I regularly receive a Trojan Horse virus when I access this site.
http://bb.bbboy.net/support-viewthread?forum=1&thread=5070
Powered By BbBoard - http://bb.bbboy.net

fionah
11:39:36 Fri
Apr 2 2004
I regularly receive a Trojan Horse virus when I access this site.
Why?

BbAdmin
23:37:26 Sat
Apr 3 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Hi fionah,

I came by the board and didn't get anything coming up in my firewall. Is this just on the board's main page or a particular thread or something? :smile:

fionah
15:25:08 Fri
Apr 9 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
When I access our site, I sometimes receive a Trojan horse virus -" Achtung" something. It's always the same virus, and i only receive it when I open our Bbboy site.

anne123456
01:46:05 Sat
Apr 10 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
A user on my board has recently complained about getting a trojan that is blocked by her anti-virus software on my board. I don't think it's anything I've done-is it related to the ads?
Anne

BbAdmin
02:55:29 Sat
Apr 10 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
It is absolutely NOT related to any ads on our netswork. There is a lot of people out there trying to send those to anyone who isn't protected so they can compromise their computer. You could get 'scanned' and then have one of those trojan attempts sent to you even if you are NOT on any websites. It is people out there trying to find victims to take advantage of. It is not coming from us. :smile:

fionah
12:31:13 Sat
Apr 10 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
It only emerges when I access this site. Norton Anti-Virus always catches it (I hope). I googled the "Achtung" virus, and all listed sites were in German.

debbey
16:49:50 Sat
Apr 10 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Yes!! I am lodging a complaint!! too...

Are you aware bb.bbboy.net is sending out a deadly virus..??

I am receiving about 10 emails a day from members of this whole message board system.. Somehow, the worm has planted itself in you your main email address bank..

My norton antivirus program is catching them all.. but Geez!

Please tell me you are onto this!! and trying to clear to problem..

Cheers!

debbey
18:49:36 Sat
Apr 10 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
ok.... here is the message I receive... from Norton..

Norton AntiVirus removed the attachment: message.scr.
The W32.Netsky.P@mm threat was detected in the attachment.

This is the virus your data base is sending out.. :help:

Cheers!

Momsheri
21:20:38 Sat
Apr 10 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
My husband is telling me continually that I am getting them from the Bboy sites too.
Just passing on that information. Are you sure your ads are not producing them somehow?

Nickdisk
21:44:21 Sat
Apr 10 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Quote:

I am receiving about 10 emails a day from members of this whole message board system.. Somehow, the worm has planted itself in you your main email address bank..


Do the emails come from an bbboy.net email address, or from members actual email addresses? If they come from members email addresses, are they members of your board? :smile:

Almost all of the new viruses...like Klez, Sobig, MyDoom, etc... use email spoofing to disguise where they are being sent from. The purpose of this is to help trick you into opening the email as it will appear to be coming from a trusted website or friend. :smile:

debbey
22:04:10 Sat
Apr 10 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
from members actual email addresses.. with an attachment.. it's the attachment Norton keeps deleting.. per my previous post.. They have various reference lines.. Itnerary... or For Your Info... they are not spam.. they are coming from actual email addresses..

I will post the link to the virus description at Norton.. you can read about it

http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.p@mm.html

I just received another one:

-----Original Message-----
From: kimmi_vy@hotmail.com [mailto:kimmi_vy@hotmail.com]
Sent: April 10, 2004 5:07 PM
To: debbey@canadianstarsrock.ca
Subject: Re: Secure SMTP Message



ESMTP [Secure Mail System #334]: Secure message is attached.



Cheers! :thankyou:


debbey
22:08:53 Sat
Apr 10 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
From Norton:

W32.Netsky.P@mm
Discovered on: March 21, 2004
Last Updated on: March 31, 2004 11:58:01 AM







As of March 22, 2004, due to an increase in submission rate, Symantec Security Response has upgraded W32.Netsky.P@mm (also known as W32.Netsky.Q@mm) to a Category 3 level threat from a Category 2 threat.

W32.Netsky.P@mm is a mass-mailing worm that uses its own SMTP engine to send itself to the email addresses it finds when scanning the hard drives and mapped drives. The worm also tries to spread through various file-sharing programs by copying itself into various shared folders.

The From line of the email is spoofed, and its Subject line and message body of the email vary. The attachment name varies with the .exe, .pif, .scr, or .zip file extension.

This worm also uses the Incorrect MIME Header Can Cause IE to Execute E-mail Attachment vulnerability to cause unpatched systems to auto-execute the worm when reading or previewing an infected message.

This threat is compressed with FSG.




--------------------------------------------------------------------------------
Note:
Symantec Consumer products that support Worm Blocking functionality automatically detect this threat.
The worm's executable has a static MD5 hash value of 0x0A9FFA57D65083C92E0D3D69B00F2F0D.
Rapid release definitions dated March 21, 2004 or March 22, 2004 may detect this threat as W32.Netsky.Q@mm.
Symantec Security Response has developed a removal tool to clean the infections of W32.Netsky.P@mm.

--------------------------------------------------------------------------------


Also Known As: W32.Netsky.Q@mm, W32/Netsky.p@MM [McAfee], Win32.Netsky.P [Computer Associates], NetSky.P [F-Secure], W32/Netsky.P.worm [Panda], W32/Netsky-P [Sophos], WORM_NETSKY.P [Trend]

Type: Worm
Infection Length: 29,568 bytes



Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Systems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x
CVE References: CVE-2001-0154




Wild:

Number of infections: 50 - 999
Number of sites: More than 10
Geographical distribution: Medium
Threat containment: Easy
Removal: Moderate
Threat Metrics


Wild:
High
Damage:
Medium
Distribution:
High



Damage

Payload Trigger: n/a
Payload: n/a
Large scale e-mailing: Sends itself to the email addresses retrieved from the file system.
Deletes files: n/a
Modifies files: n/a
Degrades performance: n/a
Causes system instability: n/a
Releases confidential info: n/a
Compromises security settings: n/a
Distribution

Subject of email: Varies
Name of attachment: Varies with the .exe, .pif, .scr, or .zip file extension.
Size of attachment: Varies
Time stamp of attachment: n/a
Ports: n/a
Shared drives: n/a
Target of infection: n/a





Pamster
23:15:31 Sat
Apr 10 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
I will ask BbBoy to look into this but I am pretty sure that there is NO way anything like that is coming from us...

Emerald
22:15:42 Sun
Apr 11 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Hi, I recently was told by a member of of my board that I had the same trojan virus that everyone else seems to have. Is this dangerous? Will it harm my computer? I've never had these kind of problems before and I am kinda freaked out! What should I do??

Jollyfarmer
22:17:26 Mon
Apr 12 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Achtung is different then the email problems others have stated. Achtung is a keylogger trojan. Keyloggers typically need to be in physically installed onto the computer that is infected. My guess would be that you already have the achtung.exe ON your computer, since it is a trojan that tries to log information such as passwords and the likes, Norton probably throws up the warning when you are the board because you are logging in triggering the trojan.... the board is not infected, your computer is.

As for the emails, netsky worm would not be embedded in bbboy's email servers anyway. I am quite sure they are guarded from such things as any major buisness/corporation is. I turn away, on average, at least 20 emails a day of the same virus with their attachments at my office email. The same goes for anyone else in this building that frequently receives emails in from infected people. Our company is not infected, it is those who've come infected with this special worm emailing us who are. As Nickdisc stated, it acts as a ghost, trying to make you think it is something legitamte from someone you know or has contacted you before. Again using the company I work for as an example, the virus sends an email out simular to what ours actually is. Example: ours would be something like administrator@thenet.com, we have found the virus ghosts that as theadministration@thenet.com which is in no way affiliated with anything of our company NOR sent out by our systems. Long rambling short, the chances you are receiving any of this stuff from bboy is extremely weak.


debbey
15:52:46 Tue
Apr 13 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Thank you for answering.. :yourock:

Ok.. I guess we just tolerate receiving the emails? and make sure our Norton is up to date? I guess I will contact my host server.. and ask if there is a way to have them deleted before they hit my email.. and how can I change my email address with BBBoy? is there a way of taking my addy your server..?

Thank you again

Debbey
from: Rock n Rolla

Froggy
16:05:54 Tue
Apr 13 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
have you tried running virus scans on your computer? It will find the virus, isolate it and take care of it for you if you have one.
To change your email with BbBoards just email support@bbboy.net with your request and your old address, new address, and password to verify it is really you.

fionah
10:38:24 Wed
Apr 14 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Another member of our board posted that she is receiving a virus when she accesses this site, too. And it only happens when we access this site. I do research on my home computer, and click on hundreds of links every week. The only time I receive a Norton virus warning is when I check my board, here.

anne123456
23:35:28 Tue
Apr 27 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Hi,
Sorry to bring this up again, but I'm getting complaint after complaint about viruses and 'out of control' popups on our board. This is just in the last month or so. I don't know what to tell my users.
Anne

anne123456
22:32:01 Wed
Apr 28 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
More and more complaints from my users. Spyware, mostly. My windows media player was opened by an ad when I went to my board today and corrupted. Others are being having their home pages set to unwanted sites.

Help!

Anne

FilKiFan
23:02:35 Wed
Apr 28 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Quote: anne123456 at 22:32:01 Wed Apr 28 2004

More and more complaints from my users. Spyware, mostly. My windows media player was opened by an ad when I went to my board today and corrupted. Others are being having their home pages set to unwanted sites.

Help!

Anne


leeme guess, http://www.blazefind.com/ ?

it's spyware.

install ad-aware or spybot: s & d. you can get ad-aware at http://www.lavasoft.de/ and spybot at http://www.safer-networking.org/ . i personally recommend installing them. my sister had one piece of spyware installed that did this. once it was removed, it never happened again.

jus2cusmile
23:16:32 Wed
Apr 28 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Yes, its Spyware! You must get Ad-Aware! Its the best program out there for stopping spyware! Its easy to install and very easy to use!
I've had a big problem with spyware on my comp and my bro, who KNOWS comps, said Ad-aware is the best program to use. Since I've put it in my comp, I regularly do scans and it always finds these darn spyware in my comp! They find MANY ways in all the time! You just scan, then fix. :smile:
You can get the free ad-aware download at cnet.com. Look up ad-aware.

Good luck!
*hugs*
Cathy

anne123456
23:22:03 Wed
Apr 28 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Yes, I run adaware and spybot everyday now and that fixes the problems. I tell my users to do this also, but this is getting out of hand in the last month. I didn't really believe it was coming from our board, but we've never had a complaint about this before and in the last month, I've had a dozen people PM or post about it. I also saw the 'ad-splitting' mentioned in another thread when I was using a dialup connection last week. Instead of 2 pop-ups in 12 hours, each splits into 2 or 3. So the first five minutes at our board is spent combatting all the popup windows. It's actually better at a free board I sometimes frequent-there you just get the bbv2 ad and no 'messiness'.
Anne

FilKiFan
14:28:12 Thu
Apr 29 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
Quote: anne123456 at 23:22:03 Wed Apr 28 2004

Yes, I run adaware and spybot everyday now and that fixes the problems. I tell my users to do this also, but this is getting out of hand in the last month. I didn't really believe it was coming from our board, but we've never had a complaint about this before and in the last month, I've had a dozen people PM or post about it. I also saw the 'ad-splitting' mentioned in another thread when I was using a dialup connection last week. Instead of 2 pop-ups in 12 hours, each splits into 2 or 3. So the first five minutes at our board is spent combatting all the popup windows. It's actually better at a free board I sometimes frequent-there you just get the bbv2 ad and no 'messiness'.
Anne


actually, at a free board, you get other ads also. My paid board never has ads because we are on the variable plan, the fixed plan has popups. If you want to stop the ads, the variable plan works better. Better yet, if this annoys you, try something else.

/me hopes that doesn't get banned

SugarBearS
18:47:43 Thu
Apr 29 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
I can understand their frustrations and think that was uncalled for.. I have went to the sites they are speaking of and most of them I did get unusual pop-ups... I also visit another board quite often http://frost.bbboy.net/salemhearts and I recieve pop-ups there also.. Not on every page but on most and this add will sometimes freeze up and will not let you close it untill it has generated the other adds..

On my board I do not experience this at all and I have tons more page veiws there with myself doing work on it.. I spend most of my time there and not once has popped up.. So it is happening to different boards..

My point is, they have a right to complain and demand answers. They are paying for service and for you to come along and tell them if it annoys them to go on elsewhere, is just plain rude..

If this thread annoys you why don't you just stay out of it..

Thank you for understanding..

I_Surrender_All
17:43:29 Tue
May 4 2004
Re: I regularly receive a Trojan Horse virus when I access this site.
hummmmmmmmmm??

AngelWhispers
06:14:32 Tue
May 4 2004
Trojans.........
Every time I go to my board, I pick up a trojan as soon as I get there. In fact, I got 3 of them just a bit ago and they were detected and cleaned. I fear going to my board now. I have spyware and McAfee installed. If this keeps on, I will have to delete my board, which I truly do not want to do. Any ideas?

TIA
~AW

AngelWhispers
06:17:58 Tue
May 4 2004
Re: Trojans.........
In fact, if I decide to delete the board, someone will have to do it for me because of my picking up the trojan every time I go in there. Sorry - don't mean to be a pain, but this has me worried. Is it possible for someone to delete the board other than myself?

anne123456
10:48:19 Mon
May 10 2004
Re: Trojans.........
Got this complaint today from a user at my board:

Quote:

When I tried to log into the DB this morning, I got a pop up for Ringtone Universe and a security warning about installing software from "Moldconnecta". Careful reading reveals that this is a premium rate dialler and it was very reluctant to take no for an answer. Has anyone else seen this? Could someone take it up with bboy as a matter of urgency please.

I have just read the threads about this so I see lots of other folks are having similar problems and that bboy are not doing much about it. I'm in no doubt that this dialler trojan relates to the bboy popup advertising. I run zone alarm, adaware + norton anti virus and my internet cache was empty when I logged on to the db.





SugarBearS
13:46:19 Wed
May 19 2004
Re: Trojans.........
Did this problem go away for you guys?? I know it is still happening at the board I visit.. :sad:



I regularly receive a Trojan Horse virus when I access this site.
http://bb.bbboy.net/support-viewthread?forum=1&thread=5070
Powered By BbBoard - http://bb.bbboy.net