Messages that are sent have the worm's dropper as an attachment, the message subject is "Check this out, it's funny!" and the message body is empty. The worm creates the SCRAMBLER.VBS file in the Windows System directory and writes there a Visual Basic script program which will connect to MS Outlook and send email messages to the first 90 users taken from the MS Outlook address book. The worm writes a short script in that file to send its dropper to each user that enters an infected channel. The worm tries to overwrite the SCRIPT.INI file in standard mIRC directories on all drives from C: to F: to modify the mIRC client settings. It modifies MS Outlook, too, to spread with email messages. Then the worm infects all EXE files in the C:\MIRC\DOWNLOAD directory if such directory exists.Īfterward the worm modifies the mIRC client settings to send its copies to IRC channels.
The worm avoids infecting the files with names that begin with any of the following letters: E, P, R, T, W. Then the worm scans the Windows directory, looks for Windows EXE files and infects them by writing its code to the top of the file. The file will be used to send worm copies to Internet and IRC channels later. This file has a random 5-letter name, for example: HIJDE.EXE. Javascript is like the Christopher Hitchens of programming or something.When the worm's file is run for the first time, it creates its dropper (the file with pure worm's code) in the Windows system directory.
Then you can use basically the same command line I was going for in the question: node irc-download.js ChannelName BotName 123 /download/dir Var client = new irc.Client(arg, user, ).on('error', m => console.error(m)) Var user = 'user_' + Math.random().toString(36).substr(2), bar = 'Downloading.
Then, put this code in irc-download.js: var irc = require('xdcc').irc, ProgressBar = require('progress'), progress, arg = process.argv So yeah, this is simple.įirst, install these NPM packages (globally with -g if you want): npm install irc xdcc progress I've looked high and low for a solution that is not super cumbersome (like installing Cygwin on Windows, come on, there are IRC clients coded in ~250 lines of C, you can even telnet this ****).Īnd while nobody has simply made a program that does this basic task on a protocol older than your grandma's swimsuits, turns out we live in a world where NodeJS is a thing that exists.
0 kommentar(er)
