A lifelog of a well-travelled single parent who had a life extension in 2000, blogs indiscriminately about her journey through life fulfilling unfinished business and promises that will soon complete her existence...

::Spam? Worm? Or, a Bot?

Thursday, October 07, 2004

Are you an ICQ user? Did you ever received a message on ICQ today to update your current ICQ program just like the one below?

[11:49] 261277622: Hello Laila* You need an update for icq! TEAM_ICQ
[11:50] Laila*: why?
[11:50] 261277622: Click on the link to get the update!
            http://portfolio.dotgeek.org/icq_update.exe
[11:50] Laila*: thanks for your concern....
[11:50] 261277622: Click on the link to get the update!
            http://portfolio.dotgeek.org/icq_update.exe
[11:51] Laila*: r u a bot?
[11:51] 261277622: Click on the link to get the update!
            http://portfolio.dotgeek.org/icq_update.exe

Well, I suspected this is run by a bot and I checked the site http://portfolio.dotgeek.org/ and it looks neat but, why they have to spam me to update my ICQ? However, it looks suspicious when I saw COM plugins? And I had thought, is this site one of those spreading spyware worms that resides in a victim's OS? But, WHY?

After I cooked our lunch and I went back to relax infront of my PC, I received again similar message but from ICQ number 292268288! Playing smart, I replied to it with their update message and, the same message was sent to me exactly like the one above...

I verified the domain owner of http://portfolio.dotgeek.org/ and here is what I found:

Registrant:
David Costa
Place de la Poste 4
Delemont 2800
Switzerland

Registered through: GoDaddy.com (http://www.godaddy.com)
Domain Name: DOTGEEK.ORG
Created on: 30-Aug-03
Expires on: 30-Aug-05
Last Updated on: 17-Mar-04

Administrative Contact:
Costa, David Linux@college.ch
Place de la Poste 4
Delemont 2800
Switzerland
01141324
Technical Contact:
Costa, David Linux@college.ch
Place de la Poste 4
Delemont 2800
Switzerland
01141324

Domain servers in listed order:
NS.DOTGEEK.ORG
NS2.DOTGEEK.ORG


Posted on October 7, 2004 06:44 PM TrackBack


butterfly Let me know you were here, your thoughts are welcome!

Hello, Elegant John. Sometimes, I was thinking how can we file a complain against those spammers or hackers damaging our files and data.

My PC until now is infected with spyware ads that popup each time I run a program associated with internet explorer. It isn't funny they are redirecting me to download their software to get rid of spywares ads they created... it's causing me inconvenience especially when I was running Yahoo! webcam. I cannot watch my son's webcam without suffering these ads popping up in my desktop...


Posted by: Laila* on October 10, 2004 07:07 PM

I would approach that very cautiously Laila. Anything with an .exe, .pif, etc should be suspect these days.

I'm experimenting with SUSE Linux which is virtually immune to all these viri and spam attacks. They have the new 9.2 Pro coming out on 1 Nov. Might be something you could uses


Posted by: Elegant John on October 10, 2004 11:03 AM

I did. It's pretty :)

I won about 21 mystery points.


Posted by: Afonso on October 8, 2004 01:52 PM

Did you see my banner? And, were you able to receive any mystery credits?


Posted by: Laila* on October 8, 2004 02:15 AM

Hey, guess what Laila?
BlogExplosion just sent me to your blog...hehe


Don't download anything other than from sites you know well Laila. Or if you're very, very curious, first install one of those programs that allows us to track changes in the registry, etc.


Posted by: Afonso on October 8, 2004 02:05 AM

I checked the three sites you sent me but, I just wonder what was in that .exe file I must open? Is it some kind of trojan virus that will infect my PC?

I am not over yet with spyware worm that controls internet explorer...


Posted by: Laila* on October 8, 2004 12:09 AM

Guess what? I googled and found the following sites:

http://www.college.ch/?page=faculty

http://www.collegelinux.org/

http://www.osnews.com/story.php?news_id=3305


Posted by: Afonso on October 7, 2004 11:54 PM

Please write responsibly. Thank you!









Remember personal info?
butterfly | HOME | About Me | My Friends | My Country | My Photos |
© 2003-2007 Laila*
This site is licensed under a Creative Commons License.