Spammers on avast forum!

EBathory · 2006-10-13T03:31:40.000Z

I opened the email but did not click on any of the links. I somehow knew right away what was going on and just deleted it.

This can happen to anybody, on any message board. In fact, I am more worried about using Internet Explorer and all its holes (use it only when I have to).

If something looks funny or you don’t recognize it, just delete!

It has crossed my mind too that it is maybe someone from another anti-spyware company. Trying to make AVAST look bad.

The AVAST people work hard to keep their anti-spyware up-to-date. Perhaps someone else got very jealous.

bob3160 · 2006-10-13T03:36:17.000Z

Unfortunately, someone posted the picture in the forum in another thread.
I haven’t opened any of the links but, wound up seeing the junk anyway.
Spam I expect. Someone actually posting the XXXXX picture in the forum, I did not.
It’s been reported and it’s up to the Mod’s to take the appropriate actions.

system · 2006-10-13T03:36:35.000Z

I as well received a message from “EdwardN on avast!WEBforum.”

It was obscene, and also seemed to cause popups to continue in these forums displaying that message, even after I’d read it, and it was no longer new.

I agree: if the user database is compromised, please inform us.

quard post:30:

I too got the message from EdwardN. If the user database was found to be compromised please let us know in case there were others (unlike myself) who used a primary or important email account to register here.

system · 2006-10-13T03:44:14.000Z

Tech post:18:

Jedi Master post:17:

Umm… That a security product is inadequate in it’s own forum security?? Doesn’t exactly inspire confidence…

So, why do you trust MS? Or why do you bought a product from HP?
Have they never get into hot waters?

I’m suspecting that all this bad press on avast forum are comming to jealousy people from other products

No, it’s coming from people like me who expect a security company to be, well, aware of security.

I see at the bottom of each page here that the forum is on v1.0.1 of the forum software.
The current release is v1.0.8 it is a critical update.

Which is something basic for administrators, especially where knowledge of security matters should be high…

system · 2006-10-13T03:46:21.000Z

I got one from: JessicaA with the same content. :-\

system · 2006-10-13T03:47:24.000Z

Although I am very pleased with avast! products I have to agree on that!

I see at the bottom of each page here that the forum is on v1.0.1 of the forum software. The current release is v1.0.8 it is a critical update.
Which is something basic for administrators, especially where knowledge of security matters should be high…

system · 2006-10-13T03:52:47.000Z

I think I posted once or twice before here, I just recieved this, what’s going on ???

system · 2006-10-13T03:54:52.000Z

I’m sorry about that it didn’t show that way in my email and I just cut and pasted >:(

Lisandro · 2006-10-13T03:57:22.000Z

GHammer post:42:

I see at the bottom of each page here that the forum is on v1.0.1 of the forum software.
The current release is v1.0.8 it is a critical update.

Well… this was discussed before… and security was not one of the ‘necessary’ changes…
Maybe they did not give speciall attention to the changes.
I can’t find anything here: http://www.simplemachines.org/about/features.php (SMF 1.1 - forum software feature list).
What did really change from 1.0.1 to 1.0.8 ???

system · 2006-10-13T03:59:11.000Z

Site Admin, at least kill the reported accounts that are send this crap out.
I’d take a close look at the logs and at least do a temporary netblock ban on them until you get things straightened out.

system · 2006-10-13T04:01:51.000Z

thebeachbum33 post:46:

I’m sorry about that it didn’t show that way in my email and I just cut and pasted >:(

At least edit/modify your post.

system · 2006-10-13T04:12:30.000Z

The Hammer post:49:

thebeachbum33 post:46:

I’m sorry about that it didn’t show that way in my email and I just cut and pasted >:(

At least edit/modify your post.

Done didn’t realize I could :

szc · 2006-10-13T04:43:02.000Z

thebeachbum33 post:50:

Done didn’t realize I could :

You didn’t do a thing… nothing’s done like you mentioned… all links are still alive inside your reply here:

http://forum.avast.com/index.php?topic=24177.msg198646#msg198646

system · 2006-10-13T04:45:57.000Z

well this sucks…

system · 2006-10-13T05:38:14.000Z

Sucks big time, just got mine today. Too bad forum security isn’t as good as their product.

system · 2006-10-13T06:26:11.000Z

Guys, even mods have to sleep.

So:
a) idiots been banned few minutes ago
b) NO DATABASE HAS BEEN COMPROMISED! They simply walked the list of the users and then sent the PMs to them. No direct mailing to stolen emails. Reg database is stored elsewhere, without direct internet access.
c) All newbies were denied from using the PMs.

Dwarden · 2006-10-13T06:46:28.000Z

i said this in another thread but i repeat here as it’s more “active”

it could help set min number of posts before user get chance to use PM … let say 25 …
of course sending PM to moderators / admin can anyone with 1+ etc.

should help to prevent this to repeat more often

system · 2006-10-13T06:52:17.000Z

Nice to see security is upgraded. Got my spam 4h before it was upgraded :-\ but as Dwarden says to moderators and admins it shouldn’t be that much.

polonus · 2006-10-13T06:55:08.000Z

Hi all,

If we had to upload all our pictures through imageshack or whatever filtered, we could stop this.

polonus

system · 2006-10-13T07:42:27.000Z

[b]Below is the full spam MSG., including the INTERNET header. My email pgm flagged it as spam. I still scan all, so I knew the links were phony, and nailed it.

Since the Admin has resolved it, I post only as an addition. If anyone actually followed any of the links as the email requested they were foolish or stupid. Why would (In my Mind) the best FREE and PAY Anti-virus Company send out porn links, since reading the message should have been obvious as to it’s intent.

Since I pasted this, you will note I disabled the PIC that would have been visable as a JPG image and only shows a question mark out of respect to others who may not be so amused.

NOTE: If you did follow any of them, you now have a “key logger” on your system, as my own safe investigation revealed. So expect some more fun from the links you may have accessed.[/b]

John Galt

]“Fools, although they hear, are like the deaf: To them the adage applies that when present they are absent.” —Heraclitus

Received: from sm00.avast.com ([70.84.157.228])
by alnrmxc23.comcast.net (alnrmxc23) with ESMTP
id <20061013010700a23005mon8e>; Fri, 13 Oct 2006 01:07:00 +0000
X-Originating-IP: [70.84.157.228]
Received: from sm00.avast.com (sm00.avast.com [127.0.0.1])
by sm00.avast.com (8.12.11.20060308/8.12.11) with ESMTP id k9D16v0Q007370
for john_galt@comcast.net; Fri, 13 Oct 2006 03:06:57 +0200
Received: (from apache@localhost)
by sm00.avast.com (8.12.11.20060308/8.12.11/Submit) id k9D16vj0007368;
Fri, 13 Oct 2006 03:06:57 +0200
Message-Id: 200610130106.k9D16vj0007368@sm00.avast.com
To: john_galt@comcast.net
Subject: New Personal Message: URGENT MESSAGE FROM ADMIN!!!
From: “avast!WEBforum” webadmin@asw.cz
Date: Fri, 13 Oct 2006 01:06:50 +0000
Content-Type: text/plain; charset=ISO-8859-1

You have just been sent a personal message by EdwardN on avast!WEBforum.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

If you have some time check out this COOL pic:
http://pix2.hotornot.com/pics/HU/KM/KY/KU/A8SRRZBAVPSL.jpg
Also, check out the following website I came across:
http://www.asian-man.com/asianmannew/main.htm
It will knock your socks off!
Next, the below website is thrilling!!!
http://www.aznlover.com
Finally, the following website is the absolute BOMB!!!
http://www.amyandbilly.com
ENJOY!!!

MY PIC: http://pix2.hotornot.com/pics/HU/KM/KY/KU/A8SRREEKAJPC.jxxxpg

http://pix2.hotornot.com/pics/HU/KM/KY/KU/A8SRREEKAJPC.xxxjpg

Reply to this Personal Message here: http://forum.avast.com/index.php?action=pm;sa=send;f=inbox;pmsg=29362;quote;u=25369

Announcements