Difficulties accessing SpywareInfo forums AND Merijn web sites?

[LuckyStrike]

Anyone had difficulties accessing either of these sites today? How about
checking for updates for CWShredder, and not "finding" site? This just me
(and therefore some malicious spyware/hijack), or have others experienced
this today?

 

[Mike Burgess]

LS,
From Mike Healon:

<quote>
Spywareinfo.com is under a massive distributed denial of service attack. My
hosting service is working to filter out the attacking IP addresses but
they're coming from all over the world at the moment.

Spywareinfo.com, spywareinfo.net, spywareinfo.org, tomcoyote.org,
merijn.org, malware.us, mikehealan.com and dogreader.com are off the net
until the attack is blocked.
</quote>
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid

 

[LuckyStrike]

Hope the white hats win in this OK corral showdown...and soon too. I had
also noted but forgot to mention the inability to access TomCoyote forums as
well. I'm surprised that the Net-Integration forums were still accessible.

Thanks Mike, I appreciate the heads-up on this.

Best Regards,
--
LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,
From Mike Healon:

<quote>
Spywareinfo.com is under a massive distributed denial of service attack. My
hosting service is working to filter out the attacking IP addresses but
they're coming from all over the world at the moment.

Spywareinfo.com, spywareinfo.net, spywareinfo.org, tomcoyote.org,
merijn.org, malware.us, mikehealan.com and dogreader.com are off the net
until the attack is blocked.
</quote>
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
-----------------------------------------------------------
message news:[email protected]...

Anyone had difficulties accessing either of these sites today? How about
checking for updates for CWShredder, and not "finding" site? This just me
(and therefore some malicious spyware/hijack), or have others experienced
this today?

 

[Guest]

If you think you have spyware on your machine you can try Adaware 6.0 at downlod.com It works great. get most of the crap. Hope this helps untill they cool out the jerks.

 

[LuckyStrike]

Larry,

Have it already (Ad-Aware), along with a slew of other apps. Just thought
there might have been something "new and clever" that could have possibly
slipped through the cracks. ;-)

Thanks for your thoughts.
--
LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

If you think you have spyware on your machine you can try Adaware 6.0 at

downlod.com It works great. get most of the crap. Hope this helps untill
they cool out the jerks.

 

[PA Bear]

*Damn!*

 

[LuckyStrike]

Ummm...huh?

 

[LuckyStrike]

As of about 12:20 am (mst) CWShredder is again able to update, but this is
what is obtained when tying to access SpywareInfo Support. I am not certain
if the URL will be of any use, but it was:

http://forums.spywareinfo.com/index.php?act=idx

Copied and pasted from that page is the following:

Warning: mysql_connect(): Lost connection to MySQL server during query in
/home/swicom/domains/spywareinfo.com/public_html/forums/sources/Drivers/mySQ
L.php on line 67

Warning: mysql_select_db(): supplied argument is not a valid MySQL-Link
resource in
/home/swicom/domains/spywareinfo.com/public_html/forums/sources/Drivers/mySQ
L.php on line 70
ERROR: Cannot find database swidotcom_swiforums
Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource
in
/home/swicom/domains/spywareinfo.com/public_html/forums/sources/Drivers/mySQ
L.php on line 103

Error Returned

mySQL query error: DELETE FROM ibf_sessions WHERE running_time < 1076566720
or ip_address='170.215.92.182'

mySQL error: Lost connection to MySQL server during query
mySQL error code:
Date: Thursday 12th of February 2004 01:18:40 AM
--

LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------


There appears to be an error with the SWI Forums database.
You can try to refresh the page by clicking here, if this does not fix the
error, you can contact the board administrator by clicking here

LS,
From Mike Healon:

<quote>
Spywareinfo.com is under a massive distributed denial of service attack. My
hosting service is working to filter out the attacking IP addresses but
they're coming from all over the world at the moment.

Spywareinfo.com, spywareinfo.net, spywareinfo.org, tomcoyote.org,
merijn.org, malware.us, mikehealan.com and dogreader.com are off the net
until the attack is blocked.
</quote>
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

message news:[email protected]...

Anyone had difficulties accessing either of these sites today? How about
checking for updates for CWShredder, and not "finding" site? This just me
(and therefore some malicious spyware/hijack), or have others experienced
this today?

 

[Guest]

If you can, (I do this all the time) type the file names into say google.com like this "file.dll" and if there is something goofy with it you will be pointed to all kinds of groups and information. I had one machine that this odd entry kept comming back after I removed it, found a group that had an uninstaller for the spy ware junk. Hope this helps.

 

[LuckyStrike]

I do searches for things like that often. What is returned are ones typical
results - gratefully. What would bother me is if *nothing* would be returned
in such a search.
--
LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

If you can, (I do this all the time) type the file names into say

google.com like this "file.dll" and if there is something goofy with it you
will be pointed to all kinds of groups and information. I had one machine
that this odd entry kept comming back after I removed it, found a group that
had an uninstaller for the spy ware junk. Hope this helps.

 

[Mike Burgess]

LS,

"forgot to mention the inability to access TomCoyote forums"

They are all running on the same server ...... so you attack the
server and they all go down [ugh!]
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

Hope the white hats win in this OK corral showdown...and soon too. I had
also noted but forgot to mention the inability to access TomCoyote forums as
well. I'm surprised that the Net-Integration forums were still accessible.

Thanks Mike, I appreciate the heads-up on this.

Best Regards,
--
LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,
From Mike Healon:

<quote>
Spywareinfo.com is under a massive distributed denial of service attack. My
hosting service is working to filter out the attacking IP addresses but
they're coming from all over the world at the moment.

Spywareinfo.com, spywareinfo.net, spywareinfo.org, tomcoyote.org,
merijn.org, malware.us, mikehealan.com and dogreader.com are off the net
until the attack is blocked.
</quote>
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
-----------------------------------------------------------

in
message news:[email protected]...

 

[LuckyStrike]

Mike,

Apparently the situation has gotten somewhat in hand, and I have posted what
I found on SpywareInfo Forums just a short while ago.

http://forums.spywareinfo.com/index...b79f182b81a&showtopic=32447&st=0&#entry169145

For the benefit of those accessing this directly, I include this snippet:

Subject: Latest info on DDoS of SpywareInfo Forums, TomCoyote, et al

Copied and pasted from SpywareInfo Forums:
Posted: Feb 12 2004, 03:07 PM

Quoting: Mike Healan
We ended up having to block a hell of a lot of the net last night, but we
finally killed off the attack. Now we're trying to figure out what to
unblock. I'm even blocked at the moment. I'm here through a proxy server.
<end of quote>
CWShredder is also able to access updates again.

Thanks, and best regards.
--
LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,

"forgot to mention the inability to access TomCoyote forums"

They are all running on the same server ...... so you attack the
server and they all go down [ugh!]
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

 

[Mike Burgess]

LS,
I still can't get there .........
I ran a "trace" and it's stopping on the 13th hop?
Looks like the attack is coming from random unpatched
machines, then set to DOS the SWI server.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

Mike,

Apparently the situation has gotten somewhat in hand, and I have posted what
I found on SpywareInfo Forums just a short while ago.

http://forums.spywareinfo.com/index...b79f182b81a&showtopic=32447&st=0&#entry169145

For the benefit of those accessing this directly, I include this snippet:

Subject: Latest info on DDoS of SpywareInfo Forums, TomCoyote, et al

Copied and pasted from SpywareInfo Forums:
Posted: Feb 12 2004, 03:07 PM

Quoting: Mike Healan
We ended up having to block a hell of a lot of the net last night, but we
finally killed off the attack. Now we're trying to figure out what to
unblock. I'm even blocked at the moment. I'm here through a proxy server.
<end of quote>
CWShredder is also able to access updates again.

Thanks, and best regards.
--
LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,

"forgot to mention the inability to access TomCoyote forums"

They are all running on the same server ...... so you attack the
server and they all go down [ugh!]
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

 

[LuckyStrike]

It's been touch and go; like that old Kinks song "All the Day and All of the
Night". One minute one can access it or CWShredder Update, and the next
"minute" it just bogs down to a halt. I agree with Siljaline on this one;
the announcement was a bit premature, because again, right now, none of
those sites/updaters are working.

For TomCoyote Forums, 22 hops and it was not halted, but the page could not
be displayed. All traces seem to end in Atlanta? Ditto for SWI. I am no
expert at this matter.

Related (in a way) to this issue Mike, do you think it might be advisable to
un-install the MSVM and simply use the Sun Java thing? I am sick of seeing
this CWShredder "you have a variant of CWS SmartSearch.2" and then it
reports the system as being clean? The claim is that the "ByteVerifyer
Patch" (unavailable for my W98se version of MSVM 5.00.3810) should be
installed, or to remove MSVM altogether.
--

LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,
I still can't get there .........
I ran a "trace" and it's stopping on the 13th hop?
Looks like the attack is coming from random unpatched
machines, then set to DOS the SWI server.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

message news:[email protected]...

Mike,

Apparently the situation has gotten somewhat in hand, and I have posted what
I found on SpywareInfo Forums just a short while ago.

http://forums.spywareinfo.com/index...b79f182b81a&showtopic=32447&st=0&#entry169145

For the benefit of those accessing this directly, I include this snippet:

Subject: Latest info on DDoS of SpywareInfo Forums, TomCoyote, et al

Copied and pasted from SpywareInfo Forums:
Posted: Feb 12 2004, 03:07 PM

Quoting: Mike Healan
We ended up having to block a hell of a lot of the net last night, but we
finally killed off the attack. Now we're trying to figure out what to
unblock. I'm even blocked at the moment. I'm here through a proxy server.
<end of quote>
CWShredder is also able to access updates again.

Thanks, and best regards.
--
LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,
"forgot to mention the inability to access TomCoyote forums"
They are all running on the same server ...... so you attack the
server and they all go down [ugh!]
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

 

[Mike Burgess]

LS,

"un-install the MSVM and simply use the Sun Java thing"

Yes you could do that, but you'd be much better off upgrading
the OS. (if possible) I can't say much about the Sun version, as
I don't use it, but it seems to cure the problem.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

It's been touch and go; like that old Kinks song "All the Day and All of the
Night". One minute one can access it or CWShredder Update, and the next
"minute" it just bogs down to a halt. I agree with Siljaline on this one;
the announcement was a bit premature, because again, right now, none of
those sites/updaters are working.

For TomCoyote Forums, 22 hops and it was not halted, but the page could not
be displayed. All traces seem to end in Atlanta? Ditto for SWI. I am no
expert at this matter.

Related (in a way) to this issue Mike, do you think it might be advisable to
un-install the MSVM and simply use the Sun Java thing? I am sick of seeing
this CWShredder "you have a variant of CWS SmartSearch.2" and then it
reports the system as being clean? The claim is that the "ByteVerifyer
Patch" (unavailable for my W98se version of MSVM 5.00.3810) should be
installed, or to remove MSVM altogether.
--

LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,
I still can't get there .........
I ran a "trace" and it's stopping on the 13th hop?
Looks like the attack is coming from random unpatched
machines, then set to DOS the SWI server.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

in
message news:[email protected]... posted
what

http://forums.spywareinfo.com/index...b79f182b81a&showtopic=32447&st=0&#entry169145

For the benefit of those accessing this directly, I include this snippet:

Subject: Latest info on DDoS of SpywareInfo Forums, TomCoyote, et al

Copied and pasted from SpywareInfo Forums:
Posted: Feb 12 2004, 03:07 PM

Quoting: Mike Healan
We ended up having to block a hell of a lot of the net last night, but we
finally killed off the attack. Now we're trying to figure out what to
unblock. I'm even blocked at the moment. I'm here through a proxy server.
<end of quote>
CWShredder is also able to access updates again.

Thanks, and best regards.
--
LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,
"forgot to mention the inability to access TomCoyote forums"
They are all running on the same server ...... so you attack the
server and they all go down [ugh!]
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a

HOSTS
file

http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid

 

[PA Bear]

Send us the All Clear when these bad-guys are corraled, will ya, Mike? It's
getting kinda cramped here under my desk, reliving the Duck & Cover days of
my youth.
--
~PA Bear

LS,
I still can't get there .........
I ran a "trace" and it's stopping on the 13th hop?
Looks like the attack is coming from random unpatched
machines, then set to DOS the SWI server.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid

in
message news:[email protected]...

Mike,

Apparently the situation has gotten somewhat in hand, and I have posted what
I found on SpywareInfo Forums just a short while ago.

http://forums.spywareinfo.com/index...b79f182b81a&showtopic=32447&st=0&#entry169145

For the benefit of those accessing this directly, I include this snippet:

Subject: Latest info on DDoS of SpywareInfo Forums, TomCoyote, et al

Copied and pasted from SpywareInfo Forums:
Posted: Feb 12 2004, 03:07 PM

Quoting: Mike Healan
We ended up having to block a hell of a lot of the net last night, but we
finally killed off the attack. Now we're trying to figure out what to
unblock. I'm even blocked at the moment. I'm here through a proxy server.
<end of quote>
CWShredder is also able to access updates again.

Thanks, and best regards.
--
LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,
"forgot to mention the inability to access TomCoyote forums"
They are all running on the same server ...... so you attack the
server and they all go down [ugh!]
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

 

[Mike Burgess]

PA Bear,
LOL ...... good one! ..
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

Send us the All Clear when these bad-guys are corraled, will ya, Mike? It's
getting kinda cramped here under my desk, reliving the Duck & Cover days of
my youth.
--
~PA Bear

LS,
I still can't get there .........
I ran a "trace" and it's stopping on the 13th hop?
Looks like the attack is coming from random unpatched
machines, then set to DOS the SWI server.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid

in
message news:[email protected]...

Mike,

Apparently the situation has gotten somewhat in hand, and I have posted what
I found on SpywareInfo Forums just a short while ago.

http://forums.spywareinfo.com/index...b79f182b81a&showtopic=32447&st=0&#entry169145

For the benefit of those accessing this directly, I include this snippet:

Subject: Latest info on DDoS of SpywareInfo Forums, TomCoyote, et al

Copied and pasted from SpywareInfo Forums:
Posted: Feb 12 2004, 03:07 PM

Quoting: Mike Healan
We ended up having to block a hell of a lot of the net last night, but we
finally killed off the attack. Now we're trying to figure out what to
unblock. I'm even blocked at the moment. I'm here through a proxy server.
<end of quote>
CWShredder is also able to access updates again.

Thanks, and best regards.
--
LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,
"forgot to mention the inability to access TomCoyote forums"
They are all running on the same server ...... so you attack the
server and they all go down [ugh!]
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid
--

 

[LuckyStrike]

I'll give the un-install of the MSVM a shot. Should this prove to be a
mistake, I'll simply re-install it again. Side note: I already do have Sun
Java installed, but at least the MS one didn't put an applet in the Control
Panel! Grrrrr.

Upgrade? But we're so fond of this one! ;-)

Again Mike, my thanks.
--

LuckyStrike
(e-mail address removed)
--------------------------------------------------------------------

LS,

"un-install the MSVM and simply use the Sun Java thing"

Yes you could do that, but you'd be much better off upgrading
the OS. (if possible) I can't say much about the Sun version, as
I don't use it, but it seems to cure the problem.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid