Article View: chi.internet
Article #605Re: sept 27th was deal with trojan spyware hijacker day
From: smr
Date: Fri, 30 Sep 2011 19:32
Date: Fri, 30 Sep 2011 19:32
38 lines
2834 bytes
2834 bytes
On 9/30/2011 1:25 PM, Matt Ferrari wrote: > ok which one of yooze guys hacked me? > > A week ago i started finding my computer idle with the adminstrator sign in > screen displayed when i returned the next day. > > I guess what was happening is someone was accessing my computer > remotely. It was more disturbing when it started happening while i was > actually AT the computer. I would see a warning screen that 34kere93joeblow > administrator is trying to connect to my computer and that agreeing to it > would sign me out. > Well if i made no choice it signed me out anyway. If i said no it would go > away for a while then come back. > > So what the FSDFL@#R$ S?! had enough of that crap. went to my computer > right clicked properties then the remote tab > and clicked off allow remote connections. Then i decided to check my startup > programs. There i found 2 malicious programs running. > I decided to uncheck 19 startups and keep 12 yes i had a lot. > http://www.ferrari-dvd.com/imagesNEWS-G/startupsSETTINGS.jpg > > uh? i guess i can get rid of umax vista access too i havent had a umax > scanner in a long time. :O > > Installed the program combofix and ran it it removed the bs. > > what the fork is up with people screwing computer users over like this? > I'm just a guy surfing the net doing research, and this happens? sheesh! What the fuck is up with exposing yourself like a drunken 18 year old girl backing into a frat house with her skirt over her head and no panties on? The hacker probably took a look around your PC, realized Bob and the Kerosene Pirate had already cleaned you out, took pity and logged off. -- smr
Technical Details
Message-ID:
<j655go$4fm$1@ftupet.ftupet.com>Path:
arc1-ca.pugleaf.net!lh7ni8507pbb.0!nntp.google.com!news1.google.com!goblin2!goblin3!goblin.stu.neva.ru!news.ripco.com!not-for-mailReferences:
<j651ih$114$1@dont-email.me>Show Full Headers
Complete Article Headers
X-Google-Thread: 10d5fa,a90a628857f3b390
X-Google-NewGroupId: yes
X-Google-Attributes: gid837b0c45a0,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Received: by 10.68.38.134 with SMTP id g6mr47812818pbk.6.1317411607432;
Fri, 30 Sep 2011 12:40:07 -0700 (PDT)
Path: arc1-ca.pugleaf.net!lh7ni8507pbb.0!nntp.google.com!news1.google.com!goblin2!goblin3!goblin.stu.neva.ru!news.ripco.com!not-for-mail
From: smr <me@shawnritchie.com>
Newsgroups: chi.internet
Subject: Re: sept 27th was deal with trojan spyware hijacker day
Date: Fri, 30 Sep 2011 14:32:26 -0500
Organization: ftupet.com
Lines: 39
Message-ID: <j655go$4fm$1@ftupet.ftupet.com>
References: <j651ih$114$1@dont-email.me>
NNTP-Posting-Host: ftupet.com
Mime-Version: 1.0
X-Trace: remote5bge0.ripco.com 1317411601 24706 66.246.138.5 (30 Sep 2011 19:40:01 GMT)
X-Complaints-To: usenet@ripco.com
NNTP-Posting-Date: Fri, 30 Sep 2011 19:40:01 +0000 (UTC)
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:7.0) Gecko/20110922 Thunderbird/7.0
In-Reply-To: <j651ih$114$1@dont-email.me>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit