05-17-2012 02:12 PM - edited 05-17-2012 02:13 PM
I just got an email from Comcast saying my PC may be infected with a bot. I've already run an AV scan, and urrently running Microsoft's Malicious Software Removal Tool. I honestly don't believe I've been infected. I'm pretty careful about that stuff.
One thing that comes to mind is perhaps Comcast thinks my VPN activity is suspicious? I use OpenVPN in a UDP configuration. Could Constant Guard be throwing a fit about that?
It'll be at least another 4 hours MSRT to finish scanning.
Edit: I just looked at the time stamp on the email from comast. It was sent at 2:15 AM. Are those alerts sent as soon as somethnig is detected? Or is it delayed a bit? All my PCs were powered off at 2:15 AM.
05-17-2012 07:49 PM
Oh no no, I don't have any Comcast software on my PC. This was an email comcast sent me out of the blue.
I used my VPN again today, so we'll see if I get another email.
When I visit [ https://amibotted.comcast.net/ ], it says I'm in the clear.
05-17-2012 08:00 PM
Check here as well:
If you use a router for wireless connections,make sure it is properly secured.
05-17-2012 08:34 PM
Make sure your router supports 802:11N, the newsest type of router. Also, WEP is an outdated type of wireless security. Use WPA-PSK preferrably to keep people from snooping around on your network. You can also choose not to dislplay your SSID, but you'll have to manually enter your network info on each attached device. However, you will be invisible wirelessly. Get into your router settings to do these things.
05-25-2012 01:17 PM
So apparently I can't log in as swp8. Comcast banned me for some reason.
Anyways, I got another email from Constant Guard telling me I may be infected. It just so happened that I was using a VPN last night. I'm pretty sure Comcast's monitoring system is getting false positives from my VPN service.
Is comcast going to terminate my service if I keep getting those emails and ignore them?
It'll be interesting to see if this username gets banned too.
05-31-2012 10:49 AM
05-31-2012 01:50 PM
Yep, I've been checking amibotted many times since the first email, and any time I got an email alerting me that I may be infected. Everytime I check, it tells me I'm in the clear.
I'm prety sure my VPN is producing a false positive.
06-03-2012 10:05 AM
Just got a new Constant Guard Alert email on 6/2/2012 11:05 PM. I am absolutely sure those emails are false positives from my VPN service. If what you said regarding my service not being terminiated is true, I'll just ignore these in the future.
06-08-2012 09:59 AM
I have also received two of these alerts. One thing that occured to me is that I don't use Comcast's DNS servers. I would think this is likely why they are detecting a potention bot infection as this is a common symptom of infection.
07-04-2012 06:59 PM
I got a couple of those emails awhile back and I too thought it was a mistake but after the second one I did a complete scan rather than the quick scan. It found a rootkit trogan but was unable to remove it. I found a rootkit killer on the internet and it removed it with no problem. That stopped the emails. You might want to do a full scan if you haven't already
07-10-2012 12:03 PM
Hello all. I too am getting these constant guard messages about being infected with a bot. I just completely rebuilt my computer with brand new SSD drives not even 2 weeks ago and I got another alert from them yesterday. I am not using a VPN application that often but I do use Carbonite online backup and I was wondering if that could be causing the alerts?
Do any of you other folks who are routinely getting these bot alerts also use Carbonite or some other automatic online backup solution like Mozy?
©2011 Comcast | Investor Relations | Press Room | Corporate Blog | Privacy Statement | Visitor Agreement | Comcast.com Feedback | Site Map