Results 1 to 8 of 8
  1. #1
    Pro
    Points: 39,653, Level: 61
    Level completed: 47%, Points required for next Level: 697
    Overall activity: 2.0%
    Achievements:
    SocialVeteranCreated Album pictures25000 Experience Points

    Join Date
    May 2008
    Location
    Ames
    Posts
    3,014
    Points
    39,653
    Level
    61
    Thumbs Up
    Received: 46
    Given: 23

    Malware on DM Register website

    ISU IT sent out a note (originating from the state) telling people the DM Register website has compromised content (nasty malware) and urged people to stay away from the site until that content has been found and removed.

    From the e-mails I've received:
    Do Not visit the Des Moines Register site. If the torpig virus is installed on your machine the only solution is a full format and rebuild.


    Subject: [security alert] Malware on the Des Moines register web site

    This is a high priority security alert. The State of Iowa DAS security group sent a security alert out to State of Iowa employees regarding compromised web pages on the Des Moines register web site.

    They recommended that all state employees avoid the Des Moines Register web site and were blocking access to the Des Moines register web page where possible.

    I was able to verify their report. I used an instrumented virtual machine to visit the Des Moines Register web page then clicked on the photo of Lolo Jones at the Drake Relays. I quickly found the offending malware server and blocked it at the campus border. It is likely that I succeeded in removing access to the malware. However, it would be wise to avoid the Des Moines Register web site until they find and remove the tainted content.

    It is extremely likely that this malware will either install Torpig, a nasty banking Trojan, or the familiar Rogue AV software. Both malware products are intended to drain money from the accounts of victims.


    Last edited by Ms3r4ISU; 04-27-2010 at 11:03 AM. Reason: More details

  2. #2
    Speechless
    Points: 272,848, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 5.0%
    Achievements:
    Veteran50000 Experience Points
    isuno1fan's Avatar
    Join Date
    Mar 2006
    Location
    Clive, Iowa
    Posts
    17,514
    Points
    272,848
    Level
    100
    Thumbs Up
    Received: 159
    Given: 31

    Re: Malware on DM Register website

    I was on it this morning and my Norton identified something.



  3. #3
    Speechless
    Points: 402,703, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 91.0%
    Achievements:
    SocialOverdriveVeteran50000 Experience Points
    Wesley's Avatar
    Join Date
    Apr 2006
    Location
    Omaha
    Posts
    59,556
    Points
    402,703
    Level
    100
    Thumbs Up
    Received: 646
    Given: 404

    Re: Malware on DM Register website

    Details please.


    Let my Fred's Posse Ride: Georges, Naz, Hogue, Bryce, Nader, Monte, Matt, and McKay.

  4. #4
    Speechless
    Points: 272,848, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 5.0%
    Achievements:
    Veteran50000 Experience Points
    isuno1fan's Avatar
    Join Date
    Mar 2006
    Location
    Clive, Iowa
    Posts
    17,514
    Points
    272,848
    Level
    100
    Thumbs Up
    Received: 159
    Given: 31

    Re: Malware on DM Register website

    [SID: 23663] HTTP Trojan Mebroot Request detected.
    Traffic has been blocked from this application: C:\Program Files\Internet Explorer\iexplore.exe



  5. #5
    Starter
    Points: 40,186, Level: 61
    Level completed: 88%, Points required for next Level: 164
    Overall activity: 1.0%
    Achievements:
    25000 Experience PointsVeteran
    Trice's Avatar
    Join Date
    Apr 2010
    Location
    Ankeny, Iowa
    Posts
    944
    Points
    40,186
    Level
    61
    Thumbs Up
    Received: 39
    Given: 5

    Re: Malware on DM Register website

    I've long thought the Des Moines Register site is like one of Tiger's mistresses...don't go there or you'll end up with regret, shame, and a nasty virus to boot.



  6. #6
    Pro
    Points: 26,670, Level: 50
    Level completed: 12%, Points required for next Level: 880
    Overall activity: 6.0%
    Achievements:
    Veteran25000 Experience Points

    Join Date
    Apr 2009
    Posts
    2,134
    Points
    26,670
    Level
    50
    Thumbs Up
    Received: 60
    Given: 83

    Re: Malware on DM Register website

    Actually this is not an unusual situation. Couple of months ago, similar situation also occured in Startribune website. My computer was infected :(



  7. #7
    Pro
    Points: 57,729, Level: 74
    Level completed: 46%, Points required for next Level: 821
    Overall activity: 13.0%
    Achievements:
    Veteran50000 Experience Points
    jtdoyle1's Avatar
    Join Date
    Apr 2006
    Location
    Ankeny, IA
    Posts
    2,192
    Points
    57,729
    Level
    74
    Thumbs Up
    Received: 134
    Given: 5

    Re: Malware on DM Register website


  8. #8
    Addict
    Points: 174,460, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 0%
    Achievements:
    SocialVeteran50000 Experience Points
    GeronimusClone's Avatar
    Join Date
    Oct 2008
    Location
    Des Moines, IA
    Posts
    8,249
    Points
    174,460
    Level
    100
    Thumbs Up
    Received: 1
    Given: 0

    Re: Malware on DM Register website

    Quote Originally Posted by isuno1fan View Post
    I was on it this morning and my Norton identified something.
    same here


    Quote Originally Posted by MNCyGuy View Post
    The only answer to "who/what is GeronimusClone?" is in fact "GeronimousClone". You're like The Todd on Scrubs.
    Quote Originally Posted by Angie View Post
    This is why you're my favorite

    Quote Originally Posted by MoreCowbell View Post
    GC, he's obviously all man. And I don't think Ellen would go *****, even for GC...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
  • TV: FS1
  • Iowa State vs. Oklahoma
  • November 1, 2014
  • 11:00 AM