Bamital [Ramnit-A] Virus Infection?

Sort Posts by Likes
R

RoboWarriorSr

macrumors 6502a
Original poster
Feb 23, 2013
884
45
Mods move this to an appropriate section if this is not the right one.

Okay so today, CenturyLink sends me an email saying that my network has been compromised by a Bamital or otherwise known as Ramnit-A virus. Currently this does not affect Mac OSX computer but it is affecting CenturyLink's network. All of the programs listed to get rid of the virus are for Windows and I do not want to pay $100 for Windows. Is there a way to get rid of this or must I call CenturyLink and tell them my predicament?
 

Peace

Peace

macrumors Core
Apr 1, 2005
19,496
3,933
Space--The ONLY Frontier
Call them up and tell them your network has no PC's and thusly no virus. It's the typical spam from ISP's trying to get people to buy anti-virus programs. I've heard of Comcast doing the same thing.
 
R

RoboWarriorSr

macrumors 6502a
Original poster
Feb 23, 2013
884
45
blueroom said:
It's a scam. Ignore it.
Click to expand...
So all of the redirects to CenturyLink's customer support is fake? :eek:

----------
Peace said:
Call them up and tell them your network has no PC's and thusly no virus. It's the typical spam from ISP's trying to get people to buy anti-virus programs. I've heard of Comcast doing the same thing.
Click to expand...
Doing that currently, they said they didn't send a message according to their history.
 
blueroom

blueroom

macrumors 603
Feb 15, 2009
6,381
25
Toronto, Canada
RoboWarriorSr said:
So all of the redirects to CenturyLink's customer support is fake? :eek:

----------



Doing that currently, they said they didn't send a message according to their history.
Click to expand...
There you go, scam. Sounds like your email got hacked. Is it Yahoo? (they've been hacked recently, their email is awful)
 

Peace

Peace

macrumors Core
Apr 1, 2005
19,496
3,933
Space--The ONLY Frontier
RoboWarriorSr said:
So all of the redirects to CenturyLink's customer support is fake? :eek:

----------



Doing that currently, they said they didn't send a message according to their history.
Click to expand...
RoboWarriorSr said:
Used Windows on a desktop on another comcast network [my dad's business].

----------



My internet was affected though... CenturyLink was limiting my internet access.
Click to expand...
If they didn't send you any messages how do you know they are limiting your internet access ?
 
R

RoboWarriorSr

macrumors 6502a
Original poster
Feb 23, 2013
884
45
Peace said:
If they didn't send you any messages how do you know they are limiting your internet access ?
Click to expand...
It redirected to a century link page saying about the virus was a Bamital and follow the steps to get rid of the virus. It also said my internet access was blocked until proper action was taken. Also trying to go to other sites, it would redirect me to the same page. E-mail sent to me was abuse-silent@centurylinkservices.net.
 
R

RoboWarriorSr

macrumors 6502a
Original poster
Feb 23, 2013
884
45
Peace said:
How are you posting here right now ?
Click to expand...
On the page, I checked the bulletin saying "I will fix later" or something and check another box saying "I will fix this within 48 hrs". Internet achieved. The main thing is, this was a spam mail as both You and Blueroom said. The problem being, this was the second time it occurred and having to check all those bulletins was a waste of time as with talking to CenturyLink only to find out it wasn't them. Is there a way to stop having those "phishing" sites to appear? I have a Airport Extreme router so if there is a setting to increase security I would like to know.
 
Last edited:
S

snaky69

macrumors 603
Mar 14, 2008
5,904
481
RoboWarriorSr said:
On the page, I checked the bulletin saying "I will fix later" or something and check another box saying "I will fix this within 48 hrs". Internet achieved. The main thing is, this was a spam mail as both You and Blueroom said. The problem being, this was the second time it occurred and having to check all those bulletins was a waste of time as with talking to CenturyLink only to find out it wasn't them. Is there a way to stop having those "phishing" sites to appear? I have a Airport Extreme router so if there is a setting to increase security I would like to know.
Click to expand...
Somebody is using the internet on dodgy websites on your network. Fix that person and his/her computer, and the problem will go away.
 
C

Ccrew

macrumors 68020
Feb 28, 2011
2,035
3
Or the OP has an open wi-fi network and the kid down the street's computer is infected.....

I doubt it's spam given the ISP killed his internet. They've got packet inspection running or they're monitoring DNS for known command and control server lookups and flagging.
 
C

ChillenHippie

macrumors newbie
Jun 23, 2013
2
0
Iowa
RoboWarriorSr said:
No I locked down the network using wpa2 and using MAC address.
Click to expand...
I just experienced the same situation Saturday with CenturyLink. No warning, they just cut off our internet ... thus shutting down our credit card processing. I have three systems using the internet ... an iPad for CC, a PC along with my Mac. I scanned the PC and no viruses were found... and I haven't experienced any virus like behavior.

Their e-mail report showed the virus was detected at night, when we are closed and my systems are off. I'm now using mac filtering as well to see if that prevents it. Otherwise, I think it's something on their end.
 
R

RoboWarriorSr

macrumors 6502a
Original poster
Feb 23, 2013
884
45
ChillenHippie said:
I just experienced the same situation Saturday with CenturyLink. No warning, they just cut off our internet ... thus shutting down our credit card processing. I have three systems using the internet ... an iPad for CC, a PC along with my Mac. I scanned the PC and no viruses were found... and I haven't experienced any virus like behavior.

Their e-mail report showed the virus was detected at night, when we are closed and my systems are off. I'm now using mac filtering as well to see if that prevents it. Otherwise, I think it's something on their end.
Click to expand...
Was the email the same one I listed in a previous post?
 
C

ChillenHippie

macrumors newbie
Jun 23, 2013
2
0
Iowa
RoboWarriorSr said:
Was the email the same one I listed in a previous post?
Click to expand...
(sorry for the delay)
Yes, it was the same. I emailed their support on Sunday, they responded Monday that they would forward it on to their technical staff. No response since then (it's now Wednesday). I see other threads on other sites with the same exact treatment.
 
S

sarshmarsh

macrumors newbie
Jul 1, 2013
1
0
same thing

the same thing happened to me as well as 3 other people I work with on the same day around the same time. I had to call centurylink to have them enable my internet. The guy on the phone was freaking out kept putting me on hold saying this needed to be handled with people higher up then whatever they did they fixed it but said I needed to buy a virus software from them… I have a brand new macbook pro, iPhone 4 and iPad so none of their software was compatible. I think century link is trying to make some money… there was an additional 20 some dollar charge on my bill and I still haven't gotten an answer as to why. I just started using century link too and the other isp for my area is even worse. Looks like the watchmen are in full force on the internet, but as always who watches the watchmen
 

You must log in or register to reply here.
Top Bottom