PDA

View Full Version : Spambot PM's....BEWARE!!! Please report them here.....


DRAGON
01-13-2010, 03:46 PM
It has come to my attention that we've seen more and more spambot activity through Private Messages sent to members here at SOC. The bots register and rather than take the chance of getting banned because of posting out in the open, they suck you in by PM'ing you to get you to click on links they supply in the PM -

What's worse is they sign the PM as being a staff member or administrator to convince you it's an official notice. They'll tell you about anything under the sun to get you to click links or sell you things that you don't want or really need. Here's an example of their deceptive PM's sent by a spambot with the SOC nickname of Lady_Admin:

----------------------------------------------------

Dear, SOC member!

A virus alert was noticed on your computer.
We highly recommend you to check your computer and perform online virus check at our site immediately: http://anti*ir*s.ef*ectm*ds.com

Sincerely, Forum Administration www.spyder.tv.

----------------------------------------------------

This is total BS!!! DO NOT CLICK ANY SUCH PROVIDED LINKS!!! There's more a chance of getting a virus than getting rid of one that you don't have in the first place by clicking the link. I threw some asterisks ** in the URL to disable it -

If you receive anything that looks like this, please post the name of the bot/member and your experience in this thread. As an additional precaution, please forward the PM to an active mod or administrator so we can permanently ban these scumbags from our forums -

Your cooperation and assistance is greatly appreciated. Help keep your SOC boards free of those that would take you for a ride or harm your computer as well as preventing them from doing harm to other members of our beloved boards. Thanks -

marvin-martian
01-13-2010, 04:38 PM
In the past few months I've gotten more spam PMs than legit ones (never had too many legit ones in the first place). It has gotten to the point where if I see a new PM, I roll my eyes and look for a mod online who can ban them. =/

bamf-hacker
01-14-2010, 07:46 PM
Marv let us know so we can get rid of them. SOC is not the only site getting hammered by them, IO and LO are being hit hard too.

marvin-martian
01-14-2010, 08:19 PM
haha I have been. First mod I see on AIM gets informed.

bigred76
01-15-2010, 11:01 PM
http://spyder.tv/forums/member.php?u=24640

She started another user name.

shunut
01-16-2010, 04:56 AM
She is banned. She keeps PMing me.

marvin-martian
01-16-2010, 06:32 AM
oh thats smart, have it programmed to PM mods

DFSniper
01-16-2010, 08:49 AM
yeah. and this last time "she" PM'd 'sac, lol!

DRAGON
01-16-2010, 04:42 PM
Apparently this needs a more in depth search to see if it's an existing member playing games which could be lethal -

THX for the heads up red -

DFSniper
01-17-2010, 05:19 AM
why do they add ICQ accts too?

druid
01-17-2010, 06:10 AM
simple. IP ban

shunut
01-17-2010, 06:21 AM
If their IPs are all the same. If each one has different IPs thats a lot of work for nothing.

irishwarrior
01-17-2010, 06:31 AM
Also its easy enough to set up a dynamic IP.

druid
01-17-2010, 08:49 AM
If their IPs are all the same. If each one has different IPs thats a lot of work for nothing.

I wouldn't exactly say that...

If Lady Admin is address __.___.___ and just her name gets banned, their bot generators just make new names from that address. Banning the address eliminates that possibility all together and prevents future attacks.

shunut
01-17-2010, 05:12 PM
If we get attacks for the same IP address multiple times, then we ban that IP. So far from the PM spam we have gotten, none of the IPs have been close to being the same. You figure the people who set this stuff up are smart, so they can very easily setup rolling IPs.

DRAGON
01-17-2010, 08:57 PM
No need for IP talk....

Now lesee.....since all members are screened, the person who's doing the screening either isn't doing his/her job, hasn't the sense to deny any prospective that has Admin or Lady or reasonable facsimile in their nick or is rolling with it just for something to do. Haaaaa Haaaaaaa!!!! -

Hey there, don't look at meh -

druid
01-17-2010, 09:48 PM
new one from LadyXAdmin...sent it to
DRAGON (http://www.spyder.tv/forums/member.php?u=6), Drefish99 (http://www.spyder.tv/forums/member.php?u=4), durrell (http://www.spyder.tv/forums/member.php?u=27), chubb0rz (http://www.spyder.tv/forums/member.php?u=19)

bigred76
01-17-2010, 11:59 PM
Got that too.

shunut
01-18-2010, 05:51 AM
LadyXAdmin PM'd me, banned her.

marvin-martian
01-18-2010, 07:34 AM
well this is fun.

WHAT IF IT'S OTTER TRYING TO SPARK ACTIVITY?!?!?! zomggggg

DFSniper
01-18-2010, 01:52 PM
what if the world is being taken over by women!?!?!?!

http://rlv.zcache.com/i_am_a_huge_conspiracy_theorist_tshirt-p235827906177127547tdq8_210.jpg

druid
02-08-2010, 01:30 AM
Got one from StopAdmin and simply deleted it.

Coincidentally, ...and I ain't kidding...

I ended up getting a virus on 1/18/10 called "Internet Security 2010." It is an "antivirus-Virus" and is one pervasive sonuvaB....

once uploaded, you can't log on to the internet and if you can, tabs are redirected elsewhere. "You're infected" bubbles galore and it changes your desktop picture. Poop up bubbles telling of your infection never end...what a nightmare. Microsoft ranked it a 5/5...my tech guy had my tower for 3 weeks.

Now I'm up and running again.

swoosh81
02-08-2010, 07:37 AM
I ended up getting a virus on 1/18/10 called "Internet Security 2010." It is an "antivirus-Virus" and is one pervasive sonuvaB....

once uploaded, you can't log on to the internet and if you can, tabs are redirected elsewhere. "You're infected" bubbles galore and it changes your desktop picture. Poop up bubbles telling of your infection never end...what a nightmare. Microsoft ranked it a 5/5...my tech guy had my tower for 3 weeks.

Now I'm up and running again.


I got the same exact one back in December, the bad thing is it looks very authentic.

DFSniper
02-08-2010, 07:59 AM
ouch. i would have just wiped the hard drive. my mom had the "Windows Defender 2008" virus, took me forever to get rid of it.

DRAGON
02-08-2010, 09:24 AM
Got one from StopAdmin and simply deleted it.

Coincidentally, ...and I ain't kidding...

I ended up getting a virus on 1/18/10 called "Internet Security 2010." It is an "antivirus-Virus" and is one pervasive sonuvaB....

once uploaded, you can't log on to the internet and if you can, tabs are redirected elsewhere. "You're infected" bubbles galore and it changes your desktop picture. Poop up bubbles telling of your infection never end...what a nightmare. Microsoft ranked it a 5/5...my tech guy had my tower for 3 weeks.

Now I'm up and running again.

Thing about that one is, you unknowingly let it into your computer through your actions. It will popup as a virus warning w/a fake windows screen. It appears as though your computer is alarming you listing viruses that you don't have but it's a trick to get you to accept the download. It basically locks up your computer like you can't do anything else but click to fix it by downloading this Internet Security 2010 fake software. If you can get off the internet the window is easily deleted and download avoided -

I had a few attempts thus far by this one and always managed to foil it. You really need to be careful to not click on anything. Even trying to click off the virus warning screen can give it the OK to download -

Your best bet for updates by softwares is to make the setting where it needs your OK to update anything at all. Some people have it set to automatically accept updates which is the kiss of death -

bigred76
02-08-2010, 02:47 PM
It's shocking to me that so many people get viruses. Windows itself does not have virus protection on a user level that will alert you, as that is taken over by the antivirus that you install... So why would you accept a box from Windows about a virus? Windows Defender is one of the stupidest things Windows has, and I can't recall the last time I even touched it.

If you're that bad with viruses... Linux Mint. Problem solved.

druid
02-08-2010, 10:32 PM
This one came piggybacked in an email from my one daughter's friend...to her. One of them [4 others in the house] had to click something to activate the damned thing - to which I loudly explained the importance of never clicking anything you don't know a damned thing about - but it's gone now...

liverlip
02-13-2010, 12:09 PM
I got one today from SOC's newest member Admin&Moderator. Be careful of any message this person sends you.

Spec_Ops_PB
02-13-2010, 01:35 PM
I got one today from SOC's newest member Admin&Moderator. Be careful of any message this person sends you.

I just got a PM from the same username, Admin&Moderator.

They're saying that my computer has a virus and if I don't click the link they provide my account will be deleted... They really take me for an idiot I think...
lol

fatkidfrompbaz
02-17-2010, 05:40 PM
Everyone be on the lookout for SupportAdmin

buffblackbird2002
02-17-2010, 06:36 PM
hey, i got it too. deleted.

DRAGON
02-17-2010, 08:05 PM
hey, i got it too. deleted.

Everyone be on the lookout for SupportAdmin

As y'all post 'em up, I knocks 'em down - ;)

marvin-martian
02-18-2010, 04:36 AM
I got one from "dfsniper." This is dangerous, it's starting to get original with names.

DFSniper
02-18-2010, 07:22 AM
wow. thats not cool.

buffblackbird2002
02-18-2010, 07:45 AM
wow, this is turning into a war, how did these get in?

marvin-martian
03-03-2010, 11:29 AM
StephenFox is so nice!

Today the Administrator of www.spyder.tv notified us of spam sent by this forum members (Spammers: marvin-martian;fishsticks;paintball 1;MatthewTheTheif;GoBeans).
We strongly recommend you to download special antivirus software and scan your computer for viruses, Trojans and other malwares.
Download link: We don't need this link posted anymore than it already is.
If case of ignoring StopSpam Organization requirements, we reserve the right to forward a complaint to your ISP and require blocking your Internet-access.

Sincerely,
World Spam Protection Organization StopSpam

shunut
03-03-2010, 02:29 PM
Got Mr Fox.

marvin-martian
03-03-2010, 02:40 PM
didnt even think about posting the link. sorry.

liverlip
03-07-2010, 07:47 AM
I got one from michealullman

shunut
03-07-2010, 04:33 PM
MichealUllman is banned. Thanks for your help.

liverlip
03-11-2010, 12:18 PM
WilliamDuncan just sent me one.

pntballer5634
03-12-2010, 04:45 PM
i got one from admin&mod, and almost thought it was legit. then i was like, no

DRAGON
03-12-2010, 10:06 PM
WilliamDuncan just sent me one.

ZAPPED! -

i got one from admin&mod, and almost thought it was legit. then i was like, no

Something wrong with that one. Sure that's the exact spelling? Try a C&P of the nick. Or are you jus messin wit meh? -

MR2 Woodsballer
03-15-2010, 01:51 AM
well that explains a few things i got two actully from WilliamDuncan, and AdminModerator. I made the mistake of clicking them. it has been over a year sense the last time i have had time to be on here. long story short i had to take my laptop to a local shop and pay 300+ to have everything cleaned up memory backed up and update my security as well as my windows. BTW 7 is better than vista...

marvin-martian
03-15-2010, 05:34 AM
I got one from pntballer5634.


wat do

DFSniper
03-17-2010, 05:58 PM
Hi companion DFSniper;tigerdave714;taurinic;chubb0rz;Fets !
I am interested in your nickname
I collect some nicknames
Interesting about your nick-names [url]binary file removed[url]
i was about to reply. it wouldnt be nice.

thank GOD for firefox. link looks like it goes to a website, but clicking on it opens an executable file, probably to jack your passwords and private info. luckily firefox asks you if you want to run it.

shunut
03-17-2010, 09:08 PM
endisorc has been permanently banned!

liverlip
03-26-2010, 10:50 AM
I got one today from:
MoviessMasster

shunut
03-26-2010, 01:35 PM
Bannnnnned!!!!

Spec_Ops_PB
03-26-2010, 06:19 PM
Today MoviessMasster sent me a spam PM, and SexxyLadyX sent me porn pictures and a link to a porn site...

shunut
03-26-2010, 06:26 PM
Already got MoviessMasster, and now SexxyLadyX is gone.

PBRC714
03-31-2010, 08:13 AM
Got one this morning from username " MoviezzBazee " trying to get me to view a movie on-line...

fishsticks
03-31-2010, 08:34 AM
got the same one as pbrc714.... MoviezzBazee

marvin-martian
03-31-2010, 09:39 AM
but the movie got a 4.9 on imdb!! it must be good

shunut
03-31-2010, 09:52 AM
Both of the above have been banned.


edited: Opps, thought that PBRC714 was one of the spammers and banned him, fixed it immediately though.

marvin-martian
03-31-2010, 10:42 AM
noob

swoosh81
03-31-2010, 11:08 AM
lol

paintballkid0206
04-02-2010, 07:26 PM
check this guy out: TerryPhillipz

Got a PM from him. it was different than the others cuz the msg talked about detecting and blocking spam. so i'm not 100% sure, if you want a copy of the msg he sent, lmk.

edit: just checked the other PM i had. check this guy out as well: KendrickWarren
Called himself the administration and talked about a spam test/virus check.

Spec_Ops_PB
04-02-2010, 07:31 PM
Got one from that guy too... definitely spam.

WTH is wrong with the forums that all these spammers come here? lol

DFSniper
04-02-2010, 08:20 PM
kingman forgot to renew their spamblocker?

shunut
04-02-2010, 08:47 PM
Got Terry and another guy, can't remember the name.

bigred76
04-02-2010, 10:42 PM
Now if only we could require 5 posts or something before PMing... that'd fix the spam PM issue...

oldironmudder
04-03-2010, 06:10 AM
Now if only we could require 5 posts or something before PMing... that'd fix the spam PM issue...

QFTW

OneShotKill
04-03-2010, 02:30 PM
myself and some others recieved a private message yesterday saying that spam from my computer was detected from my computer, etc...

Does anyone know if this is legit or spam in and of itself (as I believe)?

shawn22stl
04-03-2010, 02:58 PM
its a virus my friend dont open it

shunut
04-03-2010, 03:05 PM
http://www.spyder.tv/forums/showthread.php?t=20843

Please post the name of the member who sent you the PM so that we can make sure they get banned.

fatkidfrompbaz
04-06-2010, 04:23 PM
I dont know about this but the new member "borkpart" posted a thread linking us to games?

shunut
04-07-2010, 05:34 AM
If someone makes a post that is spam or against our rules in any other way, please use the "Report" button.

buffblackbird2002
04-11-2010, 09:12 AM
RobertTaylor.....spam/virus. private message.

OneShotKill
04-11-2010, 09:22 AM
I have recieved 2 of these PM's...one from TerryPhillipz (when I created the post above), and one from RobertTaylor (today)

DRAGON
04-11-2010, 09:33 AM
RobertTaylor.....spam/virus. private message.

I have recieved 2 of these PM's...one from TerryPhillipz (when I created the post above), and one from RobertTaylor (today)

ZAPPED!!! :tonofbricks:

modifiedspyderimagine04
04-11-2010, 10:53 AM
I just got a Spambot PM from a Robert Taylor here is what they said-

Hello. Email spam from your computer was detected.
It is quite possible that yout pc is a part of botnet (.
Highly recommend you to scan your computer for malicious and potentially unwanted software. If you do not follow this, I will have to make a complaint to your Internet Service Provider with attached log file (your IP address, etc.).
If you want to find a report about your computer's security and solve every problem with it, please click here: [/url] and shady;UKwithPride
This is an online service that you can use for free spyware removal.
Sincerely, Robert Taylor.
Forward Message

Under neath of their name it says banned!

liverlip
04-11-2010, 11:16 AM
Erase that before some unsuspecting moron clicks one of the links!!!

druid
04-11-2010, 08:51 PM
I just got a Spambot PM from a Robert Taylor here is what they said-

Hello. Email spam from your computer was detected.
It is quite possible that yout pc is a part of botnet (.
Highly recommend you to scan your computer for malicious and potentially unwanted software. If you do not follow this, I will have to make a complaint to your Internet Service Provider with attached log file (your IP address, etc.).
If you want to find a report about your computer's security and solve every problem with it, please click here: [/url] and shady;UKwithPride
This is an online service that you can use for free spyware removal.
Sincerely, Robert Taylor.
Forward Message

Under neath of their name it says banned!

got it too

shunut
04-12-2010, 05:24 AM
If you guys noticed, before both of your posts about RobertTaylor, Drago already got him.

modifiedspyderimagine04
04-12-2010, 07:22 AM
This crap needs to stop happening!

bigred76
04-12-2010, 10:16 AM
Now if only we could require 5 posts or something before PMing... that'd fix the spam PM issue...

Srsly... Dre?

liverlip
04-12-2010, 01:49 PM
Got one from JosephWard

shawn22stl
04-12-2010, 03:18 PM
I dont even look in mail box here!

swoosh81
04-12-2010, 05:00 PM
JosephWard

paintballkid0206
04-12-2010, 06:43 PM
yep, JosephWard just got me twice. this is getting annoying. but at least it's a topic of conversation in the ghost-forum...

buffblackbird2002
04-12-2010, 07:10 PM
yeah its getting realy annoying. almost making me not want to come back everyday. sorry its sad. can we do anything to prevent them. maybe one of those word generators that have to be verified before sending messages or posting?

Lord Nelson
04-12-2010, 09:15 PM
i basically get a message everyday from these bots! they are driving me through the roof!

Lord Nelson
04-12-2010, 09:16 PM
awesome idea buffblackbird2002

DFSniper
04-12-2010, 10:22 PM
too bad this site isnt as busy as it used to be, or i'd suggest admin-approval of all new members.

if you're really that irritated by it, just disable PMs...

paintballkid0206
04-13-2010, 03:42 AM
we should formulate an unneccesarily complex plan. something that involves torches and pitchforks.

shunut
04-13-2010, 05:22 AM
JosephWard is gone.

druid
04-14-2010, 10:47 PM
here's one for you to mull over...got it in my PM box


Glock36
New Guy

Join Date: Apr 2010
Location: Roanoke, TX
Posts: 0
Hey
I signed up and have been awaiting posting privileges but haven't got anything yet. Can you pm and admin and let them know?

Thanks
--------------

IM'd Tim and he suggested this:
bigred76: post it in the PM Spam thread
and tell them they have the filter backwards
posts in order to PM, not PM's to post

shunut
04-15-2010, 05:42 AM
WTF? Why wouldn't they PM an admin/moderator themselves. I'll look into the account.

IM'd Tim and he suggested this:
bigred76: post it in the PM Spam thread
and tell them they have the filter backwards
posts in order to PM, not PM's to post

It has already been suggested...

DFSniper
04-15-2010, 08:10 AM
here's one for you to mull over...got it in my PM box


Glock36
New Guy

Join Date: Apr 2010
Location: Roanoke, TX
Posts: 0
Hey
I signed up and have been awaiting posting privileges but haven't got anything yet. Can you pm and admin and let them know?

Thanks
--------------

IM'd Tim and he suggested this:
bigred76: post it in the PM Spam thread
and tell them they have the filter backwards
posts in order to PM, not PM's to post

i got the same one too. forwarded it to Dre.

bigred76
04-15-2010, 02:29 PM
I has already been suggested...
If Kingman's Admin is reading this... get 'er done. I personally feel bad for you, mods, as you have to deal with this. My applause for the prompt bannings of these spam-bots. :applause:

druid
04-15-2010, 09:56 PM
WTF? Why wouldn't they PM an admin/moderator themselves. I'll look into the account.



It has already been suggested...

That is EXACTLY what I said to Tim in our convo.......LOL

But then I sit back and think about how many people post or how frequently they do and it makes sense that they would contact someone who talks the most frequent on here...

Glock36
04-16-2010, 12:27 PM
Not a spam but after emailing several times to the contact and mods I still couldn't post. I would think members would want to help out new members and get the site going... Hmm guess not. Anyways thanks for posting it here so it did get a mods attention..

DFSniper
04-16-2010, 12:52 PM
That is EXACTLY what I said to Tim in our convo.......LOL

But then I sit back and think about how many people post or how frequently they do and it makes sense that they would contact someone who talks the most frequent on here...

*looks at post count*
*finds dark corner to hide in*

liverlip
04-19-2010, 12:56 PM
JoshuaEvanss got me today.

shunut
04-19-2010, 03:41 PM
And I got JoshuaEvanss :D

ricochet08
04-19-2010, 06:55 PM
Oh man...it's been soo long since i've logged on, and now all these viruses!
Well, I deleted all those messages :)

How ya guys been?

shunut
05-05-2010, 03:05 PM
UPDATE - I just added a plugin that requires new members to make 5 posts before they can PM anybody, hopefully this will eliminate the spam/viruses being sent via PMs.

marvin-martian
05-05-2010, 05:39 PM
Check out Pandora's posts...

shunut
05-05-2010, 07:10 PM
Got him/her.

durrell
05-05-2010, 07:28 PM
I don't know what you guys are talking about. I'm getting some great deals on shoes and cell phones from these guys.

shunut
05-05-2010, 08:32 PM
LOL, do you enjoy the viruses as well?

marvin-martian
05-24-2010, 03:20 PM
Fairly easy to find the new spam...

DFSniper
05-24-2010, 03:21 PM
lol. obvious spammers are obvious. you'd think they'd learn that after a while, everyone is too smart to click on links, so its all in vain.

durrell
05-24-2010, 03:42 PM
Thanks for the heads up. Took care of it.