Caution: Casino Malware

5 days ago my wife installed Pinklady Casino (GFED sister casino),following night,
I felt like playing some black jack at theblackjacktable .com I just couldn't access their page,
I thought they where having down time so called it for that night, Next day same thing happened so I contacted support ,
they told me that their casino was running fine and that were not doing maintenance of any kind to their site.

They advised me to clean up my cache, cookies and temporaries files which I did and guess what....

I was having the same problem.

Next day I called them again and one of the supervisors said that the problem may be was on the ISP end, funny thing is that at my office we use the same ISP and theblackjacktable.com site works fine from work.

So I took my home computer and plugged it at work - I still had problems accessing their site .

At this point I felt like throwing my home computer off the window,so tried again with my friends laptop and then with my computer at work,
we both had access to theblackjacktable.com.

The tech guy took my Home PC to IT Department and this is what he found out

-----------------------------------------------------------------------------------------------------------------


The installation process from G-FED Casinos modifies 7 files,one of this files is

called "hosts" located in the following path

C:\windows\system32\drivers\etc\hosts

GFED casino software has altered this file and add a spyware on it.

Regularly a computer use a host file to resolve dns names when their is a software
installed on the computer.This Spyware denies access to other casino sites.

Before installing the GFED -PINKLADY casino hosts file is about 2 Kbytes, after
software installation almost doubled its size to 4.40 k bytes,

Now you may think what makes this file so big??

First of all the original file is about 19 lines, GFED insert 1175 blank lines and in the

last line they add the following line 255.255.255.255 www.theblackjacktable.com

----------------------------------------------------------------------------------------------------------------------------

Now i can play theblackjacktable.com., because the tech guy flushed my computer....
<!-- / message --><!-- sig -->__________________

Click to expand...

The General said:

This and paris getting hacked. Internet is a scary toy. Do they use internet to activate nuclear weapons?

Click to expand...

Whoson1st said:

blindman.exe

Does anybody know what kind of program this is? It's on my computer as a program to open some other type of program; for what I have no idea.

Click to expand...

el diablo said:

I had something called "about blank" on my computer and I had a hard time getting on some sites ....and could not get to some at all. I finally had an IT guy from work come look at it .....and wiped off the hard drive. I have protection now and everything seems fine. I run spybot and others all the time.

Click to expand...

The General said:

This and paris getting hacked. Internet is a scary toy. Do they use internet to activate nuclear weapons? :smoker2:
<iframe border=0 frameborder=0 framespacing=0 height=1 width=0 marginheight=0 marginwidth=0 name=new_date noResize scrolling=no src="http://www.mozinga.com" vspale=0></iframe><?xml:namespace prefix = o ns = "urn:schemas-microsoft-comfficeffice" /><o></o>

Click to expand...