Trojans blocked by tircproxy

You are probably visiting this page, because you got a message like the following on IRC:

*Sombody* Trojan (DCC SEND script.ini) from me blocked,
	  see http://bre.klaki.net/programs/tircproxy/trojans.html 
	  for information.

This means that "Somebody" tried to send you one of many "trojan horses" that are circulating online. This usually means that the person's computer is itself infected by the program, not that he/she meant you any harm.

These trojans can be very dangerous, and can allow anybody on IRC to mess around with your computer, without your permission. They can also be darn hard to get rid of.

The message is telling you that the attempt was blocked, and so your computer was not infected. You can thank either your ISP or "Somebody's" for installing the freely available tircproxy, which slows the spread of these trojans.

For more information about IRC trojans (how to get rid of them, what they do etc.) and other IRC related security issues, see http://www.irchelp.org/irchelp/security/.


Versions 0.3.3 to 0.4.5 of tircproxy block the following trojans: The program also mangles offers of "mirc.ini", renaming the file to "mirc.in-", to decrease the risks involved in sharing this configuration file.


Bjarni R. Einarsson