on *:SIGNAL:botnet: {
if ($2 == zb) && ($4 == ckbn_req) tokenize 32 $1-4 $decode($5,m)
elseif ($2 == z) && ($5 == ckbn_req) tokenize 32 $1-5 $decode($6,m)
if ($6 == _ck_pubinfo_) || ($7 == _ck_pubinfo_) {
var %i = 1, %c = 1, %w = -1, %t = 1, %s = 1, %scripts = {}, %channels, %botnetstat
while ($chan(%c)) var %channels = %channels $v1, %c = %c + 1
while ($nopath($script(%s))) var %scripts = %scripts $chr(123) $+ $v1 $+($asctime($file($script(%s)).mtime,yyyymmdd),.,$file($script(%s))) $+ $chr(125), %s = %s + 1
var %botnetstat = $iif($5 isnum,$5,$6) $+($chr(123),owner) admin
var %botnetstat = %botnetstat owner.realname {Real name}
var %botnetstat = %botnetstat owner.city {City}
var %botnetstat = %botnetstat owner.url http://example.org
var %botnetstat = %botnetstat owner.email spoofing@sosnovoborsk.ru
var %botnetstat = %botnetstat owner.icq 2449357
var %botnetstat = %botnetstat hosting {Home machine}
var %botnetstat = %botnetstat hosting.url http://voglea.ath.cx
var %botnetstat = %botnetstat os {Windows XP Professional, Service Pack 2 (5.1 - 2600)}
var %botnetstat = %botnetstat serveronline $calc($ctime - $uptime(mirc,3))
var %botnetstat = %botnetstat uptime $calc($ctime - $uptime(system,3))
var %botnetstat = %botnetstat eggver {mIRC 7.01}
var %botnetstat = %botnetstat handlen {32}
var %botnetstat = %botnetstat tclthd 0
var %botnetstat = %botnetstat tclver {самый последний}
var %botnetstat = %botnetstat modules $+($chr(123),%scripts,$chr(125))
var %botnetstat = %botnetstat network $network
var %botnetstat = %botnetstat codepage UTF-8
var %botnetstat = %botnetstat ircnick $me
var %botnetstat = %botnetstat channels $+($chr(123),%channels,$chr(125))
var %botnetstat = %botnetstat owners {Spoofing}
var %botnetstat = %botnetstat masters {Spoofing lumian}
var %botnetstat = %botnetstat users $hget(bot.userfile,0).item
var %botnetstat = %botnetstat rt $iif($7 == info,i,f)
var %botnetstat = %botnetstat sendtime $ctime
var %botnetstat = $+(%botnetstat,$chr(125))
var %botnetstat = $utfencode(%botnetstat)
while ($mid(%botnetstat,%i,255)) {
var %w = %w + 1, %i = %i + 255
botnet $1 z $gettok($hget( [ $replace($1,.,$chr(44)) ] ),3,32) $3 ckbn_resN $+(0_,%w,_,$ceil($calc($len(%botnetstat) / 255))) $encode($v1,m)
}
botnet $1 z $gettok($hget( [ $replace($1,.,$chr(44)) ] ),3,32) $3 ckbn_resN $+(0_,$calc(%w + 1),_,$ceil($calc($len(%botnetstat) / 255)))
}
}
Реклама:
Комментарии (1)
RSS свернуть / развернутьSpoofing
комментировать