IRC chatroom - web or client - problems?

[Carol Haynes]

Or is it?

Every time I click on Chat! (in Firefox or IE) I get a screen asking for a screen name but when I click to join the chatroom I just get an error.

In FF it says: "TypeError: this.onerror is not a function"

I decided to install a client but when ever I connect to a channel TrendMicro RUBotted reports "Detected connection to Botnet Command and Control server" and says a Bot has started up on my system or "Detected DNS query of malicious domain". These BOT warnings only occur when I start up an IRC client, even when I disable IRC monitoring in RUBotted.

Is this just a false positive - or should I be worried?

I have tried running TrendMicro's Housecall, NOD32 AV/AS scanner and Spybot Search and Destroy but none seem to produce anything ???

[Ehtyar]

Many Trojans, most notably Storm, use IRC to centralize their control systems. You may find connecting to an IRC on a different port will avoid the warnings. Most IRC servers accept SSL connections on 6669 and 7000. irc.pte.hu I know listens on various ports, a list of which you can find by connecting to and reading the MOTD from the server window.

On a more personal note, this seems to be the same sort of utter inconsiderate negligence that has plagued the security software market for years on end, it really is time it stopped.

Ehtyar.

[edit]
For a client might I recommend ChatZilla under XULRunner, or KVIRC.
[/edit]

[Carol Haynes]

Thanks - I have already downloaded Chatzilla and still get the same problem.

I can't find anywhere in Chatzill to set SSL connections or set ports. Any ideas?

[mouser]

The online chat on dc website seems to work fine for me.

[Carol Haynes]

This is what I get every time:

[ewemoa]

I can't find anywhere in Chatzill to set SSL connections or set ports. Any ideas?

-Carol Haynes (January 21, 2009, 06:01 AM)

Have you tried using an ircs URL?

http://chatzilla.hac...rus.com/faq/#connect (see the end of 2.2)

[Carol Haynes]

Thanks - yes I tried that and on the server I am using (efnet.demon.co.uk) it deosn't seem to support ircs url.

[f0dder]

Try SSL.EFNET.ORG - it dishes out ssl-enabled servers in round-robin. Afaik there's only like three client-side SSL enabled servers at the moment... You probably need to specify port as "+9999".

Anyway, if your current anti-whatever solution doesn't allow you to set up a warning-exception for your IRC client, imho it's a piece of junk and you should find something else

[Carol Haynes]

Thanks.