-
September 18th, 2008, 07:32 AM
#1
Malware leeching BW and running up bills ?
Hey there,
Just yesterday I had two clients call in and say there Telephone bill was R13000 (Um around $2000) when it is normally R850 ($100). Their ISP said they had spyware and or malware. The other client said their BW cap ran out in 2 days even though they jsut use Email. And their ISP said it was malware.
They called here and I jsut wasnt convinved that it was spyware / malware. Is this a reality and can this happen to a home user? I would assume these targeted malware attacks would target companies with unlimited BW , not a home user with a 3G cap and someone on 3G.
I told them to get the logs from the ISP.
Any advice on this?
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
-
September 18th, 2008, 01:47 PM
#2
In my experience malware is anything but "targeted". You pick up one trojan horse along the way and it lets all of its buddies in the back door. Before you blink three times your hard drive is loaded up with crap trying to phone home with all sorts of information. I'd say it's conceivable.
Side story: I once ran McAfee AV via command line outside of Windows and it was removing viruses for three days, the screen constantly scrolling at warp speed the entire time listing the stuff it removed. The machine was running Windows 98 and the user was accessing the internet via AOL dialup... This was a little over a year ago. People just pick up random crap sometimes.
-
September 18th, 2008, 02:31 PM
#3
Hey there, Sounds wicked
What exactly do you mean outside of windows - from the command line?
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
-
September 18th, 2008, 04:35 PM
#4
I believe he means from a DOS boot disk, running a scan on the harddrive...
-
September 18th, 2008, 08:38 PM
#5
I prefer to use Boot CD's that either create a Physical Environment similar to an OS but not installed on the HDD, just running straight from the RAM or just run the scan from the CD prior to booting into Windows. Make any sense? It's more efficient to scan the entire HDD because if you're booted into Windows, there are a lot of files currently being used by something else that you will not be able to scan (or at least modify) with antivirus software.
-
September 19th, 2008, 12:57 PM
#6
Hi there,
Well which AV software will scan out side of windows and if it finds anything will disinfect or delete.
I know the software I got can scan but cannot disinfect. Real bummer.
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
-
September 19th, 2008, 05:27 PM
#7
Have them check their dial-up and network connections. See if
there's more than one. Back in the ol' days (early-2000's) when
dial-up was prevalent here in the States, some malware would
create new dial-ups, hooking into 900 (pay) numbers. I've seen
phone bills jump like you're describing on 'phony' connections.
Just a thought.
“Everybody is ignorant, only on different subjects.” — Will Rogers
-
September 19th, 2008, 05:41 PM
#8
There are only three AV scanners I know of that can disinfect from the command line. F-Prot, McAfee, and Trend Micro. I'm sure there are others.
As for scanners that can disinfect from a PE (physical environment), there are many. All the conventional antispyware/antivirus programs I know of work in a PE.
-
September 21st, 2008, 01:25 AM
#9
Yes they will work from command line but it depends on how your hard drive is formatted to make the scans work from a bootable CD. NTFS is tricky since you have to load a read/write driver and then do a scan.
-
September 21st, 2008, 04:05 PM
#10
Yeah , well most PC's are ntfs these days arent they?
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
Similar Threads
-
By Aspman in forum Spyware / Adware
Replies: 20
Last Post: November 21st, 2005, 09:07 AM
-
By Egaladeist in forum Spyware / Adware
Replies: 21
Last Post: April 15th, 2005, 11:30 PM
-
By GbinaryR in forum Microsoft Security Discussions
Replies: 8
Last Post: March 30th, 2002, 09:37 PM
-
By micael in forum *nix Security Discussions
Replies: 9
Last Post: February 19th, 2002, 04:13 PM
-
By antihaxor in forum Non-Security Archives
Replies: 0
Last Post: January 24th, 2002, 05:42 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|