Site announcements, news, stuff you should read. Start here.
Moderators: NeilBlanchard, Ralf Hutter, sthayashi, Lawrence Lee
-
MikeC
- Site Admin
- Posts: 12285
- Joined: Sun Aug 11, 2002 3:26 pm
- Location: Vancouver, BC, Canada
-
Contact:
Post
by MikeC » Sat Mar 06, 2010 7:31 am
It's come to light over the past 24 hrs that a forum user registered as "MichealUllman" has been sending private messages that contain a Trojan virus to other SPCR board members. This account has now been killed, but at the moment, there's nothing to stop others from doing the same. The PM system may be deactivated temporarily while we deal with this issue.
If anyone should receive any PM or email similar to the sample shown below,
do not click on any links, and please post the relevant info in the Official Anti-Spam thread:
viewtopic.php?t=54326 Forum mods/admin subscribe to this thread.
Sample of Spam Msg:
-------------------------------
Dear, [forum member]!
Spam sending from your computer was detected.
We highly recommend you to check your computer and perform online virus check at our site immediately: http: / / securitytool-2010.net/online-scanner/trxman
If you do not pass this test we will have to delete your account and forward a complaint to your ISP with attached log file (your IP address, etc.).
----------------------------------------------------
Forum Administration
http://www.silentpcreview.com
-
lm
- Friend of SPCR
- Posts: 1251
- Joined: Wed Dec 17, 2003 6:14 am
- Location: Finland
Post
by lm » Sat Mar 06, 2010 1:59 pm
MikeC wrote:...private messages that contain a Trojan virus...
Did the messages themselves contain a virus, or was it just a link to a malicious site?
-
NeilBlanchard
- Moderator
- Posts: 7681
- Joined: Mon Dec 09, 2002 7:11 pm
- Location: Maynard, MA, Eaarth
-
Contact:
Post
by NeilBlanchard » Sat Mar 06, 2010 2:37 pm
Apparently, there was a link to a site that then loaded the malware.
(I'm very glad I use a Mac...)
-
rpsgc
- Friend of SPCR
- Posts: 1630
- Joined: Tue Oct 05, 2004 1:59 am
- Location: Portugal
Post
by rpsgc » Sat Mar 06, 2010 3:20 pm
NeilBlanchard wrote:Apparently, there was a link to a site that then loaded the malware.
(I'm very glad I use a Mac...)
Or... Just don't use IE?
-
jfweaver
- Posts: 30
- Joined: Mon Jan 17, 2005 8:05 pm
-
Contact:
Post
by jfweaver » Sun Mar 07, 2010 5:56 am
Mike,
I had a problem with spambots on my forum. I was getting 10-15 new bots a day. The problem is the spam bot programs now are automated, they signup, follow the activation email links, and handle CAPTCHAs via workers in China/India. The solution I found that is still working was the PHPBB kittenauth plugin. In the past ~2 years I've had a few (2-3) non-automated spammers register. By forcing them to use a human to do the registration it forces them to find low hanging fruit elsewhere.
-
xan_user
- *Lifetime Patron*
- Posts: 2269
- Joined: Sun May 21, 2006 9:09 am
- Location: Northern California.
Post
by xan_user » Sun Mar 07, 2010 8:26 am
How about just banning links form appearing in PM's? (or at least make them nonclickable.)
-
qviri
- Posts: 2465
- Joined: Tue May 24, 2005 8:22 pm
- Location: Berlin
-
Contact:
Post
by qviri » Sun Mar 07, 2010 2:25 pm
rpsgc wrote:NeilBlanchard wrote:(I'm very glad I use a Mac...)
Or... Just don't use IE?
I'd suggest using a brain, personally, but...
-
xan_user
- *Lifetime Patron*
- Posts: 2269
- Joined: Sun May 21, 2006 9:09 am
- Location: Northern California.
Post
by xan_user » Sun Mar 07, 2010 7:00 pm
NeilBlanchard wrote:
(I'm very glad I use a Mac...)
or at least very glad that macs don't hold as large of a market share and thus not a target like M$...
-
kogi
- Posts: 155
- Joined: Tue Apr 08, 2003 2:02 pm
- Location: sydney.au
Post
by kogi » Wed Mar 24, 2010 4:56 am
Got one of those from a different user
VaughnWhite
-
NeilBlanchard
- Moderator
- Posts: 7681
- Joined: Mon Dec 09, 2002 7:11 pm
- Location: Maynard, MA, Eaarth
-
Contact:
Post
by NeilBlanchard » Wed Mar 24, 2010 5:10 am
Thanks for your patience on this (again!)! Until the Admin can find the Spammer's IP, I cannot ban them.
Do not click on the link in these PM's!
-
frenchie
- Friend of SPCR
- Posts: 1346
- Joined: Tue Jul 08, 2008 4:53 am
- Location: CT
Post
by frenchie » Wed Mar 24, 2010 5:14 am
How about you force a certain number of posts before a PM can be sent, link it's done with the links ?
(Don't know if it's feasable)
-
Monkeh16
- Posts: 507
- Joined: Sun May 04, 2008 2:57 pm
- Location: England
Post
by Monkeh16 » Wed Mar 24, 2010 5:41 am
NeilBlanchard wrote:Thanks for your patience on this (again!)! Until the Admin can find the Spammer's IP, I cannot ban them.
Why is getting the IP taking so long?
-
NeilBlanchard
- Moderator
- Posts: 7681
- Joined: Mon Dec 09, 2002 7:11 pm
- Location: Maynard, MA, Eaarth
-
Contact:
Post
by NeilBlanchard » Wed Mar 24, 2010 1:31 pm
The user was banned earlier today.