server.gotyou.org
Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: General Discussion
Forum Description: General discussion and chat on any topic.
URL: https://forums.webwiz.net/forum_posts.asp?TID=11671
Printed Date: 01 April 2026 at 11:42am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: server.gotyou.org
Posted By: huwnet
Subject: server.gotyou.org
Date Posted: 02 September 2004 at 12:50pm
| My pc keeps sending a username and password which I frequently use to server.gotyou.org. Is this some sort of virus? |
Replies:
Posted By: Semikolon
Date Posted: 02 September 2004 at 1:14pm
|
probably.. you're doomed dude |
Posted By: dpyers
Date Posted: 02 September 2004 at 1:47pm
|
Time to run the spyware scanners - www.computercops.org ------------- 
Lead me not into temptation... I know the short cut, follow me. |
Posted By: huwnet
Date Posted: 03 September 2004 at 12:04pm
| I think I found it! CWS.Msconfig |
Posted By: huwnet
Date Posted: 03 September 2004 at 12:18pm
| It wasn't CWS.Msconfig. However what ever it is, it is not being picked up by ad-aware or spybot, and I always scan regulary. |
Posted By: Mart
Date Posted: 03 September 2004 at 1:02pm
| Just block communication to server.gotyou.org on your firewall and forget about it... |
Posted By: dpyers
Date Posted: 03 September 2004 at 1:07pm
|
Did a quick search and found an old virus named gotyou but it's not listed on symantecs site. gotyou.org seems to be a dedicated server run by strato.de Anything weird in in your running process list? If you've got a firewall like zonealarm, you can set it up to block outgoing traffic to specific IP's and to log the proceese/programs trying to send to them. -------------
Lead me not into temptation... I know the short cut, follow me. |
Posted By: huwnet
Date Posted: 03 September 2004 at 1:13pm
| I did a whois and I think strato was mentioned on there. What files did that virus add? |
Posted By: Mart
Date Posted: 03 September 2004 at 2:00pm
|
Just search for gotyou, brings back results like: http://www.viruslibrary.com/virusinfo/Gotyou.5052.htm - http://www.viruslibrary.com/virusinfo/Gotyou.5052.htm |
Posted By: pmormr
Date Posted: 03 September 2004 at 10:25pm
that can't be good  ------------- Paul A Morgan http://www.pmorganphoto.com/" rel="nofollow - http://www.pmorganphoto.com/ |
Posted By: Semikolon
Date Posted: 04 September 2004 at 11:48am
| that was what I said.. you're doomed |
Posted By: huwnet
Date Posted: 04 September 2004 at 2:14pm
| It dosen't look like that is the same virus. I forgot to say earlier that I had scanned my PC with trendmicro and none of my exe's are getting mucked up. |
Posted By: Mart
Date Posted: 04 September 2004 at 2:30pm
|
It may not have infected exe's, are you sure Trend Micro can detect it? It may just monitor your system detecting usernames and passwords and forward them to a server. |
Posted By: huwnet
Date Posted: 06 September 2004 at 8:38am
|
I found out what the problem was. I run a client on my computer called
the uptime-project. When it updates it sends my uptime and my username
and password. However what is weird is that the uptime project and gotyou.org domains are both owned by different people. The client looks slightly suspicious. |
Posted By: huwnet
Date Posted: 07 September 2004 at 7:12am
| I disabled some services when I tried to fix this problem. Does anyone know where I can get a list of services that are set on automatic in xp? |
Posted By: Mart
Date Posted: 07 September 2004 at 11:39am
|
google... http://www.blackviper.com/WinXP/servicecfg.htm - http://www.blackviper.com/WinXP/servicecfg.htm |
Posted By: huwnet
Date Posted: 10 September 2004 at 12:59pm
| Thanks |