Another Virus attack here via PM
 

Beware, this morning in my e-mail it informed me I have a another PM with the following message which contained a URL address to click on:

You have received a new private message at Parker Gun Collectors Association Forums from Eternity, entitled "Pete Lester".

To read the original version, respond to, or delete this message, you must log in here:
http://parkerguns.org/forums/private.php

This is the message that was sent:
***************
Hey,
I'm new here, how's it going?

"The most fundamental harm we can do to ourselves is to remain ignorant by not having the courage and the respect to look at ourselves honestly and gently" - Pema Chodron

My advice, DO NOT CLICK ON THE URL IN THE MESSAGE. In fact I am not even going into Personal Messages as I am sure John Dunkle will check this out and clean it up. It stinks people amuse themselves this way.

The "Ying and Yang" of High-Tech, Pete (IMO)
 

Hackers, spammers, trollers, the whole kit and kaboodle of folks with more time on their hands and malicious destruction on their little minds. "Idle hands are the Devil's toolbox"--or something akin to that. We and the other gun interest/membership sites are fortunate to have the Internet so we can chat and compare our experiences with our Parkers, etc.

But- for reasons that beg all understanding- we get this junk too- There is both a spam filter and the Norton anti-virus set-up on this computer, but one of my married gals- bought a new wireless Laptop (Dell) at Xmas- within 3 weeks someone had planted a virus- cost her $100 to have it "scrubbed"- price we pay for the same idiots that like to deface public property (and private as well), throw empty McD's wrappers and cigarette butts out their car windows, the list is endless.

I am glad we have folks like John Dunkle and others patrolling this site- so many good things get shared here, a shame indeed to have this occur!::cuss::cuss::duck:

Pete,
I would of clicked on it, not knowing any better Thanks 4 the heads up. Did everybody get it?

think so..... I just deleated it.

I also got the same note, but it is not my PM folder. Doncha wish you could reach through the monitor and squeeze "Eternity's" head like a grape?

I didn't get it.... unsure why....

Nor did I. Wonder how it / he selected targets.

My guess is that it is triggered by PM activity. I received a legit PM last night and the "Eternity" PM shortly thereafter.

Marvin

I had one too.Thanks for the heads up, Pete.

Sounds like it piggy backs in on a PM somehow... I'll be watching. Thanks for the heads up Pete...

Hi folks,

Pete - great catch! My thanks! As well - even if you have an e-mail about a PM as Pete indicated, that PM has been deleted from all your PM boxes, the user banned and the IP address and mail domain banned as well.... Anyway, while I'm trying to get sorted to leave tonight/tomorrow - I'll try to get some code in place that:

Since it appears these are SPAM bots joining - and then just sending out PMs - what I'll do is set it up this way....

Folks can register.....
Folks need to make at least one post in public (which the SPAM bots don't seem to do);
After one post - then they can PM....

However, that being said - it WILL effect a number of legitimate and currently active users who are registered, have not posted - and are sending out legitimate PMs with their questioins.

Soooo - I sort of need to be around (and not in Haiti) when I do this, OK??

Not sure why - out of all the forums I run (and most are much larger) what is attracting the SPAM bots to only this forum?? :eek:

Have a great day!

John

Thanks John, glad you are on top of it. I am a bit virus shy after spending $150 last week to get my computer cleaned up (They had to eventually reload the operating system). The shop told me I got a new virus that came through Google and only days before Microsoft released an unscheduled patch in response to the new threat (lucky me, not). If they catch somebody creating and spreading these virus' I would be happy to be part of a 21 gun Parker firing squad errr I mean salute.

Got Lester's alert after I had already opened the message. I immediately deleted and ran my Norton. The virus scan only picked up a tracking cookie.
Bob Jurewicz

I would rather add another Parker to my arsenal than anti spyware. According to the computer shop two of the best free anti virus programs are MalwareBytes and Super Anti Spyware. I'll let John give us his opionion of them but the store put those on my puter and suggested I update them and scan with them regularly in addition to Norton.

Pete, you have to try and stay off those risque web sites. :nono:

I got one too, but it wasn't from Pete Lester, but rather from someone I'd never heard of. After reading this thread I went back to see who it was that sent it and it was gone. I believe my message said the same thing as reported above: "Hey, I'm new here, how's it going?

"The most fundamental harm we can do to ourselves is to remain ignorant by not having the courage and the respect to look at ourselves honestly and gently" - Pema Chodron"

Although I am no web guy, this Spam Bot stuff puts all those who use this forum at risk. These spam bots use a single sign in name and it seems to me that they could be stopped by the program requiring first and last names. Obviously it doesn't now and although the instructions clearly state that is required, many people just blow that off and believe that is not serious. So, if we had first and last names required before the program would let them in , this kind of spamming would cease. Also, we could do like other sites do, and require a person to request in and type in a random code. That's exactly how these other sites protect themselves. There is apparently money in data mining and we are being data mined.

If a person is concerned about them being known for participating in high end gun collecting, information that can be gathered through this site tells others of their participation. Kind of wonder whether the whole forum member list is now on somebody's else's list.

Bruce, John has that set up on the site already. First-time users must respond with a correct answer or code in order to get any further into our website.

That is correct.

That is incorrect.

That is incorrect.

We already do, and that again doesn't do anything, so your quip - once again - is incorrect, as we do that already. In fact - - it doesn't stop the bots.. We also have a "NoSpam! Verification Question"... Don't believe me? Log out - and start the REGISTRATION process...

For further clarification - see my first reply to your quip: "..Although I am no web guy.."

That is incorrect.


To quote someone I know - please refer your question to the BOD. That choice is/was their choice. I support it. If you do not - let them know.

Thank you,

John

Hey Greg!

Yea - it's no fun to be an admin if you can't have fun every once in a while ;) I deleted all the PMs that were sent by that registration, so - the one sent to you was probably deleted in that "click of a button" on my end..

:eek:

My best to you!

John

John, I appreciate your answer and respect your knowledge.

But then how do these people sign on with just one name? It happens frequently and I know you end up going back and changing it to first and last names when it is pointed out.

The spam bots I have seen just use a single name, like LusciousLips or whatever that spam bot was that some people were trying to talk to.

Best,
Bruce

Hi Bruce,

Honestly? I'm packing medical supplies in duffle bags so I can leave for Haiti at 2:00 AM, (see my post) so I really don't have time right now, OK? The only thing you need to understand from my post above is - essentially - you were incorrect in your previous comments on the subject at hand.

OTOH - if you'd to post to the thread linked above - I would appreciate your support in that thread.

John

OK John, sorry to bother you, you have other and more important matters to deal with and I'll withdraw the questions.

Thanks, Pete. I had one, too!

I got the same message the day after I recieved my membership package. I clicked on it because I thought it was a welcome to the Members followup. When I got to the site there were no messages for me. So I go to the forum and find this. I guess I better check for an infection.

Threat ended, clarification
 

The bottom line... the threat has been taken care of... and procedures to prevent it again.

A clarification..
There is a 3rd party who used a spam bot program and message to get through.
Unfortunately they hijacked the identity of a respected Buddhist writer, Pema Chodron to use as a cover, for all the Buddhist PGCA'ers.

Boy for the good old days when SPAM was for sandwiches
 

We have the Norton anti-virus set up, and about every third time when I want to reply to a e-mail (not a personal message on this PGCA forum site) they send a mixed alpha and numerical code- which I have to re-type in the blank and submit- So far, so good on my PM set-up here- but never say never.

I know as much about computers and high-tech devices of today as King Henry knew how to pack a parachute- Thanks John and the BOD and others for safeguarding our website. There is a great deal of personal data (and good natured ribbing) that goes on amongst the membership, and the information base on not only Parkers but on "guns and gunning" is way beyond price.

Best to you John and your pending visit to Haiti- sounds like the supplies and medical personnel are getting there, but the logistics of getting just the basics to the people, due to the unbelieveable damage, seems to be the "stumbling block"--

Saw on the news last night- a Lad in England started a "bike-a-thon" to raise funds for Haiti-hoped to gain a few supporters and some $- and the unexpected great response is one bright light shining at the end of the tunnel. In some way this reminds me of the parable of the boy and the starfish on the beach after a huge storm--