Avast WEBforum
Other => General Topics => Topic started by: Lisandro on October 13, 2006, 03:39:04 AM
-
Well, new users are spamming here with IM.
Please, Kubecj, can't you add a policy to the forum blocking the users with less then 10 posts to send any IM?
It's ridiculous...
Besides this, there is this thread: http://forum.avast.com/index.php?topic=24169.0
If you have some time check out this COOL pic:
Also, check out the following website I came across:
It will knock your socks off!
Next, the below website is thrilling!!!
Finally, the following website is the absolute BOMB!!!
ENJOY!!!
MY PIC:
The two spammers are called:
EdwardN: http://forum.avast.com/index.php?action=profile;u=25369
RobertT: http://forum.avast.com/index.php?action=profile;u=25365
-
The two spammers are called: beatme101
EdwardN: http://forum.avast.com/index.php?action=profile;u=25369
RobertT: http://forum.avast.com/index.php?action=profile;u=25365
Wait, why are you naming me? I come here so rarely that you instantly develop a grudge against me? Aren't you supposed to be a respected member of this forum?
-
EdwardN got me too. I agree with Tech that we need a rule to stop PMs for members with less than 10 or so posts
Edit: Beatme101 Tech is a VERY respected member of this forum Im sure he had a good reason for including your name (mabye it was by mistake?)
-
I found this thread now: http://forum.avast.com/index.php?topic=24172.0;topicseen
Beatme, you've posted before I could edit the post. Sorry.
-
It's worse than that.
Avast User Registration Data Base Compromise?
http://forum.avast.com/index.php?PHPSESSID=926db416856c301cb87f2b9b966d8e29&topic=24176.0
-
Me to here's the header:
Received: from sm00.avast.com ([70.84.157.228])
by alnrmxc19.comcast.net (alnrmxc19) with ESMTP
id <20061013012139a1900a20iee>; Fri, 13 Oct 2006 01:21:39 +0000
X-Originating-IP: [70.84.157.228]
Message-Id: <200610130121.k9D1Ld8s020963@sm00.avast.com>
Subject: New Personal Message: URGENT MESSAGE FROM ADMIN!!!
From: "avast!WEBforum" <webadmin@asw.cz>
Date: Fri, 13 Oct 2006 01:16:53 +0000
Content-Type: text/plain; charset=ISO-8859-1
You have just been sent a personal message by EdwardN on avast!WEBforum.
What's strange is that it was sent to an e-mail address that I don't use on the forum.
The content is the same.
-
If my memory serves me right, it wasn't that long ago that the question was raised
about updating this forum ??? ??? ??? :'(
-
Ah, alrighty then. Guess I got a little worked up, this wouldn't have been the first time (although first time here) that I've been blamed for PM spamming on a forum.
-
Me to here's the header:
Received: from sm00.avast.com ([70.84.157.228])
by alnrmxc19.comcast.net (alnrmxc19) with ESMTP
id <20061013012139a1900a20iee>; Fri, 13 Oct 2006 01:21:39 +0000
X-Originating-IP: [70.84.157.228]
Message-Id: <200610130121.k9D1Ld8s020963@sm00.avast.com>
Subject: New Personal Message: URGENT MESSAGE FROM ADMIN!!!
From: "avast!WEBforum" <webadmin@asw.cz>
Date: Fri, 13 Oct 2006 01:16:53 +0000
Content-Type: text/plain; charset=ISO-8859-1
You have just been sent a personal message by EdwardN on avast!WEBforum.
What's strange is that it was sent to an e-mail address that I don't use on the forum.
The content is the same.
Did you use this address to register your copy of Avast?
-
Me to here's the header:
Received: from sm00.avast.com ([70.84.157.228])
by alnrmxc19.comcast.net (alnrmxc19) with ESMTP
id <20061013012139a1900a20iee>; Fri, 13 Oct 2006 01:21:39 +0000
X-Originating-IP: [70.84.157.228]
Message-Id: <200610130121.k9D1Ld8s020963@sm00.avast.com>
Subject: New Personal Message: URGENT MESSAGE FROM ADMIN!!!
From: "avast!WEBforum" <webadmin@asw.cz>
Date: Fri, 13 Oct 2006 01:16:53 +0000
Content-Type: text/plain; charset=ISO-8859-1
You have just been sent a personal message by EdwardN on avast!WEBforum.
What's strange is that it was sent to an e-mail address that I don't use on the forum.
The content is the same.
Did you use this address to register your copy of Avast?
Sure did.
-
I just got spammed by this asshole, too. Makes me feel real confident about this product. Perhaps it's time to switch back to AVG.
-
Sure did.
This points to a compromise of a user data base stored on the forum server.
Why is my information from registering the product stored in a freaking PHPbb data base?
Did I mention I'm pissed?
-
Now I just received a notification to the current email that I use on the forum
about a PM entitled An Urgent Message from an Administrator
Same message, same sender.
-
I just got spammed by this asshole, too. Makes me feel real confident about this product. Perhaps it's time to switch back to AVG.
Well, I can't believe that the first, single, spam email you've received is enough to change the antivirus you use.
Well, if you think so, maybe you have to quit for any email account. I agree that we all hate spam, but changing the antivirus because of this :o
If we ran away from problems they'll never be solved.
-
Hi everybody,
I also received this message with exactly the same text and author EdwardN. This surprised me because I did not participate to this forum since a few months.
Finding a solution would be great...
Regards.
-
***
Just as the rest of you have posted, I have also recieved the PM and the email that includes the same links.
While I hate censoring others, I do think that 10 (or maybe even 20) posts should be required before a PM is allowed by a "lama" on this forum. This would help reduce the amount of "drive-by" spammers. No one here at this forum likes spam. We all hate it. >:(
Those of you who are irate enough to want to change av, you should realize this could be possible at almost any other forum. So, what is the logic behind changing av programs based on one incident on the forum? ??? ::)
***
-
So, what is the logic behind changing av programs based on one incident on the forum? ??? ::)
Umm... That a security product is inadequate in it's own forum security?? Doesn't exactly inspire confidence...
-
Umm... That a security product is inadequate in it's own forum security?? Doesn't exactly inspire confidence...
So, why do you trust MS? Or why do you bought a product from HP?
Have they never get into hot waters?
I'm suspecting that all this bad press on avast forum are comming to jealousy people from other products :P :P :P
-
I received the same today. >:(
What gives?!?
-
Yea, got that here to, from the EdwardN dude..and the same from another name...beware, they obviouslly have multiple accounts. Morons. -.- I can't remember but i'd assume there's an option to not get sent forums stuff/replies sent to your email.
-
same junk PMed to me. Hate this happen
-
I got it just today. But since I am one of those nasty less than 10/20/05 posts "llamas" then who cares.
Fine with me. There are plenty of other products out there, some free and some less costly.
So go ahead and dump on those of us who NEVER spams but seldom posts. Trust me when I say, that that will get around very fast.
-
So, what is the logic behind changing av programs based on one incident on the forum? ??? ::)
Umm... That a security product is inadequate in it's own forum security?? Doesn't exactly inspire confidence...
Avast did not program the forum software that it uses here.
-
I just recieved 3 messages from EdwardN which were real bad, PORN pictures. I don't think I will open any more messages.
-
Avast did not program the forum software that it uses here.
If someone does not program it does not avoid it to configure... at least if it was a good forum software.
So go ahead and dump on those of us who NEVER spams but seldom posts. Trust me when I say, that that will get around very fast.
We're not dumping anybody. We respect newbies. We just want that newbies learn the forum rules and forum behavior before sending IM.
Well, at least, I never intended to be rude with newbies.
-
Well you were. People with a lick of sense should know to use their manners. First time I ever went to a forum I did. And I would assume the nice ones do. But you didn't separate the nice ones from the trolls.
What ever, life is too short to care.
Avast did not program the forum software that it uses here.
If someone does not program it does not avoid it to configure... at least if it was a good forum software.
So go ahead and dump on those of us who NEVER spams but seldom posts. Trust me when I say, that that will get around very fast.
We're not dumping anybody. We respect newbies. We just want that newbies learn the forum rules and forum behavior before sending IM.
Well, at least, I never intended to be rude with newbies.
-
But you didn't separate the nice ones from the trolls.
Oh yeah... I try to separate. I'm an old forum member. Anybody knows my way of life and my way of being in this forum.
Sorry if I seem rude. It was not my intention. I've started this thread to complain about the spammer, not other users.
I don't start this theard to blame avast. The better we can do is complaining to them in order to solve this 8)
-
Well, I have been software developer since 14 years and used to install and configure windows based networks, and others before Windows exists... Avast is a software made to protect your PC from viruses, trojans, etc. It has nothing to do with this spam on this forum.
I use AVAST since many months for my personal use at home. It is a great product, and it is free !
Many other "famous" sites were affected by spam. MS, HP and others, were hacked before, and also banks, and even NASA. There will always be a danger on Internet because it is basically "opened" to all.
-
I got one too. That's why i alway's use a secondary e-mail
addy for registering to forum's.This is not the first time or forum
to have this happen. One other forum i belong to hade the same thing
happen with the spam kiddies! That's just life on the internet.
-
I too got the message from EdwardN. If the user database was found to be compromised please let us know in case there were others (unlike myself) who used a primary or important email account to register here.
I always use a throwaway public not important email account for all purchases, signups, newletters, forum posting etc. It is a rule peeps that is all over the net widely suggested. Now you see why doing so is a good idea.
Also, for shame those that are dumping on the good people that make GREAT software (free too - Avast Home) because they have a problem with people misusing or exploiting a forum. It has nothing to do with the programs they make, which are wonderful (AVG is grabage in my opinion) just because there was a PM spam attack on this message board. You must be new to the web to think this means they or their products suck. Boards and websites all the word over are constantly getting hacked attacked and spammed. And this is the first time such a thing happened here. yeesh! Blame the morons that did this and not the Avast! team.
I'm virus free for years because I run the free Avast! Home.
-
I got one too. That's why i alway's use a secondary e-mail
addy for registering to forum's. ...
Yup, I got one, too. And I also make a new email address for forums like this, so I can shut them down if it becomes a problem.
How about having a 'report IM to admins' button? It would be easier for people to report abuse than having to create a thread and hoping the right people will read it. Just a thought...
-
Many other "famous" sites were affected by spam. MS, HP and others, were hacked before, and also banks, and even NASA.
That's just life on the internet.
Also, for shame those that are dumping on the good people that make GREAT software (free too - Avast Home) because they have a problem with people misusing or exploiting a forum...
You must be new to the web to think this means they or their products suck. Boards and websites all the word over are constantly getting hacked attacked and spammed. And this is the first time such a thing happened here.
Thanks for sharing. We feel the same 8)
-
I got the PM too. They use the BCC multiple recipient feature.
The registration database hackers probably thought it was funny to message the forum members too.
-
Can I change a setting in my preferences to stop people from being able to email me?
-
I must be lucky I missed RobertT's rubbish but EdwardN caught me. Man what a load of rubbish.
These guys probably the same DH's need to have some action taken against them??
-
Can I change a setting in my preferences to stop people from being able to email me?
Budd, they 'stolen' the email database, they're not 'sending' you a mail, they're spamming all avast emails database.
Hidden the email at the profile options should be enough to nobody else discover your email and spams you... but they're stolen, cracked, hacked... the database. :'(
-
NOP, mine is and I got the PM too! Had a picture of a Asian guy or kid with a O====> bigger than his arm LOL! Ohh well! Can't nobody do anything against these morons?!?!
-
I did not go through the entire thread because some of the responses on the 1st page did not make any common sense. People spam on a lot of boards. That has nothing to do with the forum needing updating or the quality of the Avast product.
EdwardN got me too but besides the text was also a pornographic picture.
Can I change a setting in my preferences to stop people from being able to email me?
I just did. Click on "Profile" at the top of the page... under "Modify Profile" on the left click "Personal Message Options".
Uncheck "Notify by email every time you receive a personal message" and click "change profile". That will stop it.
-
I opened the email but did not click on any of the links. I somehow knew right away what was going on and just deleted it.
This can happen to anybody, on any message board. In fact, I am more worried about using Internet Explorer and all its holes (use it only when I have to).
If something looks funny or you don't recognize it, just delete!
It has crossed my mind too that it is maybe someone from another anti-spyware company. Trying to make AVAST look bad.
The AVAST people work hard to keep their anti-spyware up-to-date. Perhaps someone else got very jealous. :( :(
-
Unfortunately, someone posted the picture in the forum in another thread.
I haven't opened any of the links but, wound up seeing the junk anyway.
Spam I expect. Someone actually posting the XXXXX picture in the forum, I did not.
It's been reported and it's up to the Mod's to take the appropriate actions.
-
I as well received a message from "EdwardN on avast!WEBforum."
It was obscene, and also seemed to cause popups to continue in these forums displaying that message, even after I'd read it, and it was no longer new.
I agree: if the user database is compromised, please inform us.
I too got the message from EdwardN. If the user database was found to be compromised please let us know in case there were others (unlike myself) who used a primary or important email account to register here.
-
Umm... That a security product is inadequate in it's own forum security?? Doesn't exactly inspire confidence...
So, why do you trust MS? Or why do you bought a product from HP?
Have they never get into hot waters?
I'm suspecting that all this bad press on avast forum are comming to jealousy people from other products :P :P :P
No, it's coming from people like me who expect a security company to be, well, aware of security.
I see at the bottom of each page here that the forum is on v1.0.1 of the forum software.
The current release is v1.0.8 it is a critical update.
Which is something basic for administrators, especially where knowledge of security matters should be high...
-
I got one from: JessicaA with the same content. :-\
-
Although I am very pleased with avast! products I have to agree on that!
I see at the bottom of each page here that the forum is on v1.0.1 of the forum software.
The current release is v1.0.8 it is a critical update.
Which is something basic for administrators, especially where knowledge of security matters should be high...
-
I think I posted once or twice before here, I just recieved this, what's going on ???
-
I'm sorry about that it didn't show that way in my email and I just cut and pasted >:(
-
I see at the bottom of each page here that the forum is on v1.0.1 of the forum software.
The current release is v1.0.8 it is a critical update.
Well... this was discussed before... and security was not one of the 'necessary' changes...
Maybe they did not give speciall attention to the changes.
I can't find anything here: http://www.simplemachines.org/about/features.php (SMF 1.1 - forum software feature list).
What did really change from 1.0.1 to 1.0.8 ???
-
Site Admin, at least kill the reported accounts that are send this crap out.
I'd take a close look at the logs and at least do a temporary netblock ban on them until you get things straightened out.
-
I'm sorry about that it didn't show that way in my email and I just cut and pasted >:(
At least edit/modify your post.
-
I'm sorry about that it didn't show that way in my email and I just cut and pasted >:(
At least edit/modify your post.
Done didn't realize I could ::)
-
Done didn't realize I could ::)
You didn't do a thing... nothing's done like you mentioned... all links are still alive inside your reply here:
http://forum.avast.com/index.php?topic=24177.msg198646#msg198646
-
well this sucks...
-
Sucks big time, just got mine today. Too bad forum security isn't as good as their product.
-
Guys, even mods have to sleep.
So:
a) idiots been banned few minutes ago
b) NO DATABASE HAS BEEN COMPROMISED! They simply walked the list of the users and then sent the PMs to them. No direct mailing to stolen emails. Reg database is stored elsewhere, without direct internet access.
c) All newbies were denied from using the PMs.
-
i said this in another thread but i repeat here as it's more "active"
it could help set min number of posts before user get chance to use PM ... let say 25 ...
of course sending PM to moderators / admin can anyone with 1+ etc.
should help to prevent this to repeat more often
-
Nice to see security is upgraded. Got my spam 4h before it was upgraded :-\ but as Dwarden says to moderators and admins it shouldn't be that much.
-
Hi all,
If we had to upload all our pictures through imageshack or whatever filtered, we could stop this.
polonus
-
Below is the full spam MSG., including the INTERNET header. My email pgm flagged it as spam. I still scan all, so I knew the links were phony, and nailed it.
Since the Admin has resolved it, I post only as an addition. If anyone actually followed any of the links as the email requested they were foolish or stupid. Why would (In my Mind) the best FREE and PAY Anti-virus Company send out porn links, since reading the message should have been obvious as to it's intent.
Since I pasted this, you will note I disabled the PIC that would have been visable as a JPG image and only shows a question mark out of respect to others who may not be so amused.
NOTE: If you did follow any of them, you now have a "key logger" on your system, as my own safe investigation revealed. So expect some more fun from the links you may have accessed.
John Galt
]"Fools, although they hear, are like the deaf: To them the adage applies that when present they are absent." ---Heraclitus
Received: from sm00.avast.com ([70.84.157.228])
by alnrmxc23.comcast.net (alnrmxc23) with ESMTP
id <20061013010700a23005mon8e>; Fri, 13 Oct 2006 01:07:00 +0000
X-Originating-IP: [70.84.157.228]
Received: from sm00.avast.com (sm00.avast.com [127.0.0.1])
by sm00.avast.com (8.12.11.20060308/8.12.11) with ESMTP id k9D16v0Q007370
for <john_galt@comcast.net>; Fri, 13 Oct 2006 03:06:57 +0200
Received: (from apache@localhost)
by sm00.avast.com (8.12.11.20060308/8.12.11/Submit) id k9D16vj0007368;
Fri, 13 Oct 2006 03:06:57 +0200
Message-Id: <200610130106.k9D16vj0007368@sm00.avast.com>
To: john_galt@comcast.net
Subject: New Personal Message: URGENT MESSAGE FROM ADMIN!!!
From: "avast!WEBforum" <webadmin@asw.cz>
Date: Fri, 13 Oct 2006 01:06:50 +0000
Content-Type: text/plain; charset=ISO-8859-1
You have just been sent a personal message by EdwardN on avast!WEBforum.
IMPORTANT: Remember, this is just a notification. Please do not reply to this email.
The message they sent you was:
If you have some time check out this COOL pic:
http://pix2.hotornot.com/pics/HU/KM/KY/KU/A8SRRZBAVPSL.jpg
Also, check out the following website I came across:
http://www.asian-man.com/asianmannew/main.htm
It will knock your socks off!
Next, the below website is thrilling!!!
http://www.aznlover.com
Finally, the following website is the absolute BOMB!!!
http://www.amyandbilly.com
ENJOY!!!
MY PIC: http://pix2.hotornot.com/pics/HU/KM/KY/KU/A8SRREEKAJPC.jxxxpg
(http://pix2.hotornot.com/pics/HU/KM/KY/KU/A8SRREEKAJPC.xxxjpg)
Reply to this Personal Message here: http://forum.avast.com/index.php?action=pm;sa=send;f=inbox;pmsg=29362;quote;u=25369
-
EdwardN got me too. I agree with Tech that we need a rule to stop PMs for members with less than 10 or so posts
Edit: Beatme101 Tech is a VERY respected member of this forum Im sure he had a good reason for including your name (mabye it was by mistake?)
you find a lot of members post more then 10x in a week better if it was like a 100 post count then enable it for the members to PM other.
but i really think some low lifer found a hole in the forum scrip and use the PM option to spam a lot of member at once.
-
I have just received the same spam e-mail. It was obvious that it was spam, so I just deleted it. It does not affect my confidence in avast! in any way - I still think it is an excellent piece of software with first class support.
regards,
dafydd
-
Received this from the spammer in personal mail.
-
There's really no need to post any further messages here - it actually only spreads the spamming.
The official response is here (http://forum.avast.com/index.php?topic=24203.0).
-
Understood!
However I was only indicating, that I did not get that message in email, but rather from the personal messages on this forum, as obviously he logged back in at the time indicated in the message, and wanted to make someone aware, since I could not send a personal message to the Admin. I was not aware it came in PM as well as to my normal email address. My apologies.
-
I must apologize.
After pulling my complete email records I see I did use the spammed address for a forum account.
Thankfully the Reg data base is stored separately, though that's little relief to forum participants that were spammed or even worse have been compromised with malware.
I would think best practice would be to make member list function unavailable for general parsing.
-
Just to let the mods know i also go one of these pm's today, will just delete it, it's a shame that some idiot can cause so much trouble.
Also got the email.
It was from a EdwardN & it the image links have been edited as shown in the image on a post on this page.
Best wishes to the admins in fightin this.
BaNzI ;D