Go Back   RIBnet Forums > RIB talk > Other stuff
Click Here to Login

Reply
 
Thread Tools Search this Thread
 
Old 05 October 2005, 15:08   #1
Member
 
Country: UK - England
Town: Wilmslow
Boat name: Serotonin
Make: Quicksilver
Length: 3m +
Engine: Mariner 15
Join Date: Feb 2003
Posts: 712
One for the Computer wizards

Just come across this file on my laptop "WINNT\etb\pokapoka69.exe\pokapoka69.exe" Looks a bit fishy to me sounds a bit like some porno virus Any ideas as to what it is? Do I need to get rid of it?
__________________
fred bolton is offline   Reply With Quote
Old 05 October 2005, 15:20   #2
Member
 
Richard B's Avatar
 
Country: UK - England
Town: Devon
Boat name: White Ice
Make: Ranieri
Length: 5m +
Engine: Suzuki 115hp
Join Date: Jul 2002
Posts: 5,015
Just paste the name into Google....

Do you have a virus checker running and up to date? is that how you spotted it?
Richard B is offline   Reply With Quote
Old 05 October 2005, 15:21   #3
Member
 
Country: UK - England
Town: Cumbria
Length: 4m +
Join Date: Jul 2005
Posts: 126
Its a trojan: google it then kill it
__________________
stan_deezy is offline   Reply With Quote
Old 05 October 2005, 15:25   #4
Member
 
Country: UK - England
Town: Wilmslow
Boat name: Serotonin
Make: Quicksilver
Length: 3m +
Engine: Mariner 15
Join Date: Feb 2003
Posts: 712
Quote:
Originally Posted by Richard B
Just paste the name into Google....

Do you have a virus checker running and up to date? is that how you spotted it?
Virus checker not upto date yes just run MacAfee Stinger on it and it seemed to stop on this file for a long time
__________________
fred bolton is offline   Reply With Quote
Old 05 October 2005, 15:32   #5
Member
 
Country: UK - England
Town: Hampshire
Boat name: Everlong
Make: Botnia Targa 27
Length: 8m +
Engine: Volvo KAD44
Join Date: Jun 2005
Posts: 477
some useful info...

with instructions for getting rid of it..

http://forums.thatcomputerguy.us/ind...=0&#entry94932
__________________
donutsina911 is offline   Reply With Quote
Old 05 October 2005, 15:35   #6
Member
 
Country: UK - Wales
Town: swansea
Boat name: Too Blue
Make: BLANK
Length: 8m +
Engine: Suzuki DT225
Join Date: Mar 2004
Posts: 12,791
Just a quick plug - after trying out all the anti virus checkers around - including very expensive corporate ones the best I have ever come across is

http://free.grisoft.com/softw/70free...ee_344a618.exe

NOT time limited and updates all the time - has caught stuff the leading names have missed.

I seed they also do one with a personal firewall built in - no exp of that!!!
__________________
codprawn is offline   Reply With Quote
Old 05 October 2005, 15:46   #7
Member
 
Richard B's Avatar
 
Country: UK - England
Town: Devon
Boat name: White Ice
Make: Ranieri
Length: 5m +
Engine: Suzuki 115hp
Join Date: Jul 2002
Posts: 5,015
Caution!

That link not only goes directly to the executable file, but redirects to a Czech web site.

Think carefully..... Bloke on internet recommends that I go to a Czech website and download some software because he says it's the best thing since sliced bread...

Can I suggest going to grisoft.com or free.grisoft.com first and having a little look before leaping in?
Richard B is offline   Reply With Quote
Old 05 October 2005, 16:01   #8
Member
 
Country: UK - England
Town: nr Lymington
Boat name: JU-JU
Make: Halmatic PAC22
Length: 6m +
Engine: 140.5 Mermaid
Join Date: Sep 2003
Posts: 1,400
Quote:
Originally Posted by Richard B
....Think carefully..... Bloke on internet recommends that I go to a Czech website and download some software because he says it's the best thing since sliced bread...
Just to save Codprawn the trouble

Quote:
Originally Posted by codwalopprawn
I DIDN’T SAY THAT…….WHY DON’T PEOPLE ON HERE LISTEN……I HAVE A FRIEND……STOP PICKING ON ME
__________________
Scary Des is offline   Reply With Quote
Old 05 October 2005, 16:06   #9
Member
 
Nick Hearne's Avatar
 
Country: UK - England
Town: Bucks
Boat name: Blue & Ding Dong
Make: Ribeye,SR4 & Bombard
Length: 6m +
Engine: 115,50 & 15Hp Yams
Join Date: Feb 2004
Posts: 3,252
Thanks Richard for you sensible words! I have to admit to downloading this & have now deleted it after your advice!
Gullible O'Hearne
__________________
Nick Hearne is offline   Reply With Quote
Old 05 October 2005, 16:08   #10
Member
 
Richard B's Avatar
 
Country: UK - England
Town: Devon
Boat name: White Ice
Make: Ranieri
Length: 5m +
Engine: Suzuki 115hp
Join Date: Jul 2002
Posts: 5,015
Hey, I'm sure it's fine, but just be aware! I've got a superb firewall set up here, and yes, I clicked on it to have a look. Only when the firewall stopped me did I start to take a closer look...
Richard B is offline   Reply With Quote
Old 05 October 2005, 16:09   #11
Member
 
Country: UK - Wales
Town: swansea
Boat name: Too Blue
Make: BLANK
Length: 8m +
Engine: Suzuki DT225
Join Date: Mar 2004
Posts: 12,791
Quote:
Originally Posted by Richard B
Caution!

That link not only goes directly to the executable file, but redirects to a Czech web site.

Think carefully..... Bloke on internet recommends that I go to a Czech website and download some software because he says it's the best thing since sliced bread...

Can I suggest going to grisoft.com or free.grisoft.com first and having a little look before leaping in?

And WHERE do you think the link comes from in the first place????

Sorry for trying to be helpfull I am sure!!!
__________________
codprawn is offline   Reply With Quote
Old 05 October 2005, 16:11   #12
Member
 
Country: UK - Wales
Town: swansea
Boat name: Too Blue
Make: BLANK
Length: 8m +
Engine: Suzuki DT225
Join Date: Mar 2004
Posts: 12,791
Quote:
Originally Posted by Nick Hearne
Thanks Richard for you sensible words! I have to admit to downloading this & have now deleted it after your advice!
Gullible O'Hearne
Well then you have just got rid of the best bit of free software I have seen in a long time - but hell what do I know.......
__________________
codprawn is offline   Reply With Quote
Old 05 October 2005, 16:12   #13
Member
 
Richard B's Avatar
 
Country: UK - England
Town: Devon
Boat name: White Ice
Make: Ranieri
Length: 5m +
Engine: Suzuki 115hp
Join Date: Jul 2002
Posts: 5,015
Not doubting your intentions, but the road to hell is paved with good intentions.

Can I suggest that you ammend your link to go to the download web page rather than directly to the executable.
Richard B is offline   Reply With Quote
Old 05 October 2005, 16:19   #14
Member
 
Country: UK - Wales
Town: swansea
Boat name: Too Blue
Make: BLANK
Length: 8m +
Engine: Suzuki DT225
Join Date: Mar 2004
Posts: 12,791
Quote:
Originally Posted by Richard B
Not doubting your intentions, but the road to hell is paved with good intentions.

Can I suggest that you ammend your link to go to the download web page rather than directly to the executable.
I wouldn't post a link if I hadn't checked it first!!!

Looking at the header would tell anyone that it comes from grisoft.

I ONLY put the direct link to make it EASIER for people so they wouldn't have to read through all the crap first!!!

Obviously if the path was something like

warez.russianbabes.grumpyqualifiednerd.ru/mustseethis.src

I wouldn't have posted it!!!
__________________
codprawn is offline   Reply With Quote
Old 05 October 2005, 16:21   #15
Member
 
Nick Hearne's Avatar
 
Country: UK - England
Town: Bucks
Boat name: Blue & Ding Dong
Make: Ribeye,SR4 & Bombard
Length: 6m +
Engine: 115,50 & 15Hp Yams
Join Date: Feb 2004
Posts: 3,252
Quote:
Originally Posted by codprawn
Well then you have just got rid of the best bit of free software I have seen in a long time - but hell what do I know.......
Codders, don't be like that surely you can see Richards point!
__________________
Nick Hearne is offline   Reply With Quote
Old 05 October 2005, 16:22   #16
Member
 
Country: UK - England
Town: Wilmslow
Boat name: Serotonin
Make: Quicksilver
Length: 3m +
Engine: Mariner 15
Join Date: Feb 2003
Posts: 712
Quote:
Originally Posted by codprawn
I wouldn't post a link if I hadn't checked it first!!!

Looking at the header would tell anyone that it comes from grisoft.

I ONLY put the direct link to make it EASIER for people so they wouldn't have to read through all the crap first!!!

Obviously if the path was something like

warez.russianbabes.grumpyqualifiednerd.ru/mustseethis.src

I wouldn't have posted it!!!
Glad to see everyones on form and personal abuse still flies in all directions with such vitriol,thanks everyone including Codders, but as a WUSS I'll follow Richard's advice
__________________
fred bolton is offline   Reply With Quote
Old 05 October 2005, 16:27   #17
Member
 
Richard B's Avatar
 
Country: UK - England
Town: Devon
Boat name: White Ice
Make: Ranieri
Length: 5m +
Engine: Suzuki 115hp
Join Date: Jul 2002
Posts: 5,015
Quote:
Originally Posted by codprawn
Obviously if the path was something like

warez.russianbabes.grumpyqualifiednerd.ru/mustseethis.src

I wouldn't have posted it!!!
Yep, obviously. However, be aware that links are displayed in a truncated manner.

I'll demonstrate in a very simple manner...

http://free.grisoft.com/softw/70fre-...ee_344a618.exe

Looks the same as the link you posted, but have a look at where your browser goes...
Richard B is offline   Reply With Quote
Old 05 October 2005, 16:40   #18
Member
 
Country: UK - Wales
Town: swansea
Boat name: Too Blue
Make: BLANK
Length: 8m +
Engine: Suzuki DT225
Join Date: Mar 2004
Posts: 12,791
Quote:
Originally Posted by Richard B
Yep, obviously. However, be aware that links are displayed in a truncated manner.

I'll demonstrate in a very simple manner...

http://free.grisoft.com/softw/70fre-...ee_344a618.exe

Looks the same as the link you posted, but have a look at where your browser goes...
The FIRST part is what counts

for example

www.microsoft.com

Now of course it may be possible they have hijacked a large companies servers but if they have you would be in trouble anyway.
__________________
codprawn is offline   Reply With Quote
Old 05 October 2005, 16:49   #19
Member
 
Richard B's Avatar
 
Country: UK - England
Town: Devon
Boat name: White Ice
Make: Ranieri
Length: 5m +
Engine: Suzuki 115hp
Join Date: Jul 2002
Posts: 5,015
1. Not if a long subdomain obscured the TLD
2. Your link re-directs to .cz TLD so the assumption that the host is displayed is unsafe.
And it's only a demonstration. The fact is that there are so many "what ifs" that it's dangerous to make assumptions.
Richard B is offline   Reply With Quote
Old 05 October 2005, 16:55   #20
Member
 
Country: UK - Wales
Town: swansea
Boat name: Too Blue
Make: BLANK
Length: 8m +
Engine: Suzuki DT225
Join Date: Mar 2004
Posts: 12,791
Quote:
Originally Posted by Richard B
1. Not if a long subdomain obscured the TLD
2. Your link re-directs to .cz TLD so the assumption that the host is displayed is unsafe.
And it's only a demonstration. The fact is that there are so many "what ifs" that it's dangerous to make assumptions.
Fair enough - I SHOULD make allowances for people who aren't that knowledgable.

I can sniff a bad link out a mile off!!!!
__________________
codprawn is offline   Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off




All times are GMT. The time now is 13:15.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2024, vBulletin Solutions, Inc.