You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 366 guest(s) and 19 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
Nuke Cops :: View topic - Spammer Uses Sites WebMail. [ ]
 Forum FAQ  •  Search  •   •  Memberlist  •  Usergroups   •  Register  •  Profile •    •  Log in to check your private messages  •  Log in

 
Post new topic  Reply to topicprinter-friendly view
View previous topic Log in to check your private messages View next topic
Author Message
MGCJerry
Elite Nuker
Elite Nuker


Joined: Jun 16, 2003
Posts: 220


PostPosted: Tue Nov 30, 2004 2:01 pm Reply with quoteBack to top

You can also have the phpbb system handle the registrations, and add the free providers to the blocklist. Wink

It worked on my site while I had it active.

Heres my killfile. I have the mod that allows you to have "wildcard" domain extensions.
Code:

INSERT INTO `nuke_bbbanlist` VALUES ('', 0, '', '*@yahoo.de');
INSERT INTO `nuke_bbbanlist` VALUES ('', 0, '', '*@mail.*');
INSERT INTO `nuke_bbbanlist` VALUES ('', 0, '', '*@BonBon.net');
INSERT INTO `nuke_bbbanlist` VALUES ('', 0, '', '*@GameBox.net');
INSERT INTO `nuke_bbbanlist` VALUES ('', 0, '', '*@hotpop.com');
INSERT INTO `nuke_bbbanlist` VALUES ('', 0, '', '*@aol.com');
INSERT INTO `nuke_bbbanlist` VALUES ('', 0, '', '*@fakemail.*');

_________________
Original creator of
* Fetch Mod
* RPG Races Module
* 2 The Xtreme Theme
Find all posts by MGCJerryView user's profileSend private message
Sugrat
Private
Private


Joined: Oct 30, 2003
Posts: 39


PostPosted: Tue Nov 30, 2004 2:09 pm Reply with quoteBack to top

I don't have webmail enabled on our server but this guy/girl keeps registering and some part of the username/email is always lotto UK.

In the end I installed the admin approved module but my question is, if I don't have webmail enabled, why did this person keep making new accounts after I deleted the old ones? it wasn't giving him anything??

Or am I wrong?
Find all posts by SugratView user's profileSend private messageVisit poster's website
Mommy_Deanne
Nuke Soldier
Nuke Soldier


Joined: Oct 21, 2004
Posts: 19

Location: Arizona

PostPosted: Tue Nov 30, 2004 2:25 pm Reply with quoteBack to top

Same person! Oooh that guy!! We removed the WebMail plugin. Let's just see what other trouble we can get into now.
Find all posts by Mommy_DeanneView user's profileSend private messageVisit poster's website
Sugrat
Private
Private


Joined: Oct 30, 2003
Posts: 39


PostPosted: Tue Nov 30, 2004 3:14 pm Reply with quoteBack to top

Here's what he/she used this morning to register at my site:-

-Nickname: HONDA

-Email: hondalotteryuk@linuxmail.org

and then straight away with this one

-Nickname: HONDACOMPANYUK

-Email: hondalottery_uk@linuxmail.org
Find all posts by SugratView user's profileSend private messageVisit poster's website
Prophet
Captain
Captain


Joined: Mar 14, 2004
Posts: 422

Location: Florida, USA, Earth, Space

PostPosted: Tue Nov 30, 2004 4:14 pm Reply with quoteBack to top

As seen in my earlier post, this is probably not just one person.
Here is a more drastic measure of defense for people that also use Sentinel.
You can use this at the same position as and in conjunction with the last codes I submitted

Code:
//
    // LOTTERY BLOCKER
    global $prefix;
    $ip = $_SERVER["REMOTE_ADDR"];
   $txt = "Lottery";
   $d = time();

                 // check email address for the following
    $lottmail = array('lott', 'lot', 'lotter', 'lottery', 'coord', 'coordinator');

   foreach($lottmail as $banmail){
    if (eregi($banmail, $user_email)) {   
   $db->sql_query("insert into ".$prefix."_nsnst_ips values ('$ip', '', '', '', '$d', '$txt', '', '$ip', '', '', '', '', '', '0')");
   die("<META HTTP-EQUIV=\"refresh\" content=\"1;URL=http://sesamestreet.com\">");
   }
   }
    //
    // END LOTTERY BLOCKER
    ///


This will automatically ban anyone that uses the keywords in their email. Their IP address will be added to Sentinel's banned IP list.
This may cause the occassional mistaken identity, but it's better than you being the victim.

_________________
- Prophet
Get the Last Visit module (and others modules I designed) from my website! FREE! http://jasonlau.biz

http://DotCom.Name
Find all posts by ProphetView user's profileSend private messageVisit poster's websiteAIM Address
ravernews
Premium
Premium


Joined: Jan 26, 2003
Posts: 230

Location: USA

PostPosted: Wed Dec 01, 2004 8:51 am Reply with quoteBack to top

Check this out.

I dont know why this happened but maybe some of you get the same thing.

Code:
Note: Trashed messages more than 30 days old will be automatically deleted.
  1zpK0Z   RaverNews.com Feedback - RaverNews.com Sender's Name: 1zpK0Z Sender's Email: LC2l5REi8b@SlwhCP0UFd.com Message …   Nov 19
  gm1Vhv   RaverNews.com Feedback - RaverNews.com Sender's Name: gm1Vhv Sender's Email: hlfq9Xatiy@dMfHz0JjLx.com Message …   Nov 19
  jGfdHv   RaverNews.com Feedback - RaverNews.com Sender's Name: jGfdHv Sender's Email: I9Z4128oqu@kpmzdvO3cx.com Message …   Nov 19
  m8YS6p   RaverNews.com Feedback - RaverNews.com Sender's Name: m8YS6p Sender's Email: qsHR2gLkdW@uKRcYlJErI.com Message …   Nov 19
  tmw75a   RaverNews.com Feedback - RaverNews.com Sender's Name: tmw75a Sender's Email: UE951dxKpr@f5KLPmbg0I.com Message …   Nov 19
  F0XQiB   RaverNews.com Feedback - RaverNews.com Sender's Name: F0XQiB Sender's Email: 1NoD6isj9e@AeGlvI2Kgi.com Message …   Nov 19
  jiX6nC   RaverNews.com Feedback - RaverNews.com Sender's Name: jiX6nC Sender's Email: Q8MpbLjiJg@dHZSjmDvX3.com Message …   Nov 19
  aETkqH   RaverNews.com Feedback - RaverNews.com Sender's Name: aETkqH Sender's Email: UeKGM7oV8j@El9KdhStMi.com Message …   Nov 19
  9abCn0   RaverNews.com Feedback - RaverNews.com Sender's Name: 9abCn0 Sender's Email: xOJcqPksoF@iBL720wTP6.com Message …   Nov 19
  KhuFHW   RaverNews.com Feedback - RaverNews.com Sender's Name: KhuFHW Sender's Email: Un9OY2LsKW@sbtUm7peZA.com Message …   Nov 19
  SKRPwi   RaverNews.com Feedback - RaverNews.com Sender's Name: SKRPwi Sender's Email: kAtLPOqIvK@GvXTqjhrUi.com Message …   Nov 19
  59MyS0   RaverNews.com Feedback - RaverNews.com Sender's Name: 59MyS0 Sender's Email: NaUQolkmds@7YMGmrD5Pv.com Message …   Nov 19
  o4UIPa   RaverNews.com Feedback - RaverNews.com Sender's Name: o4UIPa Sender's Email: KY9BXQAVlZ@UdnHBlqpSy.com Message …   Nov 19
  IKHSk6   RaverNews.com Feedback - RaverNews.com Sender's Name: IKHSk6 Sender's Email: OstNYbhwma@h9iRzsxm5f.com Message …   Nov 19
  MwhmN9   RaverNews.com Feedback - RaverNews.com Sender's Name: MwhmN9 Sender's Email: ot9CWeKqku@V7a4kcNE9Z.com Message …   Nov 19
  f9Gmk2   RaverNews.com Feedback - RaverNews.com Sender's Name: f9Gmk2 Sender's Email: W12R9UV3hG@cTgO6bI31H.com Message …   Nov 19
  a87Ibi   RaverNews.com Feedback - RaverNews.com Sender's Name: a87Ibi Sender's Email: ksIcrXiEzU@chSNKk7XP1.com Message …   Nov 19
  wYlieI   RaverNews.com Feedback - RaverNews.com Sender's Name: wYlieI Sender's Email: aIc9F6OYeg@dj6vbqkCNF.com Message …   Nov 19
  ncme4J   RaverNews.com Feedback - RaverNews.com Sender's Name: ncme4J Sender's Email: nFrfZX5xul@3kpOiVHrtN.com Message …   Nov 19
  T7F4Kj   RaverNews.com Feedback - RaverNews.com Sender's Name: T7F4Kj Sender's Email: 2ctM4VsmHl@57D8hTl1Qr.com Message …   Nov 19
  WHU9Xb   RaverNews.com Feedback - RaverNews.com Sender's Name: WHU9Xb Sender's Email: D5yWdtsaEu@Odol7Uk09G.com Message …   Nov 19
  LT5pi2   RaverNews.com Feedback - RaverNews.com Sender's Name: LT5pi2 Sender's Email: S0Qi25MZql@sN68VGvf40.com Message …   Nov 19
  pjon4z   RaverNews.com Feedback - RaverNews.com Sender's Name: pjon4z Sender's Email: qivxLXYhV6@fbrowNBhDH.com Message …   Nov 19
  J7no3Y   RaverNews.com Feedback - RaverNews.com Sender's Name: J7no3Y Sender's Email: ECon6TxdeW@xX3BTFWOtk.com Message …   Nov 19
  ZogY2n   RaverNews.com Feedback - RaverNews.com Sender's Name: ZogY2n Sender's Email: Mpmzu9j3vq@Po6VyUkxiX.com Message …   Nov 19
  kI1uqP   RaverNews.com Feedback - RaverNews.com Sender's Name: kI1uqP Sender's Email: ZsL4iY5TMv@6Ae2UzlkOB.com Message …   Nov 19
  6jE9Tv   RaverNews.com Feedback - RaverNews.com Sender's Name: 6jE9Tv Sender's Email: 6qUdw1QlLf@CqIwxz6r8l.com Message …   Nov 19
  aboLrg   RaverNews.com Feedback - RaverNews.com Sender's Name: aboLrg Sender's Email: DYdrEq5STl@KUro7Iqmcf.com Message …   Nov 19
  34Iuy0   RaverNews.com Feedback - RaverNews.com Sender's Name: 34Iuy0 Sender's Email: 4UJkyg6BuN@oaz1eSq9wX.com Message …   Nov 19
  waYybM   RaverNews.com Feedback - RaverNews.com Sender's Name: waYybM Sender's Email: qfNuRj9x04@3ZBrSGDJPu.com Message …   Nov 19
  ZUbdRN   RaverNews.com Feedback - RaverNews.com Sender's Name: ZUbdRN Sender's Email: FX48m6YJBL@YbHZihsewj.com Message …   Nov 19
  K3hvNb   RaverNews.com Feedback - RaverNews.com Sender's Name: K3hvNb Sender's Email: FNUa8vZSXB@7bthWCwedF.com Message …   Nov 19
  vspqQm   RaverNews.com Feedback - RaverNews.com Sender's Name: vspqQm Sender's Email: krd6PSTxM1@pMdoLwKJh5.com Message …   Nov 19
  dBGX7c   RaverNews.com Feedback - RaverNews.com Sender's Name: dBGX7c Sender's Email: SxD7sbjViG@X51CnLKrlQ.com Message …   Nov 19
  bcCi8Z   RaverNews.com Feedback - RaverNews.com Sender's Name: bcCi8Z Sender's Email: nlpF3iXMhE@GZ1O9iUHXy.com Message …   Nov 19
  hYFJ61   RaverNews.com Feedback - RaverNews.com Sender's Name: hYFJ61 Sender's Email: To8kvEUN2B@dGyvfRbEmq.com Message …   Nov 19
  MvPlaj   RaverNews.com Feedback - RaverNews.com Sender's Name: MvPlaj Sender's Email: TLX608mFMs@lPdpuvCzy0.com Message …   Nov 19
  7BkQ5D   RaverNews.com Feedback - RaverNews.com Sender's Name: 7BkQ5D Sender's Email: EIB6oGYuM7@PI71OVrDkJ.com Message …   Nov 19
  mJyHVX   RaverNews.com Feedback - RaverNews.com Sender's Name: mJyHVX Sender's Email: yQOYRj8MiK@2kWlxzg67B.com Message …   Nov 19
  GM3ea8   RaverNews.com Feedback - RaverNews.com Sender's Name: GM3ea8 Sender's Email: anzOjUvqAg@xH95Es4jnT.com Message …   Nov 19
  vXUQEM   RaverNews.com Feedback - RaverNews.com Sender's Name: vXUQEM Sender's Email: pAu3OVzwK6@83qYoA6Wwj.com Message …   Nov 19
  6tTFmz   RaverNews.com Feedback - RaverNews.com Sender's Name: 6tTFmz Sender's Email: hYaLtyM3zA@iAPj0LCSXz.com Message …   Nov 19
  ax9nY1   RaverNews.com Feedback - RaverNews.com Sender's Name: ax9nY1 Sender's Email: 4fIqJQViuF@XNAImhd7zR.com Message …   Nov 19
  4bUSkK   RaverNews.com Feedback - RaverNews.com Sender's Name: 4bUSkK Sender's Email: 7ABsgGvZUd@FczhkiZGfg.com Message …   Nov 19
  TlPQze   RaverNews.com Feedback - RaverNews.com Sender's Name: TlPQze Sender's Email: 3MFzUh2BeV@sCavpY179n.com Message …   Nov 19
  SJgbEl   RaverNews.com Feedback - RaverNews.com Sender's Name: SJgbEl Sender's Email: FbQiNv9ksA@abTI4VZegE.com Message …   Nov 19
  4I8rA6   RaverNews.com Feedback - RaverNews.com Sender's Name: 4I8rA6 Sender's Email: WaR4Y5V2Bl@VxlrzoREpb.com Message …   Nov 19
  MbKJvm   RaverNews.com Feedback - RaverNews.com Sender's Name: MbKJvm Sender's Email: ixhmp36vPZ@d5usDlxFYJ.com Message …   Nov 19
  eX0QiP   RaverNews.com Feedback - RaverNews.com Sender's Name: eX0QiP Sender's Email: eMcRIsgCBx@t84OUS15lF.com Message …   Nov 19
  2TbKeF   RaverNews.com Feedback - RaverNews.com Sender's Name: 2TbKeF Sender's Email: afuqSYQzcn@EjlY6LGZdy.com Message …   Nov 19


And this is what one of the emails look like

2TbKeF <afuqsyqzcn@ejly6lgzdy.com> to me
More options Nov 19



RaverNews.com

Sender's Name: 2TbKeF
Sender's Email: afuqSYQzcn@EjlY6LGZdy.com
Message: 9L3lUGDku0



I dont really care because I fixed everything, but just incase you guys get this stuff someday

_________________
I am new at this, give me time.


PHPNUKE = Less Code
NukeCops = More power
PhpNuke + NukeCops = "less code more power"
Find all posts by ravernewsView user's profileSend private messageVisit poster's websiteAIM AddressYahoo Messenger
Prophet
Captain
Captain


Joined: Mar 14, 2004
Posts: 422

Location: Florida, USA, Earth, Space

PostPosted: Wed Dec 01, 2004 8:59 am Reply with quoteBack to top

Something tells me that's a bot Wink

_________________
- Prophet
Get the Last Visit module (and others modules I designed) from my website! FREE! http://jasonlau.biz

http://DotCom.Name
Find all posts by ProphetView user's profileSend private messageVisit poster's websiteAIM Address
Sugrat
Private
Private


Joined: Oct 30, 2003
Posts: 39


PostPosted: Wed Dec 01, 2004 9:00 am Reply with quoteBack to top

Here's some more addresses they are using:-

-Nickname: uk_national_lottery

-Email: price_claim_department@yahoo.co.uk

-Nickname: uk_online_lottery

-Email: blair_long@linuxmail.org


80% of the spam accounts that apply are from @linuxmail.org
Find all posts by SugratView user's profileSend private messageVisit poster's website
Prophet
Captain
Captain


Joined: Mar 14, 2004
Posts: 422

Location: Florida, USA, Earth, Space

PostPosted: Wed Dec 01, 2004 11:31 am Reply with quoteBack to top

Okay, here's a pretty good and simple way to help ...
Nuke versions 7.5 and lower - insert this code into includes/my_header.php
Nuke 7.6 - you can insert this code into your custom header file or directly into header.php (after the <?php tag Rolling Eyes ).
Thats it!
This will add them to your Sentinel blocked IP list (although I recommend you do have Sentinel, you don't have to have Sentinel to use this script), it will put a cookie on the user, and send the admin an email notification.

If you installed any of the previous scripts I posted, you will want to remove them before using this.

Code:
//
// LOTTERY BLOCKER BY PROPHET
// http://musicodezone.com
//

if(is_user($user)) {
CheckLotto($user);
}

function CheckLotto($user){
global $prefix, $cookie, $adminmail, $sitename, $nukeurl, $user, $db;
$badcookie = $_COOKIE["Lotto"];
cookiedecode($user);
$username = $cookie[1];
$result = $db->sql_query("SELECT user_email FROM ".$prefix."_users WHERE username='$username'");
$row = $db->sql_fetchrow($result);
$email = $row[user_email];
$ip = $_SERVER["REMOTE_ADDR"];
$date = date("M d, Y");
$time = date("g:i A");

// edit below to suit your needs

$lottmail = array('l0tt0', 'l0t0', 'l0t', 'l0tt', 'lott0', 'lotto', 'lott', 'lotter', 'lottery', 'coord', 'coordinator', 'cordinat', '.gov', 'mailinator', 'eChina', 'linuxmail');

$message = "A potential spammer ($username - $email - $ip - $date - $time) has been blocked at $nukeurl";
$subject = "Spammer blocked at $sitename";
$from = "$adminmail";
$comment = "spammer";
$sendSpammerTo = "about:blank";
$txt = "Lottery Spammer";

// end edit

 $d = time();

foreach($lottmail as $banmail){
if (($badcookie) OR (eregi($banmail, $email)) OR (eregi($banmail, $thename))) {

setcookie("Lotto", $comment, time()+60*60*24*365);
 
if(file_exists("admin/modules/sentinel.php")){   
$db->sql_query("insert into ".$prefix."_nsnst_ips values ('$ip', '', '$username', '', '$d', '$txt', '', '$ip', '', '', '', '', '', '0')");
}

mail($adminmail, $subject, $message, "From: $from\nX-Mailer: PHP/" . phpversion());
die("<META HTTP-EQUIV=\"refresh\" content=\"1;URL=$sendSpammerTo\">");
}
}
}
//
// end lottery blocker
//


You can use a similar process to scan the subject and body of the emails that are sent from your site. I imagine that if the "lottery spammer" is unable to use any form of the word lottery, then the site is deemed useless to him/her because that is the basis of the scam.

_________________
- Prophet
Get the Last Visit module (and others modules I designed) from my website! FREE! http://jasonlau.biz

http://DotCom.Name
Find all posts by ProphetView user's profileSend private messageVisit poster's websiteAIM Address
Mommy_Deanne
Nuke Soldier
Nuke Soldier


Joined: Oct 21, 2004
Posts: 19

Location: Arizona

PostPosted: Wed Dec 01, 2004 12:05 pm Reply with quoteBack to top

I have a loooonnng list of all the names they used on our account. He came back today under LOTTERY_MANAGER. HA HA. Our webmail has been disabled for now. He now finds our site useless to his spamming pleasures. Finally got the site UNSUSPENDED yesterday. If I could use a colorful choice of words in here I would. You'll just have to visit my site to see them! LOL
Find all posts by Mommy_DeanneView user's profileSend private messageVisit poster's website
Ruger
Nuke Cadet
Nuke Cadet


Joined: May 23, 2004
Posts: 4


PostPosted: Wed Dec 01, 2004 12:32 pm Reply with quoteBack to top

I had this problem bigtime. Over 3500 spams sent. Heres a list of the culprits and their ip's:

manager
thefatonepromo
simon
192.116.153.73

paulzim
freedomlotto
80.179.242.254

lottery
lotto
sa-lottery
212.199.108.234

amoke_j
uklotto77
216.139.181.214

woolui
edewor2
wangqin44
wangqin
1960
216.139.176.61

ahmed
liu_peijin
cheung
edewor
leucheng
ponfa
216.139.176.60

cheungpuii
81.199.83.69

a_mohmd
213.255.194.13



Some also spammed with the subject: business suggestion which is about a Mr. Simon Wong
Find all posts by RugerView user's profileSend private messageVisit poster's website
BBrDawg
Corporal
Corporal


Joined: Nov 05, 2003
Posts: 57


PostPosted: Fri Dec 03, 2004 7:45 am Reply with quoteBack to top

Prophet,
Just a Note to SAY THANK YOU for getting Lota Spammer piece of CRAP off my site!!!

Anyone,
IS there a way to look at the CRAP this guy send out by my site?

Dawg

_________________
SHUT UP and FISH!
Find all posts by BBrDawgView user's profileSend private message
Fiona
Private
Private


Joined: Nov 10, 2004
Posts: 48


PostPosted: Sat Dec 04, 2004 2:30 pm Reply with quoteBack to top

Sugrat wrote:
If I don't have webmail enabled, why did this person keep making new accounts after I deleted the old ones? it wasn't giving him anything??

Can anyone answer this?

I don't have webmail enabled either, but this low-life has been to my site and created an account too. Why?


UndergroundHydro wrote:
Staines is not too far from me, might poke my head in, if there's anyone there, they gonna be loosing all there windows shortly.

Did you have any luck tracking the low-life down? He/she needs to be identified and sorted out properly. Any luck with this?
Find all posts by FionaView user's profileSend private message
UndergroundHydro
Lieutenant
Lieutenant


Joined: Nov 08, 2004
Posts: 199

Location: London, England

PostPosted: Sat Dec 04, 2004 3:16 pm Reply with quoteBack to top

not as yet, but will do when i'm over that side.

I suspect it will be a empty shop.

Have had nothing back from British Telecom yet regarding the number being redirected (probably to a premium rate number).

Will post if I do.

_________________
[url=http://grooveclubradio.com]
Image
[/url]
Find all posts by UndergroundHydroView user's profileSend private messageVisit poster's website
c0c0c0
Nuke Soldier
Nuke Soldier


Joined: Oct 12, 2003
Posts: 28

Location: Clearwater

PostPosted: Tue Dec 07, 2004 12:21 am Reply with quoteBack to top

If you do not use the webmail feature, just modify the webmail module folder or delete it all together. s/he will go away after finding out it no longer exists. From looking at the logs through IP tracking they will usually check to see if webmail exists (It doesn't matter if you have it active or not) and then create the account then log in and attempt to use it.

After I renamed the webmail folder to something like lkdsfjsakofj I have had this lotto guy come back once and that was a few days ago. Before that this asshat was creating as many as 3 accounts a day.
Find all posts by c0c0c0View user's profileSend private messageVisit poster's websiteAIM AddressYahoo Messenger
Display posts from previous:      
Post new topic  Reply to topicprinter-friendly view
View previous topic Log in to check your private messages View next topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



Powered by phpBB © 2001, 2005 phpBB Group

Ported by Nuke Cops © 2003 www.nukecops.com
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::
Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 1.783 Seconds - 492 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::