You may all heard about SUB7 virus.. well this is a sub7 protection ! i dont know if its usefull but i made it:P

on *:SOCKREAD:*sub*: { 
  if ($sockerr > 0) return 
  :nextread 
  sockread $r.set(protect,sub7-accept)
  if ($sockbr == 0) return 
  if (%sub7-temp) { echo -a $smb [Sub7 Protection] Data From SubSeven: %sub7-temp } 
  goto nextread 
} 
on *:SOCKLISTEN:sub7:{
  if ( $r.set(protect,sub7p) == On) { $w.set(protect,sub7-accept,sub7 $+ $ticks )
    sockaccept $r.set(protect,sub7-accept)
    sockwrite -n $r.set(protect,sub7-accept) -=APOEL=- Script by m|ke www.apoel.scriptmania.com
    echo -a $smb [Sub7 Protection] Sub7 SockConnect Attempt But Blocked $sock( $r.set(protect,sub7-accept) ).ip $+ .
    beep
    .timer 1 3 .sub7-close
} }
alias sub7-close sockclose *sub* | .timer 1 2 .socklisten sub7 27374 

on *:DISCONNECT:/sockclose sub*
on *:exit:/sockclose sub* | unset %temp.d*