Re: msconfig and trojans.


On Thu, 15 Dec 2005, Dave wrote:

[snip]
> However, on a possibly related point, google.com just gave the following
> error message which I understand suggests a DDoS attack is occuring:
>
> "...we can't process your request right now. A computer virus or spyware
> application is sending us automated requests, and it appears that your
> computer or network has been infected.
>
> We'll restore your access as quickly as possible, so try again soon. In
> the meantime, you might want to run a virus checker or spyware remover
> to make sure that your computer is free of viruses and other spurious
> software."
>
> Now, I am actually using a proxy to connect to google. Therefore, are
> other people using the same proxy to invoke a DDoS, or do I still have a
> problem (ZoneAlarm Pro, Ad-Aware, Spybot, and a couple of other AV
> products revealed no problems).
>
> I have tried www.google.com several more times with no problems.

Were you searching for "phpbb" by any chance?

I have seen reports that a trojan is exploiting a security hole in
phpbb and using Google searches to look for other potentially vulnerable
systems. The repeated searches for that string from multiple infected
systems is apparently overloading Google's servers and they have been
forced to take defensive measures against it.

--
Norman De Forest http://www.chebucto.ns.ca/~af380/Profile.html
af380@xxxxxxxxxxxxxx [=||=] (At the Sign of the Flashing Cursor)
"Oh how I miss the days when it was easier to catch gonorhea than a
computer virus." -- Big Will in alt.comp.virus, March 9, 2005

.

Relevant Pages

  • Re: Window
    ... I keep getting logged out of phpbb forums. ... On the NIC properties click on Power Settings or Management and make sure ... Under General Tab clear your History, ... selected for a proxy server or auto detect. ...
    (microsoft.public.windowsxp.general)
  • Re: Apple make James Taylor happy
    ... Google) that has full access to your Google tracking cookie and search ... Running a proxy is a man-in-the-middle attack, ... email to oshea dot j dot j at gmail dot com. ...
    (uk.comp.sys.mac)
  • Re: Encoding für Umlaute
    ... lieber bei Microsoft schreibe. ... Das erste Posting könnte man ja über Google ... Was kann denn der Proxy hervorrufen, dass die Zeichen nicht richtig rüber ... Bzw. was muss ich den Admin fragen? ...
    (microsoft.public.de.german.entwickler.dotnet.asp)
  • Re: Googles gonna hate this!
    ... without google knowing, also when you click a link in the results the ... destination site doesnt know who you are and neither does your ISP! ... The proxy does not work properly. ... A second test ...
    (comp.security.misc)
  • Re: Im Working My Way Back to The Beginning of the Newsgroup
    ... Google for like 10 hours. ... but your query looks similar to automated requests from a computer ... you might want to run a virus checker or spyware remover to ...
    (rec.music.hip-hop)