PDA

View Full Version : "Hello, I am the new Web-db3!!!" - what's this?



Sally
2005-11-25, 07:16
Hello,

For the last several days, instead of seeing a webpage after clicking on a link or typing in a URL, I occasionally see this message, "Hello, I am the new Web-db3!!!". I've run NAV, Spybot, & Ad-Aware but they didn't find anything even though they all have the latest definitions loaded. I use Firefox 1.0.7 but I've tried it with IE & the results are the same. I have a Windows 98 PC but the same thing happens on at least a few sites when I use our XP computer. Two URLs it happens on are the old Spybot forum, http://forums.net-integration.net/index.php?showforum=28, & the old Net-Integration forum,
http://forums.net-integration.net/ . If this message is happening because some of the sites, like Net-Integration, have closed down, do you know what specifically is triggering this message?

OTOH, for sites which haven't closed down, could it be related to a new kind or spyware? If not, what do you think could be triggering the message in those cases?

Thanks in advance,
Sally

tashi
2005-11-25, 09:04
Hi there.

The N-I urls have been changed so if you click on the old ones you listed above you should receive:

Could not locate remote server
You tried to access the address http://forums.net-integration.net/index.php?showforum=28, which is currently unavailable. Please make sure that the Web address (URL) is correctly spelled and punctuated, then try reloading the page

If you would like to post a log to see if we can get to the bottom of the message you are receiving; please go here and follow instructions.
Before you post a log (http://forums.spybot.info/showthread.php?t=288[/url)

Start a topic here:
Malware Forum (http://forums.spybot.info/forumdisplay.php?f=22[/url)

Someone will then take a look at the system and advise you. :)

Sally
2005-11-28, 10:21
Tashi,

Thanks for your reply.

Rosenfeld
2005-11-28, 22:53
http://net-integration.us/forums/index.php
if you want to get to the net integration forum

eightfifteen
2006-01-12, 07:56
I am experiencing the same thing as Sally was. Unfortunately, all the tools listed to create the reports were made for the PC. I am on Mac 10.3.9. Are there any tools I can use to generate the appropriate reports?

Thanks.


P.S.

Does anyone know how Sally turned out in her quest?

tashi
2006-01-16, 08:48
Does anyone know how Sally turned out in her quest?

Afraid not as she did not return. :)

As you said you are on a Mac I googled this item and found a topic:
http://www.macfixitforums.com/php/showflat.php?Cat=&Board=Forum7&Number=733876&page=0&view=expanded&sb=5&o=31&fpart=

Hope that helps.

eightfifteen
2006-01-16, 08:50
I actually replied to that item myself. It had previously pointed me in this direction.

tashi
2006-01-16, 09:14
Ah yes, 8Fifteen. :)
I am sorry but I am unfamiliar with Macs although another member of Team Spybot may be able to give some input.


The instructions you are seeing tell you how to run a PC program called Spybot Search & Destroy to search your PC system for PC spyware.

There is no spyware for the Mac. These instructions will not help you.

Actually, I do not believe that the thing you are seeing can be fixed on your Mac; I do not believe it has anything whatsoever to do with your Mac. There's nothing wrong with your computer at all.

Rather, I believe that what is happening is that there is a very serious configuration error with your ISP's name servers, which it is up to your ISP to fix.

[edit] It is also possible that something is funky with the Hosts file on your Mac. Go into the terminal, and type

more /etc/hosts

and press Return. What does it say?
http://www.macfixitforums.com/php/showflat.php?Cat=&Board=Forum7&Number=733876&page=0&view=expanded&sb=5&o=31&fpart=
It will be interesting to see if your advisor at the Mac forum is on the right track.

Best regards.

jilt.
2006-02-10, 13:07
I have this problem too..

I'm curious, do those of you experiencing this have Mediacom as your ISP? I think it's their DNS servers, not spyware, but I'm not sure.

Humanavatar
2006-02-10, 20:20
I have this problem too..

I'm curious, do those of you experiencing this have Mediacom as your ISP? I think it's their DNS servers, not spyware, but I'm not sure.

Yes, I get this and I am on Mediacom.

Not often -- Usually when I blow a TLD value (.coom instead of .com).

eightfifteen
2006-02-11, 05:05
Mediacom here too. This CAN'T be a coincidence

macaverde
2006-02-24, 18:57
Mediacom is my ISP as well. I have a Mac running OS X - and this problem only occurs when I go to Yahoo. Any thoughts out there?:scratch:

tashi
2006-02-24, 19:22
I have brought this thread to teams attention as this is a :scratch: topic. I am not familiar with MACS.

A response may be after the weekend as they are in a different time zone.

http://www.annoyances.org/exec/forum/win98/1139625778
http://www.macfixitforums.com/php/showflat.php?Cat=&Board=Forum7&Number=744532&page=0&view=expanded&sb=5&o=31&fpart=

Anyone using a PC please post a Spybot-S&D log.

Open SpyBot, check for and get any updates available.
Close all browsers, check for problems and fix everything found in red
Then on the toolbar menu select mode and switch to advanced mode, on the left lower down select tools, and view report, ensure all the options are selected near the bottom except

Uncheck[ ] do not report disabled or known legitimate Items.
uncheck[ ] Include a list of services in report.
Uncheck[ ] Include uninstall list in report.

Now select (near the top) view report.
Press export in the save in box choose a place such as your my documents folder, then in your next post near the bottom select the "browse" button; navigate to and attach or post that report.

jilt.
2006-02-26, 12:21
Anyone still experiencing this?

I think Mediacom fixed it. That or some of the adjustments I made to my router earlier fixed it because I'm no longer experiencing it now.

eightfifteen
2006-02-27, 00:10
still getting it. I tried to contact Mediacom, but they are ignoring me (?)

SuperDan
2006-05-14, 07:26
Yes, I get this and I am on Mediacom.

Not often -- Usually when I blow a TLD value (.coom instead of .com).


Are you guys still experiencing this problem? Does it seem to effect any particular OS more than others? Are there ANY similiarities other than a few being Mediacom customers? I'm a Mediacom custmoer and not having any issues at all nor have any of the people I know that uses them having this problem.

eightfifteen
2006-05-14, 07:33
I have not had this issue for some time. I think Mediacom got the message and cleaned up the issue.

SuperDan
2006-05-14, 14:41
I have not had this issue for some time. I think Mediacom got the message and cleaned up the issue.


Mediacom uses AT&T's DNS so it's hard for me to see it being a Mediacom thing. If any of you see this happening let me know as quick as you can.

SuperDan
2006-05-15, 15:22
Ok, what's happened here was a combination of Mediacom and a bit of AT&T. There was a change made on AT&T's side that happened before it should have since it was only a week or so untill the change was made on Mediacom's side they let it ride as it was and the only people it should have affected were those that, for whatever reason be it a bit of malware oron purpose, tried to get to a website by an IP directly. I hope that answers some of the questions.