Results 1 to 8 of 8
  1. #1
    Pro
    Points: 39,155, Level: 61
    Level completed: 9%, Points required for next Level: 1,195
    Overall activity: 8.0%
    Achievements:
    SocialVeteranCreated Album pictures25000 Experience Points

    Join Date
    May 2008
    Location
    Ames
    Posts
    2,959
    Points
    39,155
    Level
    61
    Thumbs Up
    Received: 34
    Given: 12

    Malware on DM Register website

    ISU IT sent out a note (originating from the state) telling people the DM Register website has compromised content (nasty malware) and urged people to stay away from the site until that content has been found and removed.

    From the e-mails I've received:
    Do Not visit the Des Moines Register site. If the torpig virus is installed on your machine the only solution is a full format and rebuild.


    Subject: [security alert] Malware on the Des Moines register web site

    This is a high priority security alert. The State of Iowa DAS security group sent a security alert out to State of Iowa employees regarding compromised web pages on the Des Moines register web site.

    They recommended that all state employees avoid the Des Moines Register web site and were blocking access to the Des Moines register web page where possible.

    I was able to verify their report. I used an instrumented virtual machine to visit the Des Moines Register web page then clicked on the photo of Lolo Jones at the Drake Relays. I quickly found the offending malware server and blocked it at the campus border. It is likely that I succeeded in removing access to the malware. However, it would be wise to avoid the Des Moines Register web site until they find and remove the tainted content.

    It is extremely likely that this malware will either install Torpig, a nasty banking Trojan, or the familiar Rogue AV software. Both malware products are intended to drain money from the accounts of victims.


    Last edited by Ms3r4ISU; 04-27-2010 at 11:03 AM. Reason: More details

  2. #2
    Speechless
    Points: 269,805, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 2.0%
    Achievements:
    Veteran50000 Experience Points
    isuno1fan's Avatar
    Join Date
    Mar 2006
    Location
    Clive, Iowa
    Posts
    17,483
    Points
    269,805
    Level
    100
    Thumbs Up
    Received: 110
    Given: 22

    Re: Malware on DM Register website

    I was on it this morning and my Norton identified something.



  3. #3
    Speechless
    Points: 396,428, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 99.9%
    Achievements:
    SocialOverdriveVeteran50000 Experience Points
    Wesley's Avatar
    Join Date
    Apr 2006
    Location
    Omaha
    Posts
    58,174
    Points
    396,428
    Level
    100
    Thumbs Up
    Received: 445
    Given: 310

    Re: Malware on DM Register website

    Details please.


    Let my Fred's Posse Ride: Georges, Naz, Hogue, Bryce, Nader, Monte, Matt, and McKay.

  4. #4
    Speechless
    Points: 269,805, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 2.0%
    Achievements:
    Veteran50000 Experience Points
    isuno1fan's Avatar
    Join Date
    Mar 2006
    Location
    Clive, Iowa
    Posts
    17,483
    Points
    269,805
    Level
    100
    Thumbs Up
    Received: 110
    Given: 22

    Re: Malware on DM Register website

    [SID: 23663] HTTP Trojan Mebroot Request detected.
    Traffic has been blocked from this application: C:\Program Files\Internet Explorer\iexplore.exe



  5. #5
    Starter
    Points: 39,766, Level: 61
    Level completed: 56%, Points required for next Level: 584
    Overall activity: 3.0%
    Achievements:
    25000 Experience PointsVeteran
    Trice's Avatar
    Join Date
    Apr 2010
    Location
    Ankeny, Iowa
    Posts
    918
    Points
    39,766
    Level
    61
    Thumbs Up
    Received: 13
    Given: 1

    Re: Malware on DM Register website

    I've long thought the Des Moines Register site is like one of Tiger's mistresses...don't go there or you'll end up with regret, shame, and a nasty virus to boot.



  6. #6
    Pro
    Points: 25,112, Level: 48
    Level completed: 57%, Points required for next Level: 438
    Overall activity: 3.0%
    Achievements:
    Veteran25000 Experience Points

    Join Date
    Apr 2009
    Posts
    2,098
    Points
    25,112
    Level
    48
    Thumbs Up
    Received: 48
    Given: 52

    Re: Malware on DM Register website

    Actually this is not an unusual situation. Couple of months ago, similar situation also occured in Startribune website. My computer was infected :(



  7. #7
    Pro
    Points: 57,203, Level: 74
    Level completed: 11%, Points required for next Level: 1,347
    Overall activity: 11.0%
    Achievements:
    Veteran50000 Experience Points
    jtdoyle1's Avatar
    Join Date
    Apr 2006
    Location
    Ankeny, IA
    Posts
    2,126
    Points
    57,203
    Level
    74
    Thumbs Up
    Received: 61
    Given: 3

    Re: Malware on DM Register website


  8. #8
    Addict
    Points: 174,460, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 0%
    Achievements:
    SocialVeteran50000 Experience Points
    GeronimusClone's Avatar
    Join Date
    Oct 2008
    Location
    Des Moines, IA
    Posts
    8,249
    Points
    174,460
    Level
    100
    Thumbs Up
    Received: 1
    Given: 0

    Re: Malware on DM Register website

    Quote Originally Posted by isuno1fan View Post
    I was on it this morning and my Norton identified something.
    same here


    Quote Originally Posted by MNCyGuy View Post
    The only answer to "who/what is GeronimusClone?" is in fact "GeronimousClone". You're like The Todd on Scrubs.
    Quote Originally Posted by Angie View Post
    This is why you're my favorite

    Quote Originally Posted by MoreCowbell View Post
    GC, he's obviously all man. And I don't think Ellen would go *****, even for GC...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
  • TV: Fox Sports 1
  • Iowa State vs. Kansas State
  • September 6, 2014
  • 11:00 AM