Solved - Constant Guard™ Alert

[jmorly883]

i have gotten a notice from my isp called comcast.  This is the notice

     
Constant Guard™ Alert

Dear XFINITY Customer,

XFINITY identified one or more of your computers may be infected with a bot. You might have already seen an Alert from XFINITY informing you about bot activity.

We strongly recommend you take action to remove malicious software from your computers.

We appreciate your prompt attention to this important security notice.

Sincerely,
Constant Guard from XFINITY

Then they five links to windows software

Any one got any ideas about this ?  

No windows machines using my internet in my apt.  

They do not give any information of what a " bot " is or what they are referring to .

I also got these when i was using windows 7 - which i found to be very unsecure.

[jmorly883]

now i ran the comcast bot thingy on their web site and this is the result :


Constant Guard™ from XFINITY has identified that one or more of your computers may be infected with a bot.


For your IP address the following botnets have been seen in the last week.
   

    Options

Botnet   Intent   Severity   MSRT Fix   Last Seen   Times Seen   Advisory
                  
JS_Blacole_Group   Multi-Purpose   68   -   2012-10-18 20:05:46 Local Time   126   -


My firefox java plugin is diabled.

Never seen this before.

[jmorly883]

Whats werid about this is looking over my notes i have received the above notice on an Ubuntu 12.04 install , 12.10 beta 2 , windows 7 ult. and now pclinuxos 2012 kde.

I seems strange to me that each one of the os's above had the same bots !!!

I am temped to install fedora 17 and see if i get the same results .

and as said above java plugin firefox is disabled.

[pupthai]

I can never send email to anyone with a comcast address - (Black listed from day one) has been that way for years - the reason is I won't get cleared from some fly by nite outfit that wants me to install a .exe program on my linux to ensure I am not spreading bots at comcast.  I made it clear I am not running windows but linux and sending from a gmail account and they said:  "I should run a real OS if I want to properly maintain my PC".  Not kidding - anyone that wants an email from me has to provide another address I can't even reply to them - still after years - I gave up on working with them.  I am betting you have nothing wrong with your PC and comcast will try and sell you something soon.

[jmorly883]

I did talk to their customer support via phone and after i told them i has the problem 3 different versions of linux , this individual said that must be the problem.  I replied to them that is the case why are you giving me download links for windows anti-virus and malware removal software ?

The lady just hung up right after i said that.

I have done a bunch of googleing and only found references to windows machines with the above infections.  I will still look around see i can find some linux ones.

I will probably install fedora 17 and see if i get the same results.  If so then there is , 1. someone else in this apartment building using my internet  , or 2. comcast's software has a lot of false positives.

[Just17]

It reads to me like any other email from a 'baddie' trying to get me to install malware.

If my ISP tried sending stuff like that I would do all I could to publicly embarrass them by posting the contents everywhere their customers might visit.

My ISP runs their own forum, so that would be the first place; after that there are several other locations which would cause them some pain!

[jmorly883]

Yup  What i am going to do now is to install fedora 17 from dvd and see what they do then.

I have to go the comcast office today anyway so i will take a copy of the email with me and let them explain what it means to me using linux.

[ternor]

If you have a wireless modem, check all the wireless settings to make sure no one else can tune in.