Printable Version of Topic

Click here to view this topic in its original format

Everlasting Star Community _ Announcements _ Hoax Private Messages On Es

Posted by: Tara Jan 19 2010, 07:20 PM

Hi everyone,

It has been brought to my attention that someone is sending hoax private messages to ES members.

The message says

Important message from the forum administration

Dear -------!

A virus alert was noticed on your computer.
We highly recommend you to check your computer and perform online virus check at our site immediately:

Please ignore this message as it is a fake and clicking the link may harm your computer. I have not pasted the link here in case anyone clicks it by mistake. We are looking into the matter and will get back to you ASAP.

Posted by: Nancy Jan 19 2010, 10:16 PM

Thanks, Tara

Posted by: Tara Jan 20 2010, 09:18 AM

You're both very welcome, of course - and the sender has now been deleted. Everyone, please PM me or another mod, or post here if you receive any more messages of this kind.

Posted by: mels Jan 20 2010, 04:00 PM

Dear all,

We are doing our best to ban spammers and delete their messages as fast as we can, but some of you will inevitably be exposed to their messages and links before we do so. Because of that, I would like to insist on the fact that forums are just like email: if you ever receive a message (PM or public post) containing a link, please make sure that the source is a trusted member before you click on the link.

Also, I've noticed that this PM was sent with a signature stating that it was sent from "Forum Administration" : please note that any security or system issues issues here would only be posted by the administrators : Tara, Paju or myself. Please make sure that you never, ever trust or click on a link on a so called "official message" that hasn't been sent by one of us.

If you are unsure of what to do, please PM us or post a message on the "Off Topic" boards, someone will get back to you ASAP and let you know if it is safe to click or not smile1.gif


Posted by: Nettie Jan 20 2010, 04:26 PM

Wow Thanks Mels. I was afraid to go back on ES thinking I might get into trouble. Thank you for letting us know. bye1.gif

Posted by: Ultraviolet Jan 20 2010, 08:27 PM

You lucky ones!

I got to this site few days ago - a pop-up window opened up claiming etc, you know - first I checked my regular virus safety etc = everything's ok

then I came back here - I had a stomach ache, shouldn't have come - I quess something went wrong in my brain - I opened the link -

Yeah, blasted - my whole computer program by that - 2-3 days it's been now with this new machine, minus 300 euros and everything else,I bought a new computer from a friend + plus the program, the computer itself is couple of years old, the screen 6 months - everything's OK, better than for a long time, but -

I certainly wish for friends here not to open that link !!!!!!


Well, as it now happened that I opened the link - something like this has never happened to me before, years ago I managed to get some trojan into my machine while trying to download music- but those links I never open - and now I did,

so after opening it, it starts popping up allways new windows asking are you sure for your safety and ok and OK and go on without protection - and a new window again and again and again ...till it leads you to a page where it asks the numbers of your credit card - well of course I realised in the beginning that it was a bloody hoax, called my friend quite soon but couldn't get back from there and I was unable to get rid of the everlasting popping up windows and messages; by that time my whole computer program was demolished.

Luckily I had decided allready in the autumn to buy a new computer with a new program - but when my money situation would have been better, but had to buy it now.
These things happen runninwild.gif

Posted by: Nicotschka Jan 24 2010, 02:33 PM

Gosh am sorry to hear that Ultraviolet! I wish I would have known earlier about it, then I would have told our admins sooner. This isn't the only forum where they sent such pm's... such people are, sorry to say it, a simple pain in the a**.

Posted by: Nancy Jan 25 2010, 11:01 PM

I just got a second one today, from " AdminGirLX"

Posted by: Nancy Jan 26 2010, 01:23 AM

And just deleted the 3rd! Not complaining, guys. Just letting you know. v.gif

Posted by: Tara Jan 26 2010, 09:39 AM

Thanks everyone - I have deleted the member, but please let me know if this continues. We are looking into the source, but meanwhile please be extra careful and don't open any messages from members you don't know from the boards. And Ultraviolet, I hope everything is OK with you and your PC now - spammers are such lowlifes.

Posted by: Nicotschka Jan 26 2010, 09:49 AM

I don't know if this is possible over here at this forum-software, but you could disallow certain usernames. Like everything which contains admin*, or mod*, so they can not register with a member name like 'Administrator'-which makes it more obvious that these PM's are not from a staff member.

Posted by: Ultraviolet Jan 26 2010, 05:22 PM

Thanks, Tara, everything's ok.

And Nicotschka, that could be a good idea, though I'm not an expert to tell.

Couple of minutes ago when I arrived here, a pop-up window opened again in front of me, claiming again that I probably have a virus in my computer, and I seem to have received two new messages - I'm afraid to go to my profile page, I think I'll delete them tomorrow in a library.

I thought, have they picked up some members' names to some kind of a list and start sending messages for certain names - this might be a bit paranoic; I even wondered should I change my username....I allready invented a new one, in case - If I decide to change it, I thought about the name that was MM's role name in a film that was directed by a person who also directed MM in another film during which MM wore a wig and suffered from the heat.

Posted by: Tara Jan 26 2010, 05:38 PM

I found the domain that these messages were coming from and it is now blocked. Let's hope that puts an end to it.

Posted by: Nicotschka Jan 28 2010, 02:58 PM

Same here....

Posted by: Alanma Jan 28 2010, 04:12 PM

I have had 'your computer has been infected.........' warnings alleging to be from AOL.

These do not appear to be via ES, but as a pop-up when starting the computer.
They are very convincing.
I immediately ran a Norton full scan, and that zapped the b*******, at least for the time being.
Whatever you do DO NOT OPEN any such.

A friend had one apparently from Microsoft, popping up on Facebook.

Posted by: mels Jan 28 2010, 05:27 PM

QUOTE(Harald Haefker @ Jan 28 2010, 01:47 PM) *
became another one...from....StopAdmin

stretcher.gif furious.gif birgits_faint.gif

Member suspended.

Posted by: sao girl Jan 29 2010, 05:51 PM

QUOTE(mels @ Jan 29 2010, 02:27 AM) *
Member suspended.

Thank you I also got that message

Posted by: timetravelangel Jan 29 2010, 06:46 PM

Just to let you know I got a PM from MannInBlackk:

Hello, friend. There are viruses' activities from your computer in last few days. Strongly recommend you to check your computer. You can find a report about your computer's security and solve every problem with it here:[URL DELETED] Thank ...MannInBlackk is a member of the Member group and has 0 posts.
Sent on: Today, 05:31 AM

Posted by: mels Jan 29 2010, 07:03 PM

Thanks for the heads up Angel.
This "member"'s account has also been suspended.

I've set up new rules and permissions on accounts, which shoud calm things down.
Please let us know if you still experience issues.


Posted by: Nicotschka Jan 30 2010, 08:47 PM

Thanks Mels! Let's hope these idiots will stay away!

Posted by: Paju Feb 8 2010, 12:16 PM

Again, another one from ForumTeam! Don't open it!

Posted by: Nettie Feb 8 2010, 06:48 PM

QUOTE(Paju @ Feb 8 2010, 11:16 AM) *
Again, another one from ForumTeam! Don't open it!

Me too. What a drag. thumbdown.gif

Posted by: sao girl Feb 11 2010, 03:04 AM

QUOTE(Nettie @ Feb 9 2010, 03:48 AM) *
Me too. What a drag. thumbdown.gif

I have just received another two !

Posted by: mels Feb 11 2010, 11:02 AM

Whenever you receive such messages please let us know who sent them otherwise, there's nothing we can do :/

Posted by: zzxq Feb 11 2010, 06:50 PM

QUOTE(mels @ Feb 11 2010, 11:02 AM) *
Whenever you receive such messages please let us know who sent them otherwise, there's nothing we can do :/

You probably should try to block the IP of the sender instead of the name if multiple accounts are being used for sending them.

Posted by: magda24 Feb 12 2010, 09:07 AM

QUOTE(zzxq @ Feb 11 2010, 06:50 PM) *
You probably should try to block the IP of the sender instead of the name if multiple accounts are being used for sending them.

They are probably sent from different IP's. Maybe even from zombie computers.

Maybe, for the time being, it would be the best to disable the PM option, at least for members who are new and have less than 10 posts?Is it possible?

Posted by: zzxq Feb 12 2010, 04:39 PM

QUOTE(magda24 @ Feb 12 2010, 09:07 AM) *
They are probably sent from different IP's.

Maybe, but possibly not.

Maybe even from zombie computers.

I don' t think that is likely. Then they would have to use some scripts to log in and become members of forums like these in the first place, and that would probably be too much work for real professional spammers.

Posted by: dora Feb 13 2010, 08:23 AM

ive received 2 more from Hummannic.ive received 2 more from Hummannic.ive received 2 more from Hummannic.ive received 2 more from Hummannic.ive received 2 more from Hummannic.ive received 2 more from Hummannic.ive received 2 more from Hummannic.

Posted by: Tara Feb 13 2010, 07:07 PM

QUOTE(dora @ Feb 13 2010, 07:23 AM) *
ive received 2 more from Hummannic.ive received 2 more from Hummannic.ive received 2 more from Hummannic.ive received 2 more from Hummannic.ive received 2 more from Hummannic.ive received 2 more from Hummannic.ive received 2 more from Hummannic.

Hummanic is now banned...

Posted by: zzxq Feb 13 2010, 07:08 PM

And one from Kurtymann.

Posted by: dora Feb 13 2010, 10:16 PM

Gafarroxmann sent me 2 emails. So did Kurtymann

Posted by: mels Feb 14 2010, 07:43 PM

Said members have been deleted. I tried a new manip - first one didn't work. I hope this one will do the trick.

Also please refrain from turning this topic into a discussion otherwise it will be hard for us to get straight to the info ie. members to ban.


Posted by: mels Feb 18 2010, 11:26 AM

Thanks Harald,

Message deleted, author banned smile1.gif

Posted by: dora Feb 19 2010, 12:55 AM

Cilffinzz sent me 2

Powered by Invision Power Board (
© Invision Power Services (