Virus on the Sympatico download page

Friday, July 11, 2003





On Tue 08, July, 2003 8:18 PM I sent a message to Sympatico abuse
department.



I went to your web site to download Access Manager, version 1.5c for my
client.

I was attacked by Sokets de Trois v1. Trojan horse again today Thursday,
July 10, 2003

I was attacked by Sokets de Trois v1. Trojan horse again today Friday, July
11, 2003



Norton Internet Security logs.



Alert Fri, Jul/11/2003 19:20:03 NDIS Filter Security alert displayed for
rule Default Block Sokets de Trois v1. Trojan horse.

Remote computer (download.sympatico.ca(206.47.72.106), ftp-data(20))



Unknown Fri, Jul/11/2003 19:20:02 IP Filter Rule "Default Block Sokets de
Trois v1. Trojan horse" blocked (192.168.123.117,5001). Details:

Inbound TCP connection

Local address,service is (192.168.123.117,5001)

Remote address,service is
(download.sympatico.ca(206.47.72.106),ftp-data(20))

Process name is "N/A"



Alert Thu, Jul/10/2003 12:13:06 NDIS Filter Security alert displayed for
rule Default Block Sokets de Trois v1. Trojan horse.

Remote computer (download.sympatico.ca(206.47.72.106), ftp-data(20))



Unknown Thu, Jul/10/2003 12:13:06 IP Filter Rule "Default Block Sokets de
Trois v1. Trojan horse" blocked (192.168.123.117,5001). Details:

Inbound TCP connection

Local address,service is (192.168.123.117,5001)

Remote address,service is
(download.sympatico.ca(206.47.72.106),ftp-data(20))

Process name is "N/A"



Alert Tue, Jul/08/2003 19:37:26 NDIS Filter Security alert displayed for
rule Default Block Sokets de Trois v1. Trojan horse.

Remote computer (download.sympatico.ca(206.47.72.106), ftp-data(20))



Unknown Tue, Jul/08/2003 19:37:25 IP Filter Rule "Default Block Sokets de
Trois v1. Trojan horse" blocked (192.168.123.117,5001). Details:

Inbound TCP connection

Local address,service is (192.168.123.117,5001)

Remote address,service is
(download.sympatico.ca(206.47.72.106),ftp-data(20))

Process name is "N/A"



Thursday, July 10, 2003

I have notified The liberal, The Toronto Star & The Toronto Sun. That you
have done nothing to protect all person downloading Access Manager, version
1.5c.



Wednesday, July 09, 2003

I wrote the CRTC



I will be notifying news groups today to try protect persons from Sympatico
failings and the spread of this virus. Sympatico failure to shut down this
virus is appalling.



I sent a copy of this email to The Honorable Ernie Eves