Virus Drains Data Bundle R10 000 later.

Status
Not open for further replies.
Welcome to the Revolution!

Which version are you looking at? Express 2.0, or the new Degu 3? :D
:D
Express 2.0 First, but after glancing over to Degu 3, I'm switching over to it soon. I don’t care that it is Beta, after reading your posts all over the internet you seem quite happy with Degu 3, even in it's beta form. My Express 2.0 installation on my P1 just does not like the ISA NIC I threw at it. I now need to go read through a few posts and docs to see how to use this card. Otherwise I'll need to run it on a Virtual PC or something (not recommended, I know).

What I have done to prevent these goggos or whoever or whatever to stop stealing my bandwidth was to run Netmeter & Netlimeter monitor...
I think what happened to him, he was hacked from outside because he left his system on with no protection. A hacker found a open port and the rest is history. If you have a PC/Notebook and no Internet security of sorts & regulary updated as IAM3G says you have BIG trouble coming.

/me downloads Netlimiter

I tend to think this was rather a Virus or a P2P program that did this because you cannot make any Incoming connections when using the default VC Internet apn unless you are a skilled at nat traversal. Unless a program making a connection to the outside, like P2P, was compromised.
 
@IC I just checked with my friend he is running the AVG anti-malware program on his system. It upgrades automatically daily. As I said in a previous post it isn't AVG free it is the bought version! Now what????
 
Oh well it looks as if the consumer is sill the one who gets nailed in the end. I don't think we will ever have enough protection. The average guy on the street only knows about anti virus's and some know about anti Malware. In the end the consumer is screwed.
I don't think my friend was negligent in any way (except maybe for not disconnecting his 3G card). He protected his PC as well or if not better than most.
 
He should start by using Hijackthis. It should give him an idea of whats on his laptop that shouldnt really be there. And then google all the wierd entries.
 
There are many forums out there that inspect the log file generated by Hijackthis and give you advice on what to do. They helped me alot :)
 
Thanks for all the advice. I have relaid all to my friend, I guess the ball is in his court. He took his laptop in to our local Vodashop to check for viruses. Looks as if they couldn't detect anything. Anyhoo thanks to you guys that gave such sound advice, it is rally appreciated. This is all that I wanted when I stared this thread. Not to put the blame on any one. Just to get a greater understanding of what can happen and why it does.
Thanks again
Bruce
 
Last edited:
Oh well it looks as if the consumer is sill the one who gets nailed in the end. I don't think we will ever have enough protection. The average guy on the street only knows about anti virus's and some know about anti Malware. In the end the consumer is screwed.
I don't think my friend was negligent in any way (except maybe for not disconnecting his 3G card). He protected his PC as well or if not better than most.

I think this is the problem Vodacom is now faced with - due to lower data pricing, huge advertising campaigns, affordable laptop bundles, coverage in areas which to this day, only have snail-pace Telkom dial-ups, they have made high speed internet connections accessible to virtually everyone. This was/is Alan Knott-Craig's vision for data after all... a very noble idea in my opinion. Putting this into practice is where it gets tricky!

The problem is that 99% of these people are not I.T. boffins, they are lucky if they know that they need an antivirus - even though the forms they sign state this. Never mind about anti spyware/malware, firewalls, automatic updates, netmonitors, etc. Some members on this forum have even been caught with high bills, and they know the risks!

A R10 000 bill is not unique, I currently have 2 clients with the same problem. The one client was brand new, took the line for his son at varsity in pretoria, so knowing about the gaming/streaming habits of students, we put a financial limit lock of R100 (in excess of his bundle) on that line in addition to the automatic Vodacom R1500 lock, which is mandatory on all new lines for the first 3 months. The result is a huge R12000 bill!! Aside from blame, who must carry the cost? Vodacom's billing is not "live", which is why neither limit locks protected him. How can even a virus use that much in 3 hours - which is the delay noted on the balance enquiry screen - after which surely the limit locks would have/should have kicked in?

The worst part is that unlike voice, Vodacom cannot say this is the number you dialled and the duration of the call. They can't give any indication of what website ate up all the data!

I think Vodacom need to re-look at this system, and perhaps put in place a system where you choose an OOB limit, Say R200, after which you are locked and have to call/go to a Vodashop/access vodacom4me, to add another bundle.

The alternative is that yes, a court may order these clients to pay the huge bill, but will they ever use Vodacom HSDPA (or any other Vodacom service) again?:eek:
 
@3C4me and IC thanks for your input. This is what I was saying from the beginning, the system is floored and it seems to be a problem that both parties have some responsibility in. I really really feel sorry for those people and have a sense of helplessness. I am afraid for people like my folks who i mentioned in an earlier post. They are pastors and a 10k bill would cripple them.
Thanks again for your input.
Cheers
B
 
I don't want to be too cynical here, but how is it possible to run up such a huge bill in such a short time - as according to the forums I read - the speeds are so slow and the 3g and HSDPA doesn't work most of the time. Therefore at Edge speeds with dropped connections would make such a bill impossible! Jokes aside, a self selected limiter (that works) would be welcome.
 
Some people seem to be missing the point entirely. A virus scanner will NOT stop all viruses no matter how up to date it is and to say anything to the contrary is pure hogwash.

Now analogies aside - which is a rather unfair comparison unless someone climbs over the fence and turns open a tap or a pipe bursts (who is responsible then?) - Vodacom is not entirely blameless. The banks are a good example taking responsibility for something which is not necessarily their fault.

But aside from whose fault it is or not, if Vodacom can phone when you racked up a bill of R10,000 then they can do so when it reaches R500 or R1,000 as well. R10,000 seems to be the standard set and the only word for it is GREED. Who on earth would want to rack up such an amount while only being on a weekender package? A more reasonable amount would be R500 or R1,000 depending on what package you are on and anything over that Vodacom should foot the bill.

The other point is that even if it was entirely the "customer's" fault and assuming there was no bundle involved about 5GB of data would have been used which will generally cost Vodacom about R225. Now if they were charging a fair price for it then the 5GB will cost only slightly more or even at current bundle rates R1,067. So no matter which way you see it the bill should not be more than R1,000 and Vodacom would not be losing anything.

This is why I'm confused.:confused: When I went over my bundle i received an sms on my laptop warning me that I had gone over! Lesson learned!!
To see the sms you must be running software to monitor it. If no software was running (like in my case) he would not see it. They are also not fault proof and I got 5 sms last month but only 1 this month telling me how much I had left. You also say he uses his weekender as a backup so I am assuming he didn't have an active bundle at that time and didn't get any sms warning for that reason.

An anti-virus is not a replacement for a spyware checker. There's this particularly nasty hellmsn version which I've encountered occasionally for about a year now and it slips through Spybot S&D. I've seen these things in action uploading and downloading at 100MB an hour. The standard windows firewall which is NOT enabled by default does seem to stop it though.
 
Prometheus : I would love to know where you get to the R225 figure for 5gb of Traffic?.

I'm not defending VC here, I think its wrong and they should have contacted the client ALOT sooner, but we do not know what their costs are like, it could cost VC R700 for 5gb... or more.. or less, we just don't know because we do not know all the expenses involved in the business.
 
I apologize for bumping this thread but....in all the examples used regarding the municipality, Telkom etc, why should we always asume that they are right, since not everyone knows how to defend them selfs in such a case. In my job I regularly have to log faults to Telkom to which their reply is (not always, but it happened a couple of times) "nothing is wrong", and then miraculously the problem gets solved.
 
Prometheus : I would love to know where you get to the R225 figure for 5gb of Traffic?.

I'm not defending VC here, I think its wrong and they should have contacted the client ALOT sooner, but we do not know what their costs are like, it could cost VC R700 for 5gb... or more.. or less, we just don't know because we do not know all the expenses involved in the business.

True :) But in a case like this, the least they could do is charge the poor person the 5GB bundle price of R1049, instead of bankrupting them:(
 
Viruses, malware, spyware, etc. are not the only causes of unexplained data usage. Automatic updates in Windows, Firefox, Acrobat Reader are all to blame. All these applications have auto-update activated by default. A friend left his computer unattended, while it was connected to the Internet with a HSDPA modem. When he got back, Acrobat Reader had downloaded a 20MB update.:eek:

WireFree
 
Viruses, malware, spyware, etc. are not the only causes of unexplained data usage. Automatic updates in Windows, Firefox, Acrobat Reader are all to blame. All these applications have auto-update activated by default. A friend left his computer unattended, while it was connected to the Internet with a HSDPA modem. When he got back, Acrobat Reader had downloaded a 20MB update.:eek:

WireFree

The lastest version of Adobe Reader (version 8) has an auto update feature that is not user controlled like previous versions. You can disable it by deleting the update dll from your adobe folder under programs. Alternatively, a good firewall can be set to disable internet access for certain apps thus preventing auto updates.
 
This is exactly what most of the people the world over do! They use their laptop to write emails, listen to music and play games, and other work which has nothing to do with being a computer fundi! And exactly what is intended on the internet and by userfriendly software. Millions of completely computer unsavy people use the internet on a daily basis worldwide without knowing what a gigabyte even is. This is where the YouTubes, facebooks etc come in. Just in South Africa is it different.

When a child or grandmother or anybody clicks a link , they do so to see or hear what they have clicked. They do not sit and think, is this going to cost me R100 for listening to this streaming radio or R50 for the video. There are no concerns about the size of what they do. SIZE is an invisible measurement for most people. THis is where Telkom and their followers was so clever. In the old days I could determine usage and cost associated by the amount of time I spend on the internet. Now I can blow R200 in half an hour or R200 in a month, depending on the underlying quality and size of what I am utilising.

In fact it is only in South Africa that we should legalise an internet warning system for these type of services, whenever you click on a link, eg

THIS VIDEO IS DANGEROUS FOR YOUR BANK BALANCE BECAUSE IT IS 10 MB BIG - PLEASE CHECK TO SEE THAT YOU HAVE IN BUNDLE MBYTES LEFT OTHERWISE YOUR SERVICE PROVIDER IS GOING TO CHARGE YOU AN OUTRAGEOUS AMOUNT FOR THIS!!!!!

LOL You get my 3 cheers for this one.

Everybody is missing the point.
Has this guy been warned of the risks of having a data limit and going over it, etc. etc. etc. In the past all the Internet connections had been on a time limit not a data download limit as said above you cannot see it. A MONTH later you see it, to late she cried. Time limit is much easier to manage. What is the reason for selling connectivity by volume of data and not by time limit?
I wan't to see any of you guys driving on a road at 180km/h and get a R10000 fine and pay it, that is if there were no warnings.

@ic. Go get a learners licence first ???. Then don't sell him the product if he does not have a licence!!!. Can you buy a gun without a licence?? NO.

Iam3g. Are u there to provide the customer a service??? Does it not make you feel good that you have warned a customer about the risks ???

The same thing happened to Telkom with 64K account with 128k ISDN setup.
 
I hear what you are saying, but i didnt mean everyone should go out and get IT Degree??? I said they should at least take the initiative to educate THEMSELVES first, instead of EXPECTING any IT Specialist to explain to them the in's and out's.

Its not your responsibilty to know every mechanical detail about your car, but its your responsibilty to LOOK AFTER IT.

With that said, your friend should have kept a closer eye on his laptop :)

He did but did you give him the tools to do it ??? How was he suppose to see that there is continues activity on his Internet connection?

It's common practise nowadays if you buy a 4x4 or hightech car you get a free invite to a drivers training session, so how about it when you buy a new PC/notebook etc.
 
Last edited:
@Bruce000.
I would suggest your friend does the following if has not already done so.
1) Which version of VMC is he using?
2) Does it support SMS?
3) email [email protected] with his modem cell number and ask them if there were any warning messages sent.
4) Have the notebook checked by a PC shop or somebody that really knows what they are doing.
5) Dowload netmonitor from here http://www.metal-machine.de/readerror/index.php?action=tpmod;dl=get13
6)Download netlimiter monitor here http://www.netlimiter.com/download/nl_2010_mon.exe
7) Install above downloaded programs
8) Connect to the Internet, that is if he still has the 3G/hsdpa connection.
9) Start these 2 programs and monitor the activity on the Internet and see who the culprit is.

N/B if he new about the risks he would not have allowed the account to go that high.

With all due respect the majority of new the New South Africa donot understand the mechanics & technology around PC/Internet?Wireless etc. It is our Jobs as people in the know to teach them help them etc.
 
Status
Not open for further replies.
Top
Sign up to the MyBroadband newsletter
X