re: spysweeper

Discussion in 'other software & services' started by Beefcarver, May 6, 2005.

Thread Status:
Not open for further replies.
Page 2 of 3
  1. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    Re: Spy Sweeper Web Site....o_O

    I can get there with absolutely no problems. Try clearing your cache if you can't get to webroot's site.
     

    Attached Files:

    • site.jpg
      site.jpg
      File size:
      80.1 KB
      Views:
      206
    nadirah, May 7, 2005
    #26
  2. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    Re: Spy Sweeper Web Site....o_O

    I find that DirectNIC site's interface rather suspicious looking, seems like a spyware site to me.
     
    nadirah, May 7, 2005
    #27
  3. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    Re: Spy Sweeper Web Site....o_O

    But webroot's site is working normal now... can't believe webroot got hacked!? :eek:o_O
     
    nadirah, May 7, 2005
    #28
  4. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Re: Spy Sweeper Web Site....o_O

    Here....that IP does take me to what appears to be Webroot o_O
    As noted thru out the thread....it's normal for some....but not for others. At this moment in time....still receiving the DirectNIC site....which still trace routes to 204.251.15.207 for me.
     
    Bubba, May 7, 2005
    #29
  5. Notok

    Notok Registered Member

    Joined:
    May 28, 2004
    Posts:
    2,969
    Location:
    Portland, OR (USA)
    Re: Spy Sweeper Web Site....o_O

    I'm still getting the DirectNIC site as well, and the time of my last post was the first time I tried it. The IP posted by Don Pelotas (thanks!) does get me to the site just fine.

    I almost wonder if Webroot just changed servers and some of our ISP's DNS servers just haven't updated yet, sometimes it can take a couple days. I'm on a pretty major one, though, so it does seem odd o_O
     
    Notok, May 7, 2005
    #30
  6. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    That was my thought\comment back in post #12....strange indeed :doubt:

    I have also merged the 2 ongoing threads concerning this matter. Hopefully it will not cause Timeline confusion :doubt:
     
    Bubba, May 7, 2005
    #31
  7. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,618
    Location:
    Texas
    DNS1.DNVR.WEBROOT.COM 64.78.150.197
    DNS2.DNVR.WEBROOT.COM 64.78.150.201
    DNS1.SAFR.WEBROOT.COM 69.25.103.200
     
    ronjor, May 7, 2005
    #32
  8. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    tracert points to webroot accurately.

    Dns1.dnvr.webroot.com.
    [Reached Destination]
     
    nadirah, May 7, 2005
    #33
  9. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Hmm....strange indeed....perhaps a browser issue for those that are receiving wrong page :doubt:

    Using IE....just for the heck of it....I grabbed one of those IP's....69.25.103.200(sales.webroot.com). Since I have Internet Zone on high....in particular meta refresh disabled....the browser session stopped at the below pic. Earlier....in my posts I had been on my test PC with Internet Settings on Medium....where meta refresh is enabled.

    View code from below pic....69.25.103.200(sales.webroot.com):
    Code:
      
<!doctype html public "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<title>sales.webroot.com - Thank you for your patronage of Webroot
Software</title>
<meta name="Generator" content="EditPlus">
<meta name="Author" content="(c) 2003 Webroot Software, Inc.">
<[B]meta[/B] http-equiv="[B]refresh[/B]" content="0;url=http://[B]www.webrootsoftware.com[/B]/"> 
<meta name="robots" content="noindex">
<style>
body, td {font-family: verdana; font-size:11px;}
</style>
</head>

<body>
<h3>Sales.Webroot.Com</h3>
<p>Protect yourself and enhance your Internet Experience with Webroot
Software. Webroot offers products that speed up your surfing, clean up your
Internet tracks, protect your privacy on and off-line, and more.</p>
<p><a href="http://www.webroot.com">Click here</a> to go to Webroot's
Home Page</p>
</body>
</html>
    I know the answer for some of the members....but for those seeing DirectNIC site....what browser and setting o_O
     

    Attached Files:

    Bubba, May 7, 2005
    #34
  10. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,618
    Location:
    Texas
    They are getting redirected for some reason.

    I tried Opera, Mozilla, IE, and Firefox with no problems.
     
    ronjor, May 7, 2005
    #35
  11. dog

    dog Guest

    Yes, it's very strange ... I get redirected using FireFox targeting webroot.com to that directNIC page but I can connect fine when using their IP address. o_O

    It definitely isn't browser related as if I resolve webroot.com using PE I get 204.251.15.207 the directNIC IP. :doubt:
     

    Attached Files:

    dog, May 7, 2005
    #36
  12. siliconman01

    siliconman01 Registered Member

    Joined:
    Mar 6, 2003
    Posts:
    786
    Location:
    West Virginia (USA)
    Experiencing the same problem of going to 204.251.15.207 when using IE. However, can go directly to www.webroot.com page when signed on to AOL and using the browser there (BYOA account).

    Another item that is being redirected is when I do a Update Definitions in SS Beta 4.0.0.303. It goes to 204.251.15.207 according to my firewall log. :(
     
    siliconman01, May 7, 2005
    #37
  13. dog

    dog Guest

    Here's the traceroute ... Maybe the timeout on server on the #15 hop is the cause (screenshot)
     

    Attached Files:

    dog, May 7, 2005
    #38
  14. controler

    controler Guest

    In the unbeta version when you clicked on update the program, your browser always sent you to their site. Since updateing to the beta, clicking on update
    program has always given a message that my program is up to date right in the GUI. This is a change. I am thinking they now update the beat right through the GUI and not send you to the update page.
    Trying to go to webroot.com does however send me to the directinc site also.
    Clicking on the beta feedback button in the GUI takes me to the Go Away!!!
    page. Yes they have been hacked :-(

    I do have a copy of the beta though. :)

    Bruce
     
    controler, May 7, 2005
    #39
  15. Stephanos G.

    Stephanos G. Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    720
    Location:
    Cyprus
    this is the link
     

    Attached Files:

    • a.gif
      a.gif
      File size:
      5.1 KB
      Views:
      171
    Stephanos G., May 7, 2005
    #40
  16. Stephanos G.

    Stephanos G. Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    720
    Location:
    Cyprus
    The website has been hacked.
     
    Stephanos G., May 7, 2005
    #41
  17. ws123

    ws123 Guest

    webroot.com hacked!!!!!
     
    ws123, May 7, 2005
    #42
  18. Beefcarver

    Beefcarver Registered Member

    Joined:
    Jan 23, 2005
    Posts:
    263
    Location:
    michigan
    netscape 7.1 and IE 6 both come up with the directnic website. I think its the
    work of the spyware writers. They know spysweeper is catching and killing all there junk and they are mad. Thats the way I see it.
     
    Beefcarver, May 7, 2005
    #43
  19. controler

    controler Guest

    While we wait, how about a screenshot?

    The ADS execurion protection is something new to this beta.
     
    controler, May 7, 2005
    #44
  20. controler

    controler Guest

    Well, I guess the screenshot feature is not working for me with either IE or Firefox today. o_O


    Bruce
     
    controler, May 7, 2005
    #45
  21. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,618
    Location:
    Texas
    ronjor, May 7, 2005
    #46
  22. controler

    controler Guest

    I believe this type off attack on a server is called Pharming.


    Bruce
     
    controler, May 7, 2005
    #47
  23. Stephanos G.

    Stephanos G. Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    720
    Location:
    Cyprus
    Stephanos G., May 7, 2005
    #48
  24. siliconman01

    siliconman01 Registered Member

    Joined:
    Mar 6, 2003
    Posts:
    786
    Location:
    West Virginia (USA)
    Here is the response from Webroot tech support on this. This is in response to my request for technical support on the Support page.

    "Hi,

    We are experiencing technical issues with our DNS server and are in the process of correcting the issue. The issue should be resolved within 48 hours. Please retry at a later time. We apologize for the inconvenience.

    It is important to know a few things about this problem:

    - Our site has NOT been hacked.

    - Webroot is NOT distributing Spyware or hijacking people’s web browsers.

    - This is NOT a permanent problem.

    - This issue affected an estimated 60% of our users.

    - As soon as Webroot was aware of the problem we took steps to resolve it.

    - Customers will no longer experience the error once their ISPs DNS server refreshes. "

    Ticket Information:
    Ticket #: 693-985364
    Date Created: 5/7/2005 10:23 AM MDT
     
    siliconman01, May 7, 2005
    #49
  25. Stephanos G.

    Stephanos G. Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    720
    Location:
    Cyprus
    Possibly this is the DNS problem that they have
     

    Attached Files:

    • b.gif
      b.gif
      File size:
      29.1 KB
      Views:
      126
    Stephanos G., May 7, 2005
    #50
Page 2 of 3
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...