HTTP Headers: Is this a virus?


#1

Okay, this isn’t entirely DreamHost related, but I was looking at my HTTP headers and I noticed this line:

aaaaaaaaaaaaaaa: +++++++++++++

That looks really suspicious, and I think it might be a virus of some kind. McAfee has turned up nothing. Any thoughts?

CrazyDrumGuy
Save money with promo codes!
SUPERSAVINGS97: save $97 on yearly plans!
MONTHLYNOSETUP:waived setup fee on monthly plans!


#2

The preface to the page title (on the title bar of the explorer window) can be changed by regedit or by software:

Start Regedit
Go to HKEY_LOCAL_MACHINE\Software\microsoft\Internet Explorer\Main
Add or edit the string value Window Title (there is a space between the words)
Add the text you want to appear

Do you have a zombie problem and nowhere else to turn? Ask the specialists! http://ozort.org


#3

p.s. not sure if it’s a virus or not, but i’ll tell you what IS a virus: mcafee.

If you plan to get mcafee, here’s a suggestion: pay me 25 bucks to come to your house and install viruses on your computer and cripple your operating system. The end result is the same and it’ll be 20 bucks cheaper.

I worked at a big box store doing tech support; we routinely discourage customers from buying this horrid product when we see them trying to buy it, and i’ve come to learn that many other branches do the same, including many of our competitors. Some even go as far as to put the software in the game section instead of the web security section.

Look into NOD32. You can get it fully updated and functional for free, and it’s easy to remove when you’re done with it. Unlike mcafee, NOD32 actually finds AND removes viruses.

Also, Trend Micro has a phenomenal free online virus scanner. Not recommended for primary protection since it requires a working internet connection and it doesn’t provide active protection, but it’s great at finding stuff and gets updated instantly since it runs remotely.
http://housecall.trendmicro.com/ Works best of all and requires no install, only a functional browser and a working net connection.

[rant]
Known mcafee issues:
Takes over your computer resources without asking.
Deletes .exe files off pen drives as soon as they’re plugged in without asking.
Destroys operating system if you attempt to uninstall it or install another virus scanner, requiring reformatting.
Fails to find or remove viruses (vundo, anyone?)

They make up for not having a good scanner by giving you a whole pile of like 5 other programs which are entirely useless, unsupported, and incompatable with everything. You get crippled spyware scanner that gets updated twice a year, and a firewall that makes it impossible to do anything other than check your email.

Plus they spy on you and they slow the computer down just by being installed.

Norton Antivirus is almost as bad, but both cost 50 bucks, don’t work, and mess your computer up. NOD32 works, and you can get it free.

Bottom Line; Get anything but mcafee. mcafee sucks. “mcrappy”.
[/rant]

Do you have a zombie problem and nowhere else to turn? Ask the specialists! http://ozort.org


#4

I get this output when I run curl on crazydrumguy.com:

[quote]HTTP/1.1 200 OK
Date: Fri, 29 Dec 2006 09:40:44 GMT
Server: Apache/2.0.54 (Unix) PHP/4.4.2 mod_ssl/2.0.54 OpenSSL/0.9.7e mod_fastcgi/2.4.2 DAV/2 SVN/1.1.4
X-Powered-By: PHP/4.4.4
X-Pingback: http://crazydrumguy.com/xmlrpc.php
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8[/quote]


#5

I assumed this was a local problem; i dont have this display at crazydrumguy.com, and i dont think mcafee scans php code anyway.

oh also: it’s finally safe to switch to firefox. as of october 2006 (a couple of months ago) they’ve FINALLY managed to crack out a working product; fx2 blows IE out of the water.

Do you have a zombie problem and nowhere else to turn? Ask the specialists! http://ozort.org