XandderrMan issue

[Winglica - Aerandria Community]

Winglica - Aerandria Community > Forum > Site Announcements and Board Rules > Spotlight > XandderrMan issue

[Goal:]

This Month: Goal: $30
Donations: $5 Thank you!

[Jasmine]

Just to let everyone know that I have been monitoring this guy's account for a few days now. I feared banning a person with no fault but when I logged in this morning and saw news of this guy's potential scam  / hacking abilities... I decided to ban him. I just did, a while ago. ^^

So if anyone still gets mysterious PM, please notify us ASAP.

Thank you so much to everyone who sent PMs regarding this. Really appreciate it! *hugs everyone*

[stupiidvampire]

I got a message from the douchebag:

You have just been sent a personal message by XandderrMan on Winglica - Aerandria Community.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

Hello, friend. There are viruses' activities from your computer in last few days. Strongly recommend you to check your computer. You can find a report about your computer's security and solve every problem with it here: http://www.virus-total.net/detected/stupiidvampire
Thank you. Forum member.

Reply to this Personal Message here: http://winglicans.com/index.php?action=pm;sa=send;f=inbox;pmsg=38995;quote;u=5655

[soujiro_10]

thankyou jasmine sempai

[petalo]

Yep! I got one too!

[nyanko]

OMG  i think i the only one get this msg...

i got this

Hello, friend. There are viruses' activities from your computer in last few days. Strongly recommend you to check your computer. You can find a report about your computer's security and solve every problem with it here: http://www.virus-total.net/detected/nyanko
Thank you. Forum member.

and then i click the link without knowing it was threat..  what'll happen to me now T_T

[petalo]

nyanko, for a start, I'd suggest you immediately disconnect from the internet (or any network you're connected to); i.e. isolate your computer, and start running a thorough scan, both for virus and spyware/malware, on all your drivers; also both local and external.

I'm just assuming here: If you did click on that link, and you haven't noticed any visually unfamiliar, missed any files, or any difference with your computer performance, then chances are it missed you, or it's there but currently dormant awaiting to be triggered...   Again, I'm just generally saying it.

[Jasmine]

Hello everyone!

I have already banned / deleted this account.

Also, be on a lookout for RazzorMan. We tend to believe this is the same guy. I just did the necessary action a  while ago but it would be better for all of us to be on a lookout.

Really, what is this guy thinking?! Is he on a hacking / spamming spree? 

[css19]

Hello and thank you for warning us !
I've got the same message. My computer works fine.
Thanks again !

[chinadolltin]

Thanks so much Jasmine. 

I got the same message too and clicked on the link. After that my laptop's performance went down the drain so I reformatted it twice. Do you guys think it still affects my system or something?   

[Jasmine]

Heads up guys.. I think this pesky person / bot is back.

Thank you to the warning of some members I just banned an account named "Dersterman". If you see this name somewhere else, please do be careful and not click on any suspicious link.

[redrosetmc]

Yeah, I just picked up spam from Dersterman. Same thing as XandderrMan stuff about antivirus yada yada yada...

[Pride_Demon_Princess]

i don't get it, does this person get a kick out of effing people over?

[Jasmine]

Who knows? I'm getting annoyed about it >_>

People from other forums seem to be experiencing the same issues. 

[pixie]

I seem that it's not over, there is another one being sent out. I just got one today.

[DPWolf]

Hey guys, just thought I should post this here because I got the PM too.

The member that you're dealing with is not a person sitting at a computer, it's a bot.
A bot is a program that is programmed to do certain tasks - sometimes good, sometimes bad. Most are harmless, like spiders, and are used just to analyze what files and data are on a website.

The one you're dealing with, however, is a malicious bot.
http://en.wikipedia.org/wiki/Internet_bot#Malicious_purposes
^ See there for more details
More specifically, the Virus/worm. The bot is programmed to send out that PM - which is why it is always the same and is signed "Forum Member" so it can be sent out to ANY forum.
The best advice I can give you guys, speaking from personal experience, is to ban the IP and email (if you can), and make a general announcement that the entire site can see which would hopefully prevent anyone from clicking on the link.
Outside of that I don't know what else you could do, I'm a mod on a vBulletin forum and have never been staff on a SMF site, so I don't know what your Control Panel looks like/is capable of.

Best of luck to you guys; Jasmine (I'm assuming you're the owner), if the bot persists I'd suggest you contact the Simple Machines Community and if they could possibly help you.