I wouldn't dismiss it completely. This appears to be something that runs within an IRC client. It's been a long time (and I mean a VERY long time) since I used IRC with any regularity, but I did a little research and found that $decode() is used to decrypt an encrypted string (the garbage in the parentheses). Now, without an IRC client running, there's no way to tell what the encrypted strings in this particular example translate to, so I can only guess at what's going on.
The first four lines set variables: "hiddenadd" and "hiddenpass" are set to whatever those $decode() methods return; "file-log" is pointed at a file, the location of which is system- and user-specific; and I don't know what "usr" is set to, as I don't know what $ms$ represents. As for the fifth line, you got me. I don't think it does much of anything at all and appears incomplete. The last line appears to send the information gathered in the first four lines to a remote machine which is also running an IRC client. (Ctcp is a means by which one IRC client can communicate with another.)
I don't know how helpful that was, but I can tell you that the second line is where the money's at. Find out what those two encrypted strings decrypt to and you'll have a good idea of what this script is intended to do.
Main Topics
Browse All Topics





by: elvin66Posted on 2009-11-02 at 14:16:21ID: 25724381
That code is fake. Doesn't even make the slightest bit of sense. I think this student is having you on.
By the way, if I had a student who professed to be able to hack the servers I would suspend them immediately and call the police. Is is an offence to hack computers and although his crappy code won't run on any machine, he/she may just have the ability to download real code that can cause harm. I'd boot the troublesome student out but that's just me !