🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: chi.internet
Article #603

Re: sept 27th was deal with trojan spyware hijacker day

#603
From: Brent
Date: Fri, 30 Sep 2011 18:58
30 lines
2606 bytes
On 2011-09-30, Matt Ferrari <invalid@noSpamORharvest.com> wrote:
> ok which one of yooze guys hacked me?
>
> A week ago i started finding my computer idle with the adminstrator sign in 
> screen displayed when i returned the next day.
>
>  I guess what was happening is someone was accessing my computer
> remotely. It was more disturbing when it started happening while i was 
> actually AT the computer. I would see a warning screen that 34kere93joeblow 
> administrator is trying to connect to my computer and that agreeing to it 
> would sign me out.
> Well if i made no choice it signed me out anyway. If i said no it would go 
> away for a while then come back.
>
> So  what the FSDFL@#R$ S?! had enough of that crap. went to my computer 
> right clicked properties then the remote tab
> and clicked off allow remote connections. Then i decided to check my startup 
> programs. There i found 2 malicious programs running.
> I decided to uncheck 19 startups and keep 12 yes i had a lot.
> http://www.ferrari-dvd.com/imagesNEWS-G/startupsSETTINGS.jpg
>
> uh? i guess i can get rid of umax vista access too i havent had a umax 
> scanner in a long time. :O
>
> Installed the program combofix and ran it it removed the bs.
>
> what the fork is up with people screwing computer users over like this?
> I'm just a guy surfing the net doing research, and this happens? sheesh!

Buy a router that can deny external access to your PCeeee.... 
Technical Details
Message-ID: <j653ge$crg$1@dont-email.me>
Path: arc1-ca.pugleaf.net!lh7ni8482pbb.0!nntp.google.com!news1.google.com!news3.google.com!feeder.news-service.com!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail
References: <j651ih$114$1@dont-email.me>

Show Full Headers
Complete Article Headers
X-Google-Thread: 10d5fa,a90a628857f3b390
X-Google-NewGroupId: yes
X-Google-Attributes: gid837b0c45a0,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Received: by 10.68.33.71 with SMTP id p7mr17711176pbi.1.1317409102976;
        Fri, 30 Sep 2011 11:58:22 -0700 (PDT)
MIME-Version: 1.0
Path: arc1-ca.pugleaf.net!lh7ni8482pbb.0!nntp.google.com!news1.google.com!news3.google.com!feeder.news-service.com!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail
From: Brent <tetraethylleadREMOVETHIS@yahoo.com>
Newsgroups: chi.internet
Subject: Re: sept 27th was deal with trojan spyware hijacker day
Date: Fri, 30 Sep 2011 18:58:22 +0000 (UTC)
Organization: Blah
Lines: 33
Message-ID: <j653ge$crg$1@dont-email.me>
References: <j651ih$114$1@dont-email.me>
Injection-Date: Fri, 30 Sep 2011 18:58:22 +0000 (UTC)
Injection-Info: mx04.eternal-september.org; posting-host="JKcwCt/WHqzCGRE7HtbpRA";
 logging-data="13168"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18DeXTov7ths+w8lL6JvwP4RzD5Kf6NGLQ="
User-Agent: slrn/0.9.8.1 (SunOS)
Cancel-Lock: sha1:AXtYXyJwJ4UO9396He2Xn+U7hro=