PtokaX forum

Archive => Archived 5.0 boards => Request for scripts => Topic started by: ?Tr??T_???? on 15 July, 2005, 11:40:46

Title: Anti Virus Help
Post by: ?Tr??T_???? on 15 July, 2005, 11:40:46
hello i have this script of antivirus but i dont knoe how to put a name on it i want to put -=Anti-Virus=- can someone help me??? Regards


--// ------------------------------------------------------------------------------------------------------------ --

--// -  GeceBekcisi'nin yazdigi HubBekcisi s?r?m 0.5 ten alintidir

--// -  Stripped from HubBekcisi v0.5 by GeceBekcisi

--// ------------------------------------------------------------------------------------------------------------ --

--// -  Features: Simple Win32.Tibick detection

--// ------------------------------------------------------------------------------------------------------------ --

--------------------------------------------------------------------------------------------------------------------

--// Global Settings

--------------------------------------------------------------------------------------------------------------------

sBot = frmHub:GetHubBotName()      -- Bot's Name   ( leave so if you don't want to use a special name for your bot )

sRdAd = frmHub:GetRedirectAddress()   -- Redirect address    ( leave so if you want users to be redirected to the default redirect address )

sRedirect = "off"         -- Redirect detected users         ( on / off )

sInform = "on"         -- Inform user why he was banned / disconnected   ( on / off )

sFeed = "on"         -- Feed about detected users         ( on / off )

sFeedType = "OPS"         -- "OPS" for Pm to ops, "NICK" for pm to specified nick below

sFeedNick = "Admin"         -- Enter nick to send feeds if NICK selected above

sKickType = "BAN"         -- "DSC" to disconnect user, "BAN" to timeban user for specified minutes below

iTimeBan = "60"         -- TimeBan time in minutes if BAN selected above

--------------------------------------------------------------------------------------------------------------------

-- Some notes about Kick Type setting

-- Disconnecting may cause feed spam if a popular hub with feed turned on

-- TimeBanning fixes feed spam but may cause a slow hub because of huge banlist

--------------------------------------------------------------------------------------------------------------------

--// AntiVirus begins

--------------------------------------------------------------------------------------------------------------------

function MyINFOArrival(curUser, sData)

   if curUser.sEmail and string.find(curUser.sEmail, "myemail@host.com") then

      if sFeed == "on" then

         if sFeedType == "OPS" then

            SendPmToOps(sBot, "A user from IP "..curUser.sIP.." is trying to login with Win32.Tibick virus but stopped.")

         else

            SendPmToNick(sFeedNick, sBot, "A user from IP "..curUser.sIP.." is trying to login with Win32.Tibick virus but stopped.")

         end

      end

      if sInform == "on" then

         curUser:SendData(sBot, "Your DC++ system is infected by Win32.Tibick virus. Please clean it before entering our hub!")

         curUser:SendData(sBot, "For more info double click: http://www3.ca.com/securityadvisor/virus...s.aspx?id=40789")

      end

      if sRedirect == "on" then

         curUser:Redirect(sRdAd, " Get an AntiVirus software! ")

      end

      if sKickType == "DSC" then

         curUser:Disconnect()

      else

         curUser:TimeBan(iTimeBan)

      end

   return 1

   end

end

--------------------------------------------------------------------------------------------------------------------

--// AntiVirus ends

--------------------------------------------------------------------------------------------------------------------
Title:
Post by: GeceBekcisi on 15 July, 2005, 13:40:07
change sBot = frmHub:GetHubBotName() to sBot = "-=Anti-Virus=-".. or copy this:--// ------------------------------------------------------------------------------------------------------------ --
--// -  GeceBekcisi'nin yazdigi HubBekcisi s?r?m 0.5 ten alintidir
--// -  Stripped from HubBekcisi v0.5 by GeceBekcisi
--// ------------------------------------------------------------------------------------------------------------ --
--// -  Features: Simple Win32.Tibick detection
--// ------------------------------------------------------------------------------------------------------------ --
--------------------------------------------------------------------------------------------------------------------
--// Global Settings
--------------------------------------------------------------------------------------------------------------------
sBot = "-=Anti-Virus=-" -- Bot's Name ( leave so if you don't want to use a special name for your bot )
sRdAd = frmHub:GetRedirectAddress() -- Redirect address ( leave so if you want users to be redirected to the default redirect address )
sRedirect = "off" -- Redirect detected users ( on / off )
sInform = "on" -- Inform user why he was banned / disconnected ( on / off )
sFeed = "on" -- Feed about detected users ( on / off )
sFeedType = "OPS" -- "OPS" for Pm to ops, "NICK" for pm to specified nick below
sFeedNick = "Admin" -- Enter nick to send feeds if NICK selected above
sKickType = "BAN" -- "DSC" to disconnect user, "BAN" to timeban user for specified minutes below
iTimeBan = "60" -- TimeBan time in minutes if BAN selected above
--------------------------------------------------------------------------------------------------------------------
-- Some notes about Kick Type setting
-- Disconnecting may cause feed spam if a popular hub with feed turned on
-- TimeBanning fixes feed spam but may cause a slow hub because of huge banlist
--------------------------------------------------------------------------------------------------------------------
--// AntiVirus begins
--------------------------------------------------------------------------------------------------------------------
function MyINFOArrival(curUser, sData)
if curUser.sEmail and string.find(curUser.sEmail, "myemail@host.com") then
if sFeed == "on" then
if sFeedType == "OPS" then
SendPmToOps(sBot, "A user from IP "..curUser.sIP.." is trying to login with Win32.Tibick virus but stopped.")
else
SendPmToNick(sFeedNick, sBot, "A user from IP "..curUser.sIP.." is trying to login with Win32.Tibick virus but stopped.")
end
end
if sInform == "on" then
curUser:SendData(sBot, "Your DC++ system is infected by Win32.Tibick virus. Please clean it before entering our hub!")
curUser:SendData(sBot, "For more info double click: [URL]http://www3.ca.com/securityadvisor/virus...s.aspx?id=40789[/URL]")
end
if sRedirect == "on" then
curUser:Redirect(sRdAd, " Get an AntiVirus software! ")
end
if sKickType == "DSC" then
curUser:Disconnect()
else
curUser:TimeBan(iTimeBan)
end
return 1
end
end
--------------------------------------------------------------------------------------------------------------------
--// AntiVirus ends
--------------------------------------------------------------------------------------------------------------------
Title: anti virus
Post by: ?Tr??T_???? on 15 July, 2005, 13:49:49
np m8 it doesent work
i cant see him at the hub...
Title:
Post by: TTB on 15 July, 2005, 13:58:13
Copy paste this, put it above  function MyINFOArrival...

function Main()
frmHub:RegBot(sBot)
end

good luck
Title:
Post by: GeceBekcisi on 15 July, 2005, 13:59:04
Try now:--// ------------------------------------------------------------------------------------------------------------ --
--// -  GeceBekcisi'nin yazdigi HubBekcisi s?r?m 0.5 ten alintidir
--// -  Stripped from HubBekcisi v0.5 by GeceBekcisi
--// ------------------------------------------------------------------------------------------------------------ --
--// -  Features: Simple Win32.Tibick detection
--// ------------------------------------------------------------------------------------------------------------ --
--------------------------------------------------------------------------------------------------------------------
--// Global Settings
--------------------------------------------------------------------------------------------------------------------
sBot = "-=Anti-Virus=-" -- Bot's Name ( leave so if you don't want to use a special name for your bot )
sRdAd = frmHub:GetRedirectAddress() -- Redirect address ( leave so if you want users to be redirected to the default redirect address )
sRedirect = "off" -- Redirect detected users ( on / off )
sInform = "on" -- Inform user why he was banned / disconnected ( on / off )
sFeed = "on" -- Feed about detected users ( on / off )
sFeedType = "OPS" -- "OPS" for Pm to ops, "NICK" for pm to specified nick below
sFeedNick = "Admin" -- Enter nick to send feeds if NICK selected above
sKickType = "BAN" -- "DSC" to disconnect user, "BAN" to timeban user for specified minutes below
iTimeBan = "60" -- TimeBan time in minutes if BAN selected above
--------------------------------------------------------------------------------------------------------------------
-- Some notes about Kick Type setting
-- Disconnecting may cause feed spam if a popular hub with feed turned on
-- TimeBanning fixes feed spam but may cause a slow hub because of huge banlist
--------------------------------------------------------------------------------------------------------------------
--// AntiVirus begins
--------------------------------------------------------------------------------------------------------------------
function Main()
frmHub:RegBot(sBot)
end

function MyINFOArrival(curUser, sData)
if curUser.sEmail and string.find(curUser.sEmail, "myemail@host.com") then
if sFeed == "on" then
if sFeedType == "OPS" then
SendPmToOps(sBot, "A user from IP "..curUser.sIP.." is trying to login with Win32.Tibick virus but stopped.")
else
SendPmToNick(sFeedNick, sBot, "A user from IP "..curUser.sIP.." is trying to login with Win32.Tibick virus but stopped.")
end
end
if sInform == "on" then
curUser:SendData(sBot, "Your DC++ system is infected by Win32.Tibick virus. Please clean it before entering our hub!")
curUser:SendData(sBot, "For more info double click: [URL]http://www3.ca.com/securityadvisor/virus...s.aspx?id=40789[/URL]")
end
if sRedirect == "on" then
curUser:Redirect(sRdAd, " Get an AntiVirus software! ")
end
if sKickType == "DSC" then
curUser:Disconnect()
else
curUser:TimeBan(iTimeBan)
end
return 1
end
end
--------------------------------------------------------------------------------------------------------------------
--// AntiVirus ends
--------------------------------------------------------------------------------------------------------------------
Title: thanx
Post by: ?Tr??T_???? on 15 July, 2005, 15:16:11
Yep thanx m8 it works
Title:
Post by: blackwings on 15 July, 2005, 15:36:07
GeceBekcisi, you should fix the url in the script ;)

I don't know how good info that the site in your script has, but I think this one is good =
 click here (http://securityresponse.symantec.com/avcenter/venc/data/w32.tibick.html)
Title:
Post by: GeceBekcisi on 15 July, 2005, 16:03:54
Oh, damn it! Board makes it so :( Thanx blackwings.

Click here (http://www.students.itu.edu.tr/~canem/AntiVirus.lua) to download the full AntiVirus script.