Virus sent to me

Using this sites contact function.

I HATE people who do this.


This is a message from mjiller3290469 at Ball-Pythons.net Forums ( http://www.ball-pythons.net/forums/index.php ). The Ball-Pythons.net Forums owners cannot accept any responsibility for the contents of the email.To email mjiller3290469, you can use this online form:http://www.ball-pythons.net/forums/sendmessage.php?do=mailmember&userid=4350OR, by email:mailto:[

Steve,have you pm Judy directly about this? I would if not.So they contacted you thru a email directly? I would disable that option then so it never happens again.How did you recognize it had a virus attatched? This would help others recognize it also.

When I opened the email, Macafee went nuts.

I tried to PM her and kept getting a message that I didn't specify the user or type more than 6 characters in the note.
I'll try again.

Quote:

---

Originally Posted by SPJ

When I opened the email, Macafee went nuts.

I tried to PM her and kept getting a message that I didn't specify the user or type more than 6 characters in the note.
I'll try again.

---

Wow! Yea you have to write so much or it will not send your pm :)

what was the virus name exactly? It could have been a false positive or a spoof email that didn't come from the forum at all. When someone uses this forum's email function there is no option to upload a file that a virus could be wrapped in. Howerver there is spyware and malware that can record things you see or simply make up official looking emails that contain malicious programs. Is this even a user you recognize? Have you done a search to see if its even a real user? Don't jump to conclusions just yet ;)

yes please don't!

Let me check the logs.

You should never post your email adress anywhere as above either - I'll edit that out for you.

We have the sites contact function set to secure - so that when you use it the member's email adress is not displayed.

My bad above the email adress displayed was not yours.

I will turn off this feature until I am satisfied everything is as it ought to be.

Quote:

---

Originally Posted by Smulkin

I will turn off this feature until I am satisfied everything is as it ought to be.

---

Thank you for looking out for us :cool: :rockon:

Just as an FYI I was just made aware that one of the sister sites to a forum I run is having some issues. A user reported virus notification and automatic dowloading of file(s) via what appears to be a malicious PHP script. The site is now 404! Hope there are not any cracks in security here Smulkin!

Quote:

---

Originally Posted by TekWarren

Just as an FYI I was just made aware that one of the sister sites to a forum I run is having some issues. A user reported virus notification and automatic dowloading of file(s) via what appears to be a malicious PHP script. The site is now 404! Hope there are not any cracks in security here Smulkin!

---

Nope everything up to date.

We turned on image verification (where you have to repeeat the distorted characters displayed) as part of the registration process a while back.

Recently we noticed some registrations that had some spammy spammy posts which some of you may well have seen. We moved all these users to a banned group and blacklisted the email domains they came from and blocked several IP's. But they were just making spammy posts.

Reading some threads in the software support forum some of the devs said that lately in the ongoing spread of spam people were being paid by spam clearinghouses to register on forums that had the image verification on and then selling the usernames and passwords to these houses.

That could only result in these spam posts that occured recently.


HTML is disabled here for security reasons because of the potential for malicious code.

Even when you use the "contact" function to get in touch with another user you jusr get a message composing window same as posting a thread - no way to attach any kind of virus payload.

Though folks from time to time complained of having to use the gallery instead of just uploading attachments disabling attachments was decided on for the same reasons - security as much if not more for the users than for the site itself.

All the latest revisions and patches for security are actively installed here.


We value your membership here and take all precautions to protect folks from any sorts of potential issues from SPAM to embedded code.





All that being said . . longwindedly . . I'm continuing to check this out.

Quote:

---

Originally Posted by TekWarren

what was the virus name exactly? It could have been a false positive or a spoof email that didn't come from the forum at all. When someone uses this forum's email function there is no option to upload a file that a virus could be wrapped in. Howerver there is spyware and malware that can record things you see or simply make up official looking emails that contain malicious programs. Is this even a user you recognize? Have you done a search to see if its even a real user? Don't jump to conclusions just yet ;)

---

I don't remember the name. The antivirus said trojan found and gave the name and a link to read up on it. I just got rid of it and blocked the email so they can't send anymore.

If anyone ever receives a questionable email appearing to originate from or involve the site please PM me immediately so I can provide you an email address and instructions to forward it to me so I can take a look at the headers and take any necessary action.

good show Smulkin...keeping up on updates is key. I just implemented some patches on a forum yesterday myself. I use the image verification by default and many spam bots are even getting around this...or humans who then unleash the bots but we've got it under control now. I've yet to have a successful "attack" on my systems...like Ft Knox baby!