Exploit Worm in Flyer Talk?
Jul 10, 2004, 8:22 am
#1
Original Poster
Join Date: Nov 2003
Location: Circumambulatory
Posts: 154
Exploit Worm in Flyer Talk?
Since my anti-virus system last update, whenever I access the site, I get a warning of the presence of an Exploit worm.
I do delete those every time, but do not understand what actually is going on.
Webmaster?
I do delete those every time, but do not understand what actually is going on.
Webmaster?
Jul 10, 2004, 8:54 am
#2
FlyerTalk Evangelist
Join Date: Apr 2001
Location: DCA
Programs: AMC MovieWatcher, Giant BonusCard, Petco PALS Card, Silver Diner Blue Plate Club
Posts: 22,297
Originally Posted by Master
Since my anti-virus system last update, whenever I access the site, I get a warning of the presence of an Exploit worm.
I do delete those every time, but do not understand what actually is going on.
Webmaster?
I do delete those every time, but do not understand what actually is going on.
Webmaster?
Regards,
Gary
aka gleff
MilesBuzz and Delta moderator
Jul 12, 2004, 9:49 am
#4
Join Date: May 2000
Posts: 473
Copy and paste whatever your av program is telling you into this thread.
It is unlikely -- our server does not run on windows -- and the web based worms target windows webservers and internet explorer.
Additionally, although we don't use windows for daily work here, after I saw this message I went to the site on Windows computer with Norton AV and received no warning.
John
It is unlikely -- our server does not run on windows -- and the web based worms target windows webservers and internet explorer.
Additionally, although we don't use windows for daily work here, after I saw this message I went to the site on Windows computer with Norton AV and received no warning.
John
Last edited by John at Webflyer; Jul 13, 2004 at 8:42 am
Jul 12, 2004, 7:47 pm
#5
Join Date: Oct 2001
Location: BOS
Programs: AA LTG EXP, HH Diamond
Posts: 3,419
Originally Posted by John at Webflyer
It is unlikely -- out server does not run on windows -- and the web based worms target windows webservers and internet explorer.
Jul 13, 2004, 8:41 am
#7
Join Date: May 2000
Posts: 473
Possible -- although as ScottC says it's probably an ultrasensitive av program responding to a cookie. That's why it would be helpful to see the warning.
Originally Posted by jcrb
Just a thought it could be coming from the people who serve your ad banners?
Jul 15, 2004, 9:11 am
#8
A FlyerTalk Posting Legend
Join Date: Aug 2002
Programs: UALifetimePremierGold, Marriott LifetimeTitanium
Posts: 71,113
Isn't it to do w/ spyware?
I update my anti-virus every day & haven't gotten that message, but when I run Spybot it finds DSO Exploit every time & I just have it delete it. I figured it had something to do w/ spyware vs a virus.
Jul 17, 2004, 8:22 pm
#9
Join Date: Jul 2001
Location: Chicago, IL
Programs: 11 Longhaired Friends of Jesus; Chartreuse Microbus; just demoted to AA nonentity
Posts: 282
This is an acknowledged Spybot problem, if that's what Master was getting the message from. (See, e.g., this Usenet thread.)
Aug 9, 2004, 6:32 am
#10
FlyerTalk Evangelist
Join Date: Sep 2000
Programs: DL FO, Marriott Gold, SPG Gold
Posts: 12,003
Yesterday I downloaded Spybot and ran a complete system scan to remove whatever spyware had be loaded on my computer. After I was finished I was unable to login to FT . When I entered my pin number and clicked on the login tab, my password simply disappeared. I tried everything to solve this problem. I was given the 5 login attempts warning message several times and had to wait 15 minutes each time to login again. I was also sent a temporary password in an attempt to login. I even uninstalled Spybot, and the problem persisted. I assume that it deleted something in my registry which caused the problem. Finally I did a system rollback using Norton's Goback to a safe start point and everything worked properly.
I would like to be able to use Spybot, as it is considered by experts to be more effective than Ad-aware. Does anyone have a suggestion as to possibly changing the settings on it so that it doesn't affect my ability to login to FT?
I would like to be able to use Spybot, as it is considered by experts to be more effective than Ad-aware. Does anyone have a suggestion as to possibly changing the settings on it so that it doesn't affect my ability to login to FT?
Aug 9, 2004, 8:09 am
#11
FlyerTalk Evangelist
Join Date: Dec 2002
Location: Seattle, WA, USA
Programs: Bar Alliance Gold
Posts: 16,271
It might not be SpyBot S&D, for I use that application (in conjunction with Ad-Aware) on many machines regularly to get rid of the stuff (along with SpywareBlaster, which keeps the machines from getting infected in the first place) and none of them have issues with FT after a scan/delete.
Aug 9, 2004, 8:22 am
#12
FlyerTalk Evangelist
Join Date: Sep 2000
Programs: DL FO, Marriott Gold, SPG Gold
Posts: 12,003
Originally Posted by SEA_Tigger
It might not be SpyBot S&D, for I use that application (in conjunction with Ad-Aware) on many machines regularly to get rid of the stuff (along with SpywareBlaster, which keeps the machines from getting infected in the first place) and none of them have issues with FT after a scan/delete.
Aug 9, 2004, 8:27 pm
#15
Join Date: Jul 2001
Location: Chicago, IL
Programs: 11 Longhaired Friends of Jesus; Chartreuse Microbus; just demoted to AA nonentity
Posts: 282
I'm not certain, as it's been a few months since I've played with Windows spyware software. However, if you give it another go, try changing the immunize setting to "ask for blocking confirmation" to see whether that localizes the problem.