Lt. Commander
Join Date: Dec 2007
Posts: 120
# 21
06-02-2012, 09:42 AM
I normally find things on my pc from other people using the web may have that happened instead
Lt. Commander
Join Date: Dec 2007
Posts: 120
# 22
06-02-2012, 09:49 AM
Dang it looked like malware to me so I removed it. Hopefully that wont affect my games.
Lt. Commander
Join Date: Dec 2007
Posts: 120
# 23
06-02-2012, 10:20 AM
Quote:
Originally Posted by Asakara
No, no, and absolutely not! Pando Media Booster is a safe program, verified and signed by VeriSign.
Verisign as well as Network Solutions have been blacklisted from our mail servers for spam to clients, tagged email addresses as well as non existent email addresses for years.

Also their IP ranges are gray listed at the firewalls due to abuse for years as well.

I wouldn't trust those folks to walk my dog if I had one.

edit: (See? There's that edit bit I said I used) Looks like their certificates have issues as well:

http://www.pcworld.com/businesscente...t_hurt_us.html

Quote:
The certificate authority business of VeriSign was acquired by Symantec in 2010, so depending on the timing of the attacks it seems feasible that the certificate encryption keys could have been exposed. Lavery asks, “Can we trust any site using Verisign SSL certificates? Without more clarity, the logical answer is no.”
Lt. Commander
Join Date: Dec 2007
Posts: 120
# 24
06-02-2012, 10:27 AM
Quote:
Originally Posted by theapparatus View Post
Verisign as well as Network Solutions have been blacklisted from our mail servers for spam to clients, tagged email addresses as well as non existent email addresses for years.

Also their IP ranges are gray listed at the firewalls due to abuse for years as well.

I wouldn't trust those folks to walk my dog if I had one.

edit: (See? There's that edit bit I said I used) Looks like their certificates have issues as well:

http://www.pcworld.com/businesscente...t_hurt_us.html
Perhaps you should let Pando, Verisign, and Network Solutions know that as the quote is from Pando's site (per the link I provided). Of course Pando has been around since before the Verisign hacking.. But whatever.

Then again I have the power to blacklist any account or domain from sending e-mail to my company so that does not mean too much to me.
Lt. Commander
Join Date: Dec 2007
Posts: 120
# 25
06-02-2012, 10:36 AM
Quote:
Originally Posted by Asakara
Then again I have the power to blacklist any account or domain from sending e-mail to my company so that does not mean too much to me.
With all due respect, I do hope you're also block IPs and/or ranges of such. Takes two seconds to fake a domain.

I just wrote that as a Verisign certificate is pretty much worthless as far as I'm concerned.

Getting back the topic though, it looks like it can come from the Lord of the Rings and DDO installs:

http://www.comeonaussie.com/stories/...data-bill.html

http://forums.lotro.com/showthread.p...ort-of-malware. (wow, those three periods are actually in the url.)

http://www.lo-ping.org/2011/07/29/th...y-be-infected/

edit: I'll throw in a link to these folks as wel if folks want to scan their computersl: http://www.malwarebytes.org/

Please kindly remember that malware is different from computer viruses and may not be checked for with your antivirus program.
Lt. Commander
Join Date: Dec 2007
Posts: 120
# 26
06-02-2012, 10:42 AM
Quote:
Originally Posted by theapparatus View Post
With all due respect, I do hope you're also block IPs and/or ranges of such. Takes two seconds to fake a domain.

I just wrote that as a Verisign certificate is pretty much worthless as far as I'm concerned.

Getting back the topic though, it looks like it can come from the Lord of the Rings and DDO installs:

http://www.comeonaussie.com/stories/...data-bill.html

http://forums.lotro.com/showthread.p...ort-of-malware. (wow, those three periods are actually in the url.)

http://www.lo-ping.org/2011/07/29/th...y-be-infected/

edit: I'll throw in a link to these folks as wel if folks want to scan their computersl: http://www.malwarebytes.org/

Please kindly remember that malware is different from computer viruses and may not be checked for with your antivirus program.
It comes from a lot more than just LOTRO and DDO... Eve, ****, Battlefield 3, Sins of a Solar Empire, League of Legends, many NCSOFT games (like Lineage 2 and CoH), and many many more..

Pando is nothing new.. It has been here since 2006 (6 years now).
Lt. Commander
Join Date: Dec 2007
Posts: 120
# 27
06-02-2012, 10:57 AM
the good news is, it does uninstall clean (as far as I can tell) and you can drop it as soon as your done dling the client. (usually)
Lt. Commander
Join Date: Dec 2007
Posts: 120
# 28
06-02-2012, 11:53 AM
Quote:
Originally Posted by Rehpic
There is no way you could have gotten pando from us via either DVD install or patching. The only way to get it is if you explicitly download and run one of the pando based installers. If you didn't do that, then you must have gotten it from somewhere else.
I think you had best look at the PWI download site again for the f2p STO, it requires a Pando Media to begin downloading.

Now I do not think that is the malware that is mention above, but it does ID itself as Pando. Perhaps that is the confusion?
Lt. Commander
Join Date: Dec 2007
Posts: 120
# 29
06-02-2012, 12:06 PM
Checked, checked and double checked.
I don't have Pando anywhere on my computer.
I don't have any games on this thing other than STO, so I am guessing it came from
something else.
Lt. Commander
Join Date: Dec 2007
Posts: 120
# 30
06-02-2012, 01:04 PM
Quote:
Originally Posted by Mongoson View Post
I think you had best look at the PWI download site again for the f2p STO, it requires a Pando Media to begin downloading.

Now I do not think that is the malware that is mention above, but it does ID itself as Pando. Perhaps that is the confusion?
I said "The only way to get it is if you explicitly download and run one of the pando based installers." which is what you are referring to. If you download one of the STO installers that uses pando, you will get pando. If you install from a DVD or patch you will not. Note that the sto download site has alternate installers that use bittorrent, so you can download and install without pando if you choose.
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


All times are GMT -7. The time now is 01:52 AM.