Re: what protocol
Andy Smith <[email protected]>
| Newsgroups | gmane.network.irc.bopm |
|---|---|
| Message-ID | <[email protected]> |
On Mon, Nov 10, 2003 at 11:33:05PM -0700, TS Lee wrote: > Greetings > > We are getting slammed by a new trojan/spam virus bot, much like the > MsCleo virus that > went around a few months ago. Anyone have a patch or know what to set the > bopms to scan for? > > <\_|> Come watch me on my webcam and chat /w me :-) > http://027.c.004.mel.iprimus.net.au:1188/me.mpg > > I tried setting http:1188 but so far they pass all the bopms Why did you expect this to work? It isn't a proxy. This is a trojan. Follow the discussion on the irc-security list if you care. The ports seem to be random so ther eis no possibility of a patch for bopm to detect this... -- Andy Smith -- Occasional BOPM Developer And Support Monkey. Please copy all BOPM support queries to the BOPM list, _not_ just directly to me! If I've helped you with BOPM then please check my wishlist! http://www.amazon.co.uk/exec/obidos/registry/23IJ4U7N4J3X9