Topic: Someone is Passing Viruses
started by: Uncle Ben
Posted by Uncle Ben on Apr. 30 2004,9:44 pm
On this sight. Both through private messaging and other means. I've had to "reset" many times and even reformat my hard drive.
Posted by Clovis on Apr. 30 2004,10:18 pm
Ben, any specifics? Attachments... file names... modus operandi? And have you contacted admin about the nom d'écran sending these problematic messages?
Posted by GEOKARJO on May 01 2004,10:19 am
I can not see how a virus can come from this site unless you open an attachment I have had this site not respond however I was able to navigate to another site with now problems.
Posted by Admin on May 01 2004,11:45 am
I've searched the entire server for malicious code, I used a packet sniffer to watch the traffic, I've checked the firewall logs and the server logs and there is no malicious code being sent from this server.
Posted by minnow fan on May 01 2004,12:12 pm
It isn't coming from this site but you probably are seeing more & more attacks. The company I work for has about 3000 employees, we have set records in the previous couple months for the number of viruses quarantined on our server. Last month we snagged over 5000. That's 5000 viruses, in 1 month.My suggestion, keep your anti-virus up to date & don't open up any odd looking emails (trust your instincts!). I would even go so far as to scan you PC regularly for spyware & trojan horses.
More info:
< Virus attacks on the rise >
Posted by repdan on May 01 2004,7:32 pm
I posted this message on the cycle crash on HWY 16 but I think it better fits here.Good news, or bad news depending on your views. I had a conversation with the admin. today and feel better about the safety of the site. Learned a few things that I think all posters should know. The moderators, not sure who they all are, have access to people's IP address. Not sure of all the ins and outs of that, but it seems that Truth uses or has used an IP address that is close to the one that I use when I'm in St. Paul, again, I don't know all the in's and out's but the address links back to the state's dept of admin on Cedar Ave in St. Paul. For those of you who don't know what that is, the Dept of Admin are the folks the run and guts of state government, they lease space, buy cars, negociate deals...for the rest of the state. The House of Reps, and other agencies must get their internet connections from them, (FYI..the mail address of the Dept of Admin is not even in my office building or the Capital)..anyway so one of the moderators links me to anyone who uses an IP that comes from the state's dept of Admin. I hate to break it to this group, but the #1 employer in the state, is the state. Not sure yet, but this could be any employee in the of the state who uses a state purchased internet connection. This may include the state employees here in Albert Lea when they work here in Albert Lea.
There is an outside chance, that someone here can as the Admin called it, spoof an IP address but that is not too likely. Another interesting side note, I was linked to 2 other names that I don't use, but not the one I have used in the past.
So at the end of the day, think what you want but also beware.
Minnow, I am going to try to lay off responding to you, but I think you are afraid to use your real name because you would be embarassed if people knew who you were.
I have no clue what the drug reference is but whatever. And I don't know if you are planning on sueing me for some reason or if you think I am going to sue you but I have no idea what that means either. So, best of luck.
Note to moderators, becareful when you assume.....because you can make an &#$& out of you and me!
Posted by cwolff on May 01 2004,9:32 pm
I have also received several viruses from outlook express recently, but my Norton Antivirus caught and I quarantined all of them. I then deleted them.
Posted by Liberal on May 03 2004,12:34 pm
You people might be getting hit by the new Sasser worm. If your system isn't patched it will be infected within ten minutes of being online.My firewall is showing the worm attacking my network at an interval from of 2-10 minutes which is nearly the speed of the blaster worm last year (and this worm is only a couple days old) so if your XP or Windows 2000 system hasn't been patched you are most likely already infected.
Information on removing the worm and patching your system can be found here.
< http://sophos.com/virusinfo/analyses/w32sassera.html >
Posted by Newbie on May 03 2004,1:17 pm
Thanks Liberal according to their program I'm clean.
Posted by LisaMarie on May 03 2004,1:40 pm
Ah yes, the Sasser worm. IT was working on my computer at work for two hours, first trying to download the patch (he couldn't even find the download on the site, but that's because he's a moron, he kept scrolling right past the link and then couldn't understand why he was going around in circles) and then waiting for the fix to check the computer. It then said I wasn't infected, but I was, I found it on my c-drive, but of course I can't just delete it, that would be too easy. 
Posted by Uncle Ben on May 03 2004,8:11 pm
Yep, right on Liberal. I had to insert my discs to reformat my hard drive to even use my computer and didn't activate my XP firewall before beginning my Mocrosoft service pack download. During download...probably after 10 minutes I got infected again during the download. It said I was shutting 60 seconds and began the countdown. I'm a believer now. Sometimes I wonder if the anti-virus software people create these for business purposes. I will stay updated from Microsoft from now on and keep my built in firewall in XP activated from now on.
Posted by p8ntball_junky on May 03 2004,11:41 pm
I know what you mean Uncle Ben. Just went out and got one of those Compaq comp's from Wally World and had problems with it. Thinking it was a problem with XP itself, I did a little tinkering.......notta. So I decided to call Compaq and they wanted to charge me 40 bucks. I told them no way and they decided to help me for free. So yea.....it's gettin` kind of scary on viruses and worms and who they can infect your system without you opening anything up.repdan-the whole spoofing thing....if people only knew what I know......the world would be a safer place.