Page 1 of 1
Worm attack?
Posted: Wed Oct 11, 2006 8:05 pm
by Gwalchmai
Hmmm. Lately, my Norton Anti Virus tells me that it has blocked a worm trying to get to my computer when I navigate through this site. Usually happens about once a session. Tonight, it seems to be popping up about everytime I enter a forum. Here's the info Norton gives me:
Intrusion: HTTP Embed Tag NPDSPlay DLL BO
Intruder: view.atdmt.com (216.39.69.76) (http(80))
Risk Level: Medium
Protocol: TCP
Attacked IP: -mine-
Attacked Port: 1317
Ok, I'm not a tech geek, and I can barely program my VCR, so I don't know if this should be a concern to GameBanshee. Still, I'm off to run a quick virus scan....
Posted: Wed Oct 11, 2006 8:17 pm
by Magrus
I checked through the log of my firewall over the past few hours and haven't seen anything matching that attempting to get through to my computer. Just figured I'd point it out that I have not had a problem, so it might not be based on this site at all.
Some worms/virii react to any internet activity I believe. That might be your problem Gwally. I would suggest making sure your virus protection is up to date, turning your internet connection off and unplugging it, then running a scan to see if you can fix it.
Posted: Wed Oct 11, 2006 11:26 pm
by Xandax
Gwalchmai wrote:Hmmm. Lately, my Norton Anti Virus tells me that it has blocked a worm trying to get to my computer when I navigate through this site. Usually happens about once a session. Tonight, it seems to be popping up about everytime I enter a forum. Here's the info Norton gives me:
Intrusion: HTTP Embed Tag NPDSPlay DLL BO
Intruder: view.atdmt.com (216.39.69.76) (http(80))
Risk Level: Medium
Protocol: TCP
Attacked IP: -mine-
Attacked Port: 1317
Ok, I'm not a tech geek, and I can barely program my VCR, so I don't know if this should be a concern to GameBanshee. Still, I'm off to run a quick virus scan....
HTTP Embed Tag NPDSPlay DLL BO
Would be usefull if you found out what excatly gives you this warning, if it is a specific add (my guess).
However I would not worry to much about this error when not visiting some of the "grey" areas of the Internet, as it is most likely a simple mistake from the supplier moreso then a deliberate attack.
However, if indeed it is an add, I'd expect more people to have this error as well.
Posted: Mon Oct 23, 2006 11:10 am
by SODDI
HTTP Embed Tag NPDSPlay DLL BO exploit
I got hit by this FOUR times over the weekend. It is an exploit intended to take advantage of a hole in Microsoft Media player. Download the patch from Microsoft and check the Symantec site for a further fix.
Norton caught it and I was able to trace it to a company named:
Atlas Solutions (
Atlas)
315 5th Avenue S, Suite 500
Seattle, WA 98104
Phone: 206.816.8000
Fax: 206.816.8909
I just spoke to the publicity director on the phone and she confirmed that it is a program that her company is using. Of course she denies that it is MALWARE, but if it smells like a duck...
Destroy.
SODDI