1. SPS Accounts:
    Do you find yourself coming back time after time? Do you appreciate the ongoing hard work to keep this community focused and successful in its mission? Please consider supporting us by upgrading to an SPS Account. Besides the warm and fuzzy feeling that comes from supporting a good cause, you'll also get a significant number of ever-expanding perks and benefits on the site and the forums. Click here to find out more.
    Dismiss Notice
Dismiss Notice
You are currently viewing Boards o' Magick as a guest, but you can register an account here. Registration is fast, easy and free. Once registered you will have access to search the forums, create and respond to threads, PM other members, upload screenshots and access many other features unavailable to guests.

BoM cultivates a friendly and welcoming atmosphere. We have been aiming for quality over quantity with our forums from their inception, and believe that this distinction is truly tangible and valued by our members. We'd love to have you join us today!

(If you have any problems with the registration process or your account login, please contact us. If you've forgotten your username or password, click here.)

Hacked by Nimda

Discussion in 'Whatnots' started by Capstone, Oct 24, 2001.

  1. Capstone Gems: 16/31
    Latest gem: Shandon

    Joined:
    May 8, 2001
    Messages:
    887
    Likes Received:
    0
    Remove all ads!
    [​IMG] DSL is awesome in many ways. However, nasty things can happen too...

    In the very first hour I had it up, I noticed an incredible amount of activity on it (24MB received in one hour, without a browser open). My telephone company (who is my ISP) told me that was normal. Sounded fishy to me...

    Within the next day, .eml files began appearing on my desktop and in every folder. Alarmed, I deleted all of them and shut down my connection.

    The next day, they were back. I downloaded and installed ZoneAlarm. I then talked to my telephone company, who informed me I had Nimda. To my surprise, Norton AV is no longer available for free download. Purchased at a nearby store and installed, cleaning the virus from the computer.

    After reading about the Nimda virus, it suddenly clicked. I hadn't even had a browser open for more than a minute; the only site I visited was my telephone company's startup page. I hadn't just contracted Nimda; someone hacked in and gave it to me.

    ZoneAlarm is happily logging all attempts to get into my computer now. I'm trying to peruse the file and figure out who exactly the perpetrator could be. There are a few suspects; one from France and one from Buenos Aires. Arrrrgh; good luck visiting any retribution on them.

    If only this were my own personal computer with the most vital thing on it being Baldur's Gate 2.... but no, this is my work PC with all our medical files and everything else... GRRRR...
     
    Capstone, Oct 24, 2001
    #1
  2. Blackthorne TA

    Blackthorne TA Master in his Own Mind Staff Member ★ SPS Account Holder Adored Veteran Pillars of Eternity SP Immortalizer (for helping immortalize Sorcerer's Place in the game!) New Server Contributor [2012] (for helping Sorcerer's Place lease a new, more powerful server!) Torment: Tides of Numenera SP Immortalizer (for helping immortalize Sorcerer's Place in the game!)

    Joined:
    Oct 19, 2000
    Messages:
    10,416
    Media:
    40
    Likes Received:
    232
    Gender:
    Male
    Heh, yeah, both times I've got a new broadband IP address (when I got DSL and then when I got cable internet), I've seen people probing my computer withing a few days. The little light on the modem for incoming/outgoing traffic would flicker constantly for a few days, and I'd check the log files on my Linux machine (which acts as firewall and router for my Windows PC) and see all the rejections of the systematic probes from various places. But after a few days of getting nowhere, the traffic goes away and the light on the modem stops flickering when I'm not using the internet.

    So, if you think getting a firewall for your brand spankin' new always-on broadband internet connection is a waste of time and/or money, think again :)
     
    Blackthorne TA, Oct 24, 2001
    #2

  3. Capstone Gems: 16/31
    Latest gem: Shandon

    Joined:
    May 8, 2001
    Messages:
    887
    Likes Received:
    0
    [​IMG] Nice thing about Zone Alarm is it's free. :D
    Only thirty dollars should I decide to upgrade to Pro, which is a consideration.

    Still pondering whether it's worth it to try and track down these people.
     
    Capstone, Oct 24, 2001
    #3

  4. Kitiara Gems: 14/31
    Latest gem: Chrysoberyl

    Joined:
    Feb 19, 2001
    Messages:
    633
    Likes Received:
    0
    Kitiara, Oct 24, 2001
    #4

  5. Shadowcouncil Gems: 29/31
    Latest gem: Glittering Beljuril

     Veteran

    Joined:
    Jan 8, 2001
    Messages:
    3,319
    Likes Received:
    16
    Gender:
    Male
    Capstone, it's not worth to try to track down these people. Nimda virus installs a script on the computer. This script automatically sends emails to people in the adressbook, without that the sender knows the mails are sent. And when you just send an email, the script can add and attachment that causes the virus. So tracking down these people is no solution.

    A time-trial-version of Norton Antivirus can still be downloaded and used to remove viruses.

    More info about Nimda and links to other sites can be found here: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/topics/nimda.asp
     
    Shadowcouncil, Oct 25, 2001
    #5

  6. Capstone Gems: 16/31
    Latest gem: Shandon

    Joined:
    May 8, 2001
    Messages:
    887
    Likes Received:
    0
    [​IMG] Heh. Nimda *would* have e-mailed itself had I been using Outlook Express. But I'm no such fool. ;)

    Okay, so I did leave my computer unprotected for a couple days. *sigh* Maybe I am such a fool after all.
     
    Capstone, Oct 26, 2001
    #6
Sorcerer's Place is a project run entirely by fans and for fans. Maintaining Sorcerer's Place and a stable environment for all our hosted sites requires a substantial amount of our time and funds on a regular basis, so please consider supporting us to keep the site up & running smoothly. Thank you!

Sorcerers.net is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to products on amazon.com, amazon.ca and amazon.co.uk. Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or its affiliates.