Site hacked??? @@

[gisa]

Got an interesting message today in my inbox which I'll quote here:

You have just been sent a personal message by MichealUllman on Trainz Discussion Forum.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

Dear, gisa!

Spam sending from your computer was detected.
We highly recommend you to check your computer and perform online virus check at our site immediately: http://securitytool2010.net/online-scanner/gisa
If you do not pass this test we will have to delete your account and forward a complaint to your ISP with attached log file (your IP address, etc.).

----------------------------------------------------
Forum Administration trainzforums.com

Reply to this Personal Message here: http://trainzforums.com/index.php?action=pm;sa=send;f=inbox;pmsg=2155;quote;u=901

*****

I think this site has been hacked.  I haven't posted here in over 6 months nor have I visited here in that amount of time.  This seems to be a virus spreading around...hopefully you guys can take a look at this and fix it...

Gisa ^^

[TheCannonball]

Thanks very much for the heads up Gisa, another forum I post on just had the same account registered and sending PMs with that info to users.  Just ignore and delete the message and we'll hopefully take care of it. 

Appreciate the tip-off,
Dietrich 

[gisa]

My pleasure Dietrich,


Where I live in this moment of time actually does have a high rate of spam sent out but yeah, this didn't add up.  I just typed the name of the site into google and saw all the virus stuff about it so I thought I'd warn you.

Take care and hope you guys can successfully get rid of that.



Gisa ^^

[howard334]

I was sent this message also, word for word with exception of the "Dear howard334" instead - it would appear that your database has been compromised indicated by the "personal" info such as the salutation and my email address - but I feel convinced it is more of a spam issue than a virus or Trojan, but those that click on the link provided in the email have in fact confirmed a valid email address - DO NOT USE THE LINK PROVIDED IN THE EMAIL OR IN THE PM - I think it's not a virus but rather spam to sell a software scanner or to infect the unsuspecting users computer by visiting the web link - in any event I'd bet $1.00 that they (the hackers) have all of your subscribers email addresses, so all you can do is find the back door - our email addresses are marked for life by the spammers - I'll be changing mine in my profile section now....
And it appears that they are a member as of yesterday (3/4/2010) - who is MichealUllman - they have sent a pm as well .....

[s-driver]

It's been about  1 year since I received a notable amount of spam because another site I'm registered with got hacked.  About 5 days ago I received 6 in 2 days which is more than I usually get in a year.  This could explain it.  Not unless Dillon and Tyler are getting into selling performance enhancing stuff.

Bill

[sturmtiger]

Spend  less time on the Pron sites 

[The Vezman]

This MichaelUllman guy has already been taken care of. So he won't be back to harass users with downloading spoof anti-malware software.

As far as the e-mail issue goes... Anytime you make your e-mail public, it is susceptible to spam. As far as using back door techniques to get a subscriber list, I haven't heard of anything like that and don't really know if it's plausible or not. But I do know that when you make your e-mail public, and even sometimes when you sign up for things with your e-mail account, it could be taken by spammers. If you get messages of a spam-related nature, then simply add them to your e-mail spam filter.

This of course excludes gevoSPAM's.