🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: chi.internet
Article #606

Re: sept 27th was deal with trojan spyware hijacker day

#606
From: Cydrome Leader
Date: Fri, 30 Sep 2011 19:52
38 lines
3024 bytes
smr <me@shawnritchie.com> wrote:
> On 9/30/2011 1:25 PM, Matt Ferrari wrote:
>> ok which one of yooze guys hacked me?
>>
>> A week ago i started finding my computer idle with the adminstrator sign in
>> screen displayed when i returned the next day.
>>
>>   I guess what was happening is someone was accessing my computer
>> remotely. It was more disturbing when it started happening while i was
>> actually AT the computer. I would see a warning screen that 34kere93joeblow
>> administrator is trying to connect to my computer and that agreeing to it
>> would sign me out.
>> Well if i made no choice it signed me out anyway. If i said no it would go
>> away for a while then come back.
>>
>> So  what the FSDFL@#R$ S?! had enough of that crap. went to my computer
>> right clicked properties then the remote tab
>> and clicked off allow remote connections. Then i decided to check my startup
>> programs. There i found 2 malicious programs running.
>> I decided to uncheck 19 startups and keep 12 yes i had a lot.
>> http://www.ferrari-dvd.com/imagesNEWS-G/startupsSETTINGS.jpg
>>
>> uh? i guess i can get rid of umax vista access too i havent had a umax
>> scanner in a long time. :O
>>
>> Installed the program combofix and ran it it removed the bs.
>>
>> what the fork is up with people screwing computer users over like this?
>> I'm just a guy surfing the net doing research, and this happens? sheesh!
> 
> What the fuck is up with exposing yourself like a drunken 18 year old 
> girl backing into a frat house with her skirt over her head and no 
> panties on?
> 
> The hacker probably took a look around your PC, realized Bob and the 
> Kerosene Pirate had already cleaned you out, took pity and logged off.

Ha- Bob and the Kerosene Pirate
Technical Details
Message-ID: <j656lp$qjk$4@reader1.panix.com>
Path: arc1-ca.pugleaf.net!lh7ni8512pbb.0!nntp.google.com!news1.google.com!news2.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!nx01.iad01.newshosting.com!newshosting.com!news-out.readnews.com!transit3.readnews.com!panix!panix.com!presence
References: <j651ih$114$1@dont-email.me> <j655go$4fm$1@ftupet.ftupet.com>

Show Full Headers
Complete Article Headers
X-Google-Thread: 10d5fa,a90a628857f3b390
X-Google-NewGroupId: yes
X-Google-Attributes: gid837b0c45a0,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Received: by 10.68.50.133 with SMTP id c5mr47829266pbo.2.1317412345540;
        Fri, 30 Sep 2011 12:52:25 -0700 (PDT)
MIME-Version: 1.0
Path: arc1-ca.pugleaf.net!lh7ni8512pbb.0!nntp.google.com!news1.google.com!news2.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!nx01.iad01.newshosting.com!newshosting.com!news-out.readnews.com!transit3.readnews.com!panix!panix.com!presence
From: Cydrome Leader <presence@MUNGEpanix.com>
Newsgroups: chi.internet
Subject: Re: sept 27th was deal with trojan spyware hijacker day
Date: Fri, 30 Sep 2011 19:52:25 +0000 (UTC)
Organization: PANIX Public Access Internet and UNIX, NYC
Lines: 40
Message-ID: <j656lp$qjk$4@reader1.panix.com>
References: <j651ih$114$1@dont-email.me> <j655go$4fm$1@ftupet.ftupet.com>
NNTP-Posting-Host: panix1.panix.com
X-Trace: reader1.panix.com 1317412345 27252 166.84.1.1 (30 Sep 2011 19:52:25 GMT)
X-Complaints-To: abuse@panix.com
NNTP-Posting-Date: Fri, 30 Sep 2011 19:52:25 +0000 (UTC)
User-Agent: tin/1.8.3-20070201 ("Scotasay") (UNIX) (NetBSD/5.1 (i386))