IRC server detects subseven

Discussion in 'malware problems & news' started by matt1330, May 20, 2004.

Thread Status:
Not open for further replies.
  1. matt1330

    matt1330 Registered Member

    Joined:
    Apr 20, 2004
    Posts:
    4
    Location:
    Texas, USA
    I have been trying enter an IRC applet chat room. Every time I connect it says "Subseven detected" and disconnects me. I have scanned with Norton AV, Panda, TrojanHunter, Spybot, and Ad-Aware and came up with nothing. I got the details for subseven from the symantec site and checked the registry for the changes that would have been made, and they are not there. I'm sure this has to be a false positive. My question is, what info is being sent to the server that lets it make that detection within milliseconds? Maybe if I know that I can figure out what to change to correct this. Also, I entered a similar IRC room at SWI forums and all worked fine. What on earth is going on here?

    Connecting to irc.warped.net 6667 ......
    Connected to server, trying to login...
    *** Subseven detected.
    Closing Link: PedX by sanjose.ca.us.warped.net (K-lined)
    Connection close.
    connecting to irc.us.warped.net 6667 ......
    Connected to server, trying to login...
    *** Subseven Detected.
    closing Link: PedX by sanjose.ca.us.warped.net (K-lined)
    Connection close.
    connecting to irc.us.warped.net 6667 ......
    Connected to server, trying to login...
    java.net.SocketException: Socket read failed
    Connection close.
     
Loading...
Thread Status:
Not open for further replies.