edited by Aron on Dec 18 2003 10:04pm. |
|
Wolfwood - Student 
|
My IRC is totally messed up :S I tried reinstall but that aint working either. If I do /join jedi-academy I get a channel with only my name in it :S anyone help plz?? _______________ ~ Honor is a fool's prize. Glory is of no use to the dead ~ |
|
Aron - Retired
|
I just checked it out, and as Jacen said, it seems pretty harmless. The webpage uses a default script to generate a 404 page, and somehow uses server-side code to add a line to your mIRC. I searched for a file called todo.txt, but it wasnt there. It is still not certain if it is totally safe, since this is only the part we noticed. It might execute some other stuff on your computer, so DONT CLICK THE LINK! I will include the website, but DONT VISIT IT! http://kate.krashed.org/ ANY page on this server will trigger this thing. Please dont paste the link in IRC. Not if people ask for it either. If you see any people pasting this link, either in pm, or in the channel, report them to me, or JAC. This is not only for people you know. If some unknown guy starts pm'ing you this link, do a /whois on him, and write down his info, and report it. Thanks -A |
|
Doppelgänger - Student 
|
Nothing is safe under the black rain of Windows! >:| _______________ "Look not back in anger, nor forward in fear But around you in awareness." Ross Hersey |
|
Jacen Aratan - Student |
It will add todo run todo.txt to your Aliases. EDIT: OK, Aron just told me, it is harmless. But, I chose to play it safe and alert you guys. At any rate, it's annoying. This comment was edited by Jacen Aratan on Dec 18 2003 09:13pm. |
|
Doppelgänger - Student
|
That's strange JJ just had a post asking about windows people having a "todo.txt" file on their system. JJ do you know something about this? _______________ "Look not back in anger, nor forward in fear But around you in awareness." Ross Hersey |
|
Thomasooo - Student 
|
Thanks for the help earlier, Jacen! _______________ In the navy and LOVING it! 
Recipient of comment no. 1000 and heart-warming words from Ataris!
|
|
D@RtHM@UL - Student 
|
My Aliasses list is filled, how am I supposed to know what is the Trojan? Thnx for this warning Jacen....someone pmed me with the link...while I didnt know it was a virus. If someone could help me know how I can see it.. |
|
Jacen Aratan - Student |
Indeed. I was unsure of whether it was just on mine, but I found it as a line containing "todo.txt" under Aliases. |
|
Orion - Retired 
|
just a quick note.. it should say like todo.txt _______________ When a Man lies he murder's some part of the world. These are the pale deaths which men misscall there lives. All this I cannot bear to witness any longer. Cannot the kingdom of salvation take me home? -Cliff Burton Owner of Smily's 1900th comment | <Lady_Catherine> i love your sexy white socks! | (Lady_Catherine) i adore u! | (Lady_Catherine) onion (Lady_Catherine) i lub u |
|
Jacen Aratan - Student |
Well, Mune.... AOL is made by Satan himself, so that could be from anywhere. |
|
Mune - Student 
|
:/ clicked it last night. I checked out remote, but there is nothing in it. I looked in aliases and everything looks fine. So I guess I lucked out? The only weird thing is that internet keeps prompting me to download payment.aol.something. :/ This comp is junk anyway. I love my dad's comp. Hurry up Friday. _______________ Captain Barkeep. |
|
Doppelgänger - Student 
|
Thanx Jacen A.! That is total B.S. there. Also wouldn't it be a good idea for Windows users to do a left-Shift+Delete on that virus if they find it? _______________ "Look not back in anger, nor forward in fear But around you in awareness." Ross Hersey |
|
Darkwood - Student 
|
or better yet, don't click the link _______________ -Darkwood- |
|
Jacen Aratan - Student |
If you use Trillian.... well, burn it, kill it, and install mIRC. Problem solved. No, seriously, I've never even seen Trillian, so I don't know. Look for something similar to Aliases/Remote? |
|
Darkwood - Student
|
then you must press alt+F4, monty! QUICK _______________ -Darkwood- |
|
Monteeeeeee - Nugget 
|
wot if u use trillian? _______________ If you add me to MSN, tell me who you are
Best Movie Character EVER!! |
|
Jacen Aratan - Student |
Added a screenie, if you need it. PS: Don't think too much about the name of the site, it was one I made for a school projekt. |
|
Marcel Mandarijn - Student 
|
w00t, luckily i dont come on irc anymore |
|
Bail Hope of Belouve - Student 
|
thanks man! thanks for the warning _______________ Visit the Belouve Family Website! Quote: I try to have fun with my friends and try to make a difference as best I can. What does making a difference mean? Well, it can be as simple as saying hello, answering a question that seems obvious or heck, just talking. -- Vladarion
Want to know Vladarion? Read the Article about his life here. |
|
CuZzA - Student 
|
YES SIR!!! _______________ - Even if Carlsberg made "w*nkers", Christiano Ronaldo would still be the biggest "w*nker" in the world |
| < Recent Comments | Login and add your comment! |