My firewall is alerting me that my LinkSys WPC55AG wireless
card is attempting to contact various websites, including
'www.gemtek.com.tw' (who may have written this software) and
'www.yahoo.com'.
Anybody know why this utility may be doing this? It is not documented,
and there's no way to configure it. Is it spyware, or merely looking
for software updates or something? I wouldn't think it would be doing
that by looking on Yahoo!
- Tim
--
It is probably a virus on one of your computers not the Linksys box itself.
It reports the NIC# of the linksys box because that is the only ID# made
available to the Internet. Get the latest virus definition files and scan
each of your systems. If you hve more than one system disconnect all of
them from the network before doing the scans. Leave them disconnec ted
until all are clean. If you do not some virus will just re-infect the other
systems on the network as fast as you clean them off.
Good Luck
John
"Spammay Blockay" <SPAMBLOCKER@BLOCKEDTOAVOIDSPAM.com> wrote in message
news:bn6ehu$9c$1@bolt.sonic.net...
> My firewall is alerting me that my LinkSys WPC55AG wireless
> card is attempting to contact various websites, including
> 'www.gemtek.com.tw' (who may have written this software) and
> 'www.yahoo.com'.
>
> Anybody know why this utility may be doing this? It is not documented,
> and there's no way to configure it. Is it spyware, or merely looking
> for software updates or something? I wouldn't think it would be doing
> that by looking on Yahoo!
>
> - Tim
>
> --
>
In article <cAzlb.3692$A44.3672@twister.southeast.rr.com>,
John <john@lampooners.com> wrote:
>It is probably a virus on one of your computers not the Linksys box itself.
>It reports the NIC# of the linksys box because that is the only ID# made
>available to the Internet. Get the latest virus definition files and scan
>each of your systems. If you hve more than one system disconnect all of
>them from the network before doing the scans. Leave them disconnec ted
>until all are clean. If you do not some virus will just re-infect the other
>systems on the network as fast as you clean them off.
>
>Good Luck
>
>John
I'll definitely run a virus check (that was to be my next step).
However, the fact that the only systems it's contacting seem to
be Yahoo and gemtek (who write software for LinkSys/Cisco wireless
products) makes it likely that it's the software itself doing
it (unless the virus is smart enough to recognize such things
as who writes the software they're exploiting).
I've got a firewall up, and have never had a virus (I do regular
virus and spyware scans, and the only things that ever turn up are
spyware cookies). It'd be weird if it were a virus this time
'round. But I'll report back after the virus scan. Thanks!
- Tim
>"Spammay Blockay" <SPAMBLOCKER@BLOCKEDTOAVOIDSPAM.com> wrote in message
>news:bn6ehu$9c$1@bolt.sonic.net...
>> My firewall is alerting me that my LinkSys WPC55AG wireless
>> card is attempting to contact various websites, including
>> 'www.gemtek.com.tw' (who may have written this software) and
>> 'www.yahoo.com'.
>>
>> Anybody know why this utility may be doing this? It is not documented,
>> and there's no way to configure it. Is it spyware, or merely looking
>> for software updates or something? I wouldn't think it would be doing
>> that by looking on Yahoo!
>>
>> - Tim
>>
>> --
>>
>
>
--
In article <bn6hfr$4sg$1@bolt.sonic.net>,
Spammay Blockay <SPAMBLOCKER@BLOCKEDTOAVOIDSPAM.com> wrote:
>In article <cAzlb.3692$A44.3672@twister.southeast.rr.com>,
>John <john@lampooners.com> wrote:
>>It is probably a virus on one of your computers not the Linksys box itself.
>>It reports the NIC# of the linksys box because that is the only ID# made
>>available to the Internet. Get the latest virus definition files and scan
>>each of your systems. If you hve more than one system disconnect all of
>>them from the network before doing the scans. Leave them disconnec ted
>>until all are clean. If you do not some virus will just re-infect the other
>>systems on the network as fast as you clean them off.
Okay, I ran the Virus and Spyware checks, and both came up negative.
So I believe it is their software that is doing it. Grr.
- Tim
--
You need to take your horse blinders off and look at your system. The
Linksys software is clean as there are hundreds of thousands of us using it.
Open your eyes and look at your system...
"Spammay Blockay" <SPAMBLOCKER@BLOCKEDTOAVOIDSPAM.com> wrote in message
news:bn6o5r$g62$1@bolt.sonic.net...
> In article <bn6hfr$4sg$1@bolt.sonic.net>,
> Spammay Blockay <SPAMBLOCKER@BLOCKEDTOAVOIDSPAM.com> wrote:
> >In article <cAzlb.3692$A44.3672@twister.southeast.rr.com>,
> >John <john@lampooners.com> wrote:
> >>It is probably a virus on one of your computers not the Linksys box
itself.
> >>It reports the NIC# of the linksys box because that is the only ID# made
> >>available to the Internet. Get the latest virus definition files and
scan
> >>each of your systems. If you hve more than one system disconnect all of
> >>them from the network before doing the scans. Leave them disconnec ted
> >>until all are clean. If you do not some virus will just re-infect the
other
> >>systems on the network as fast as you clean them off.
>
> Okay, I ran the Virus and Spyware checks, and both came up negative.
> So I believe it is their software that is doing it. Grr.
>
> - Tim
>
> --
>
On Wed, 22 Oct 2003 17:25:19 GMT, SPAMBLOCKER@BLOCKEDTOAVOIDSPAM.com
(Spammay Blockay) wrote:
>My firewall is alerting me that my LinkSys WPC55AG wireless
>card is attempting to contact various websites, including
>'www.gemtek.com.tw' (who may have written this software) and
>'www.yahoo.com'.
>
>Anybody know why this utility may be doing this? It is not documented,
>and there's no way to configure it. Is it spyware, or merely looking
>for software updates or something? I wouldn't think it would be doing
>that by looking on Yahoo!
>
>- Tim
Go here and rescan your system.
http://housecall.trendmicro.com/
In article <0yClb.3325$P%1.2959447@newssvr28.news.prodigy.com >,
BillW <TheDuck@pond.net> wrote:
>You need to take your horse blinders off and look at your system. The
>Linksys software is clean as there are hundreds of thousands of us using it.
>Open your eyes and look at your system...
I'm certainly open to the idea that there is a virus out there.
But... has anybody else *cared* if this software were connecting to
gemtek or yahoo? Perhaps it's doing this, and nobody's been concerned
by it? That's possible, too. No need to say I'm blind to the
various possibilities.
- Tim
--
In article <38vdpv8th0obtjlj06ml41l219gldst6ih@4ax.com>,
D11@anywhere.com <> wrote:
>On Wed, 22 Oct 2003 17:25:19 GMT, SPAMBLOCKER@BLOCKEDTOAVOIDSPAM.com
>(Spammay Blockay) wrote:
>
>>My firewall is alerting me that my LinkSys WPC55AG wireless
>>card is attempting to contact various websites, including
>>'www.gemtek.com.tw' (who may have written this software) and
>>'www.yahoo.com'.
>>
>>Anybody know why this utility may be doing this? It is not documented,
>>and there's no way to configure it. Is it spyware, or merely looking
>>for software updates or something? I wouldn't think it would be doing
>>that by looking on Yahoo!
>>
>>- Tim
>Go here and rescan your system.
>http://housecall.trendmicro.com/
Currently running...
- Tim
--
In article <38vdpv8th0obtjlj06ml41l219gldst6ih@4ax.com>,
D11@anywhere.com <> wrote:
>On Wed, 22 Oct 2003 17:25:19 GMT, SPAMBLOCKER@BLOCKEDTOAVOIDSPAM.com
>(Spammay Blockay) wrote:
>
>>My firewall is alerting me that my LinkSys WPC55AG wireless
>>card is attempting to contact various websites, including
>>'www.gemtek.com.tw' (who may have written this software) and
>>'www.yahoo.com'.
>>
>>Anybody know why this utility may be doing this? It is not documented,
>>and there's no way to configure it. Is it spyware, or merely looking
>>for software updates or something? I wouldn't think it would be doing
>>that by looking on Yahoo!
>>
>>- Tim
>Go here and rescan your system.
>http://housecall.trendmicro.com/
Ran it. No viruses.
- Tim
--
In article <0yClb.3325$P%1.2959447@newssvr28.news.prodigy.com >,
BillW <TheDuck@pond.net> wrote:
>You need to take your horse blinders off and look at your system. The
>Linksys software is clean as there are hundreds of thousands of us using it.
>Open your eyes and look at your system...
By the way, I just checked the LinkSys app in question, and it has embedded
within it the following websites (as text, not IPs):
http://www.google.com
http://www.yahoo.com
http://www.linksys.com
http://www.gemtek.com.tw
http://www.kimo.com.tw
Hmm... interesting.
- Tim
--
There are currently 1 users browsing this thread. (0 members and 1 guests)
Posting Permissions
Reply With Quote