Please note that new user registrations disabled at this time.

Worm attack?

Important announcements and related feedback. If you want something added, altered, or removed from GB, post about it here.
Post Reply
User avatar
Gwalchmai
Posts: 6252
Joined: Wed May 09, 2001 11:00 am
Location: This Quintessence of Dust
Contact:

Worm attack?

Post by Gwalchmai »

Hmmm. Lately, my Norton Anti Virus tells me that it has blocked a worm trying to get to my computer when I navigate through this site. Usually happens about once a session. Tonight, it seems to be popping up about everytime I enter a forum. Here's the info Norton gives me:

Intrusion: HTTP Embed Tag NPDSPlay DLL BO
Intruder: view.atdmt.com (216.39.69.76) (http(80))
Risk Level: Medium
Protocol: TCP
Attacked IP: -mine-
Attacked Port: 1317

Ok, I'm not a tech geek, and I can barely program my VCR, so I don't know if this should be a concern to GameBanshee. Still, I'm off to run a quick virus scan....
That there; exactly the kinda diversion we coulda used.
User avatar
Magrus
Posts: 16963
Joined: Mon Oct 04, 2004 7:10 am
Location: NY
Contact:

Post by Magrus »

I checked through the log of my firewall over the past few hours and haven't seen anything matching that attempting to get through to my computer. Just figured I'd point it out that I have not had a problem, so it might not be based on this site at all.

Some worms/virii react to any internet activity I believe. That might be your problem Gwally. I would suggest making sure your virus protection is up to date, turning your internet connection off and unplugging it, then running a scan to see if you can fix it.
"You can do whatever you want to me."
"Oh, so I can crate you and hide you in the warehouse at the end of Raiders?"
"So funny, kiss me funny boy!" / *Sprays mace* " I know, I know, bad for the ozone"
User avatar
Xandax
Posts: 14151
Joined: Thu Nov 16, 2000 12:00 pm
Location: Denmark
Contact:

Post by Xandax »

Gwalchmai wrote:Hmmm. Lately, my Norton Anti Virus tells me that it has blocked a worm trying to get to my computer when I navigate through this site. Usually happens about once a session. Tonight, it seems to be popping up about everytime I enter a forum. Here's the info Norton gives me:

Intrusion: HTTP Embed Tag NPDSPlay DLL BO
Intruder: view.atdmt.com (216.39.69.76) (http(80))
Risk Level: Medium
Protocol: TCP
Attacked IP: -mine-
Attacked Port: 1317

Ok, I'm not a tech geek, and I can barely program my VCR, so I don't know if this should be a concern to GameBanshee. Still, I'm off to run a quick virus scan....
HTTP Embed Tag NPDSPlay DLL BO

Would be usefull if you found out what excatly gives you this warning, if it is a specific add (my guess).
However I would not worry to much about this error when not visiting some of the "grey" areas of the Internet, as it is most likely a simple mistake from the supplier moreso then a deliberate attack.

However, if indeed it is an add, I'd expect more people to have this error as well.
Insert signature here.
User avatar
SODDI
Posts: 1
Joined: Mon Oct 23, 2006 11:00 am
Contact:

Post by SODDI »

HTTP Embed Tag NPDSPlay DLL BO exploit

I got hit by this FOUR times over the weekend. It is an exploit intended to take advantage of a hole in Microsoft Media player. Download the patch from Microsoft and check the Symantec site for a further fix.

Norton caught it and I was able to trace it to a company named:

Atlas Solutions (Atlas)
315 5th Avenue S, Suite 500
Seattle, WA 98104
Phone: 206.816.8000
Fax: 206.816.8909

I just spoke to the publicity director on the phone and she confirmed that it is a program that her company is using. Of course she denies that it is MALWARE, but if it smells like a duck...

Destroy.

SODDI
Post Reply