Sorry your browser is not supported!

You are using an outdated browser that does not support modern web technologies, in order to use this site please update to a new browser.

Browsers supported include Chrome, FireFox, Safari, Opera, Internet Explorer 10+ or Microsoft Edge.

Geek Culture / How do you unleash hellfire on a spyware distributor?

Author
Message
Matt Rock
19
Years of Service
User Offline
Joined: 5th Mar 2005
Location: Binghamton NY USA
Posted: 31st May 2008 23:07 Edited at: 31st May 2008 23:09
A short while ago, I was researching firearms for a new game design project. I needed to find out the rate of fire and effective range of several assault rifles, and ended up at world.guns.ru (do not visit this site!). I found the info I was looking for, and all was well... that is, until I navigated back to Google to research something else. With IE7's pop-up filter on and both Trend Micro and AVG running, and security settings at high as usual, I didn't expect what happened next: I was presented with about a dozen pop-ups advertising anti-spyware software. A few seconds later, I get an icon in my system tray and a little pop-up asking me to review my security settings. I click the icon, thinking the Windows Security thing was legitimately trying to prevent an infiltration. Nope. It's spyware trying to direct me to www.waytoprotect.com to download some anti-spyware software, and to cash in on a "free web-based spyware scan." I opened a new IE7 window, and my home page was altered to an advert for the same link. Somehow, this spyware got passed Trend Micro's lock feature that prevents changes to system and browser settings/ configurations .

I ran Trend Micro and Ad-Aware 6.0, and together it killed the spyware. But then I got to thinking. Most people ignore spyware after it's dead, merely hoping it doesn't happen in the future. We can't be bothered to seek revenge. Why not? I mean seriously, why don't we try to do something about it? Everyone always says "well, there's nothing you can do about it, too bad so sad." But come on, TGC is a community of intelligent and creative individuals. Let's set a precedent here and make this not happen to anyone else, lol.

I went to whois and collected information about waytoprotect.com. The guy who owns it is named John Asante. I'm putting other information into code snippets below. I've been far more annoyed by other sypware/ malware/ virus found on my PC, but I always get lazy about it and I never try to do anything for retribution. I heard about the Digg community opening fire on some kid who stole another kid's 360 (I think I heard about that here, actually). We're much cooler than the Digg people lol. There has to be a creative way of annoying this guy just as much as he annoyed me . Any ideas are more than welcome (but keep it clean guys, nothing illegal or violent should be discussed). I'm not sure that a massive-scale Rick Roll would cut it lol.

Edit: Almost forgot the Whois info:


bitJericho
22
Years of Service
User Offline
Joined: 9th Oct 2002
Location: United States
Posted: 31st May 2008 23:17
Have you stopped to think that perhaps his website was hacked? He may be in Kishinov, but that doesn't automatically make him a spyware distributor.

I'd send him a phone call or an email about what happened, and that if it's not corrected in a week or two that you'll be reporting him to his isp, and to whoever else you want to contact.


Hurray for teh logd!
Jeku
Moderator
21
Years of Service
User Offline
Joined: 4th Jul 2003
Location: Vancouver, British Columbia, Canada
Posted: 31st May 2008 23:56
Yah, you can do something by not using IE anymore. I have *never* heard of icons and programs installing on a Windows system by using Firefox.

As has been stated, his domain was most likely hijacked. Do you really think someone is dumb enough to spread spyware and have his personal contact info in the whois registry? You're too quick to lay blame. Also, you can almost never go after somebody who lives in another country--- some of those countries don't even have laws forbidding spyware.


bitJericho
22
Years of Service
User Offline
Joined: 9th Oct 2002
Location: United States
Posted: 1st Jun 2008 00:16
Quote: "I have *never* heard of icons and programs installing on a Windows system by using Firefox."


Firefox is not the end all be all of protection. But it certainly might have helped

At the same time, there are a billion other sites you could visit that could get your computer infected if you're using firefox

Opera's probably still pretty safe.


Hurray for teh logd!
jasonhtml
20
Years of Service
User Offline
Joined: 20th Mar 2004
Location: OC, California, USA
Posted: 1st Jun 2008 00:29 Edited at: 1st Jun 2008 00:29
ive always wanted to take revenge on spyware distrubitors. but, i've been too afraid of the legality to do so

Soroki
18
Years of Service
User Offline
Joined: 26th Jan 2006
Location: United States
Posted: 1st Jun 2008 00:44 Edited at: 1st Jun 2008 00:44
I have a small idea. If you have his email. Make a DB program that basically drops thousands of useless files ALL over his computer, in the system folder, on the desktop, etc. I know, a simple system restore can fix it, but some people don't think of that. You fool him into downloading the program in an email attachment and he runs it, and poof, his PC has thousands of trash files on it.

Maybe you can make a convincing fake BSOD or something. I'm not really trying very hard to come up with something....XD

"I can't install things to my D:\ drive. Can you help me?"
"Just delete system32.dll. It should work fine after that"
David R
21
Years of Service
User Offline
Joined: 9th Sep 2003
Location: 3.14
Posted: 1st Jun 2008 01:11 Edited at: 1st Jun 2008 01:14
I think either the site was momentarily hacked/hijacked, or you got your spyware from another source, because visiting this site on my machine does the grand total of zilch (With nod32 in the background).

EDIT:
Actually, after refreshing, the site can be seen trying to connect to all manner of crap (barclaycard.co.uk and natwesk.co.uk) prior to the page finishing loading, so clearly it's trying to do something.


09-f9-11-02-9d-74-e3-5b-d8-41-56-c5-63-56-88-c0
Van B
Moderator
22
Years of Service
User Offline
Joined: 8th Oct 2002
Location: Sunnyvale
Posted: 1st Jun 2008 14:24
There are plans in the UK, for our ISP's to SELL our browsing habbits to advertising firms so they can direct the appropriate popups to us. Most major ISP's are planning this.

Until the retards stop clicking those popups, it won't stop - perhaps it's a case of experienced users explaining why it's not a good idea to click them. If there was no revenue in popups there wouldn't be any, it's as simple as that.


less is more, but if less is more how you keeping score?
tha_rami
18
Years of Service
User Offline
Joined: 25th Mar 2006
Location: Netherlands
Posted: 1st Jun 2008 15:57 Edited at: 1st Jun 2008 15:58
Well, there's enough sites around that actually do live through spreading spyware as that too, is a lucrative business - sadly. The site indeed seems to try to connect to the PC in some odd ways and I personally believe the Who.is entry might be fake. As far as I'm aware, they aren't as strict with ARAN/Who.is listing in Russia as they are in the US.

To unleash hellfire, just report the site on every large spyware site around.

Then hack the heck out of the sit... oh wait, nothing illegal? Darn! Well, then just beat the guy u... nothing violent too?!


A mod has been erased by your signature because it was larger than 600x120
draknir_
18
Years of Service
User Offline
Joined: 19th Oct 2006
Location: Netherlands
Posted: 1st Jun 2008 16:24
wait, are you saying that beating the guy up wouldn't be illegal?
Mr Z
17
Years of Service
User Offline
Joined: 27th Oct 2007
Location:
Posted: 1st Jun 2008 18:18
You can become an ambassador and then beat him. They have diplomatic immunity .

Nah, just kidding. Violence is not the answer.

Darkness, you haunt me. If I give in, I would be an monster beyond imagining. Light, you guide me. Thanks to you, I see past the nothingness. Life, I choose to live in the light.
tha_rami
18
Years of Service
User Offline
Joined: 25th Mar 2006
Location: Netherlands
Posted: 1st Jun 2008 21:37
Yes it is thé answer. NUKE 'EM ALL!


A mod has been erased by your signature because it was larger than 600x120
Aertic
17
Years of Service
User Offline
Joined: 2nd Jul 2007
Location: United Kingdom
Posted: 1st Jun 2008 23:32
No its tell them to get a life instead of sucking other lifes out of people via machines, either way they may help you to get a life.

ionstream
20
Years of Service
User Offline
Joined: 4th Jul 2004
Location: Overweb
Posted: 1st Jun 2008 23:41
I blocked the .ru domain a while ago when someone's site got hacked and it tried to get you to go to a Russian site.

In Soviet Russia, virus downloads YOU!

Aertic
17
Years of Service
User Offline
Joined: 2nd Jul 2007
Location: United Kingdom
Posted: 1st Jun 2008 23:47
Quote: "In Soviet Russia, virus downloads YOU!"


rofl. Ionstream that was hillarious.

I'll nuke them with their own nukes, them virus/trojan soviets(no offense to any russians here.)

Matt Rock
19
Years of Service
User Offline
Joined: 5th Mar 2005
Location: Binghamton NY USA
Posted: 1st Jun 2008 23:48 Edited at: 2nd Jun 2008 00:03
Code Red! This is actually far worse than I thought it was. I was playing Fallout 2 last night and decided to google screenshots of Fallout 3. But when I got to Google and put in "fallout 3 screenshots," and found what seemed like an appropriate link, it directed me straight to an advert. I tried several other Google searches under Fallout 3, then tried others... Abraham Lincoln, Joystick, cake, whatever random thing popped into my head... all adverts. I figured hey, no biggie, I'll just fire up Firefox. Wrong! Firefox won't load!!! I can't access the net via Realplayer's browser either... I think this might surpass your run of the mill broswer hijack .

I looked at my processes, and bingo, I found what I assume must be the culprit, a file called 444.471 . I'm going to try and killbox it as soon as my system is done running AVG. I ran Nod32, Tend Micro, and Ad-Aware (Spybot wouldn't run ) but they all came up empty. Formatting a 160 GB hard drive with only 22 GB of free space simply isn't an option, and I've never come across a virus or spyware yet that couldn't be killed somehow (knock on wood). I'm on my girlfriend's Dell right now trying to find stuff regarding this 444.471 process but I'm coming up dry . Any suggestions that could help resolve this issue would be much appreciated!!!

Yeah, when this is over and my computer is back to normal, I'm going to get revenge lol.

Edit: I found a few other posts on different forums where people have encountered very similar issues, and also have this 444.471 thing in their processes/ HJT logs. They all seem to be extremely new threads from late May (actually, the oldest I found so far was May 30th). The difference between me and them is that all I did was visit a website to research weapons, whereas they were doing illegal stuff . At any rate, whatever this bug is, it's apparently new.

bitJericho
22
Years of Service
User Offline
Joined: 9th Oct 2002
Location: United States
Posted: 2nd Jun 2008 00:03
my advice is to reformat


Hurray for teh logd!
NeX the Fairly Fast Ferret
19
Years of Service
User Offline
Joined: 10th Apr 2005
Location: The Fifth Plane of Oblivion
Posted: 2nd Jun 2008 00:04
You could burn Linux to a CD and kill it all from there or something.


I fail at life. No, really.
tha_rami
18
Years of Service
User Offline
Joined: 25th Mar 2006
Location: Netherlands
Posted: 2nd Jun 2008 00:05
Get on Yahoo!, Matt


A mod has been erased by your signature because it was larger than 600x120
Matt Rock
19
Years of Service
User Offline
Joined: 5th Mar 2005
Location: Binghamton NY USA
Posted: 2nd Jun 2008 00:06 Edited at: 2nd Jun 2008 00:10
Reformat isn't an option, it would take me the rest of today and well into tomorrow to backup everything since the HD is so full. I don't even know how many DVD-R's that would take lol. And what's worse, I need to report to Y! tomorrow for my first day of work, and I'll need my computer fully functional in order to do that .

edit: just got on Messenger

Samoz83
21
Years of Service
User Offline
Joined: 3rd May 2003
Location: Stealing Ians tea from his moon base
Posted: 2nd Jun 2008 00:15
Did your search come up with any other names for it cos I can't find a thing.

www.firelightstudio.co.uk
bitJericho
22
Years of Service
User Offline
Joined: 9th Oct 2002
Location: United States
Posted: 2nd Jun 2008 00:17
Why would Yahoo make you use your own computer for work?:/


Hurray for teh logd!
Matt Rock
19
Years of Service
User Offline
Joined: 5th Mar 2005
Location: Binghamton NY USA
Posted: 2nd Jun 2008 00:26 Edited at: 2nd Jun 2008 00:27
Because I'm working from home, I don't know if I can get into details about it yet but I'll be making $16/hr doing something regarding YIM

Here are two threads I found from people going through the same mess I am:
Thread I
Thread II

Just google "virus 444.471," there's a few others there as well.

Mr Z
17
Years of Service
User Offline
Joined: 27th Oct 2007
Location:
Posted: 2nd Jun 2008 00:45 Edited at: 2nd Jun 2008 00:51
A way could be to make a small application who will, at the moment any "444.471" process, make it stop. Do not know how well that would work, though, or how to do it.

A nother way that might work, but that would be really annoying, would be to download Ubuntu, burn it to a CD, boot into the Live-CD, make a 20 gb partition, fill with with files from your windows partition (you can do this from the Live-CD), then expand it as much as there are free space on your other partition, move over more files, expand, move over more files and continue to do so until all files you need to save are backuped. Then reformat (do not know if this should be done from the Live-CD, though).

Darkness, you haunt me. If I give in, I would be an monster beyond imagining. Light, you guide me. Thanks to you, I see past the nothingness. Life, I choose to live in the light.
tha_rami
18
Years of Service
User Offline
Joined: 25th Mar 2006
Location: Netherlands
Posted: 2nd Jun 2008 00:48
Well, I can't see you on Yahoo nor MSN.


A mod has been erased by your signature because it was larger than 600x120
Libervurto
18
Years of Service
User Offline
Joined: 30th Jun 2006
Location: On Toast
Posted: 2nd Jun 2008 01:21
crowbar, in the face...

how are you even going to find this guy?
you have my full support though.
Make him suffer!

It is far better to complete a 10 line program than to start a 10,000 line program.
GatorHex
19
Years of Service
User Offline
Joined: 5th Apr 2005
Location: Gunchester, UK
Posted: 2nd Jun 2008 01:26
Forget anything legal, in Russia anything goes and you can't extradite their citizens for crimes. Heck they brought radioactive material into London UK and killed someone and the UK goverment can do diddly squat about it.

Just avoid any sites with .ru on the end of it or avoid buying their goods vodka, caviar, space tourism etc in protest.

If you try to do anything against their site you will probably end up commiting a crime thru computer missuse or even worse just annoying the Russian mafia!

In the kindom of an "eye for an eye" the one eyed man is king. revenge just breeds revenge.

DinoHunter (still no nVidia compo voucher!), CPU/GPU Benchmark, DarkFish Encryption DLL, War MMOG (WIP), 3D Model Viewer
bitJericho
22
Years of Service
User Offline
Joined: 9th Oct 2002
Location: United States
Posted: 2nd Jun 2008 01:39
Quote: "space tourism"


There go my holiday plans


Hurray for teh logd!
Grandma
18
Years of Service
User Offline
Joined: 26th Dec 2005
Location: Norway, Guiding the New World Order
Posted: 2nd Jun 2008 02:01
Quote: "Heck they brought radioactive material into London UK and killed someone and the UK goverment can do diddly squat about it."


I don't know about that. It doesn't make sense why they would go trough so much trouble, when they could have come up with a far "safer" and more effective way to get rid of someone (I assume we're talking about the same case here). Nope, I don't buy that. And I also see worse crimes than that going on unpunished, in other first world countries. Things I can't even mention on this forum.

Quote: "Just avoid any sites with .ru on the end of it or avoid buying their goods vodka, caviar, space tourism etc in protest."


I fail to see how that will affect the spyware distributors. It's not like they represent any whole country or care if people buy caviar or not. I have come across many sites with spyware, I'm not going to exclude a whole top-level domain in my future ventures on the internets for that.

This message was brought to you by Grandma industries.

Making yesterdays games, today!
Matt Rock
19
Years of Service
User Offline
Joined: 5th Mar 2005
Location: Binghamton NY USA
Posted: 2nd Jun 2008 02:14 Edited at: 2nd Jun 2008 02:16
Of course not Grandma, I mean look at your avatar for crying out loud

I made the near-fatal mistake of calling M$'s "PCSafety" hotline. Nothing hits the spot like speaking with a customer service rep who knows less about computers than you do . I figured they could at least be aware of the virus if they wouldn't be able to help me... now I'm questioning even that, lol. He put me on the M$ Live OneCare Safety Scanner... I'll be extremely impressed if this solves the issue. Worth a try though. Ugh, this is instant karma biting into my face like a deathclaw (sorry, as I said, I've been playing Fallout 2 again lol). Just when I thought I'd killed a pretty simple spyware issue, it turns out to be some horrible desktop STD. And notepad doesn't seem to be working either, so I can't even do a HJT log, which irks me even more. I'm convinced this must be a brand new virus of some sort... this is the last thing I need right now lol.

I'm on Y! Rami, I don't see you either though. I tried to send you a message to both your Y! and MSN ID's. I tried to write to Jerico as well. I know that it's working and people can see me though because I msg'd my girlfriend, she says she sees me fine. So I can't figure out why you don't see me :/

Edit:
"If your computer is running slower than usual it probably isn't the virus. There's probably something wrong with the hardware itself." - M$ customer service guy

bitJericho
22
Years of Service
User Offline
Joined: 9th Oct 2002
Location: United States
Posted: 2nd Jun 2008 02:21
Quote: ""If your computer is running slower than usual it probably isn't the virus. There's probably something wrong with the hardware itself." - M$ customer service guy"


Haha, ms newbs.

Anyways, Im at work, so I'm no fun.


Hurray for teh logd!
Grandma
18
Years of Service
User Offline
Joined: 26th Dec 2005
Location: Norway, Guiding the New World Order
Posted: 2nd Jun 2008 02:44
Quote: "Of course not Grandma"


Ofcourse not what? Be more spesific.
The exclude sites part? Well, I meant sites in general, not just .ru. And my avatar is purely for cosmetic purposes and carries no hidden meaning/agenda or subliminal brainwash scheme/s.

Quote: ""If your computer is running slower than usual it probably isn't the virus. There's probably something wrong with the hardware itself." - M$ customer service guy"


Yup, he was on to something there. Viruses are rarely to blame for slow-downs. Your hardware must be acting up on its own. Silly hardware.

This message was brought to you by Grandma industries.

Making yesterdays games, today!
Matt Rock
19
Years of Service
User Offline
Joined: 5th Mar 2005
Location: Binghamton NY USA
Posted: 2nd Jun 2008 02:44
lol! I tried to explain to him that (A) the massive slowdown occured right after the virus started taking effect, (B) my RAM is relatively new and the hardware isn't making funny sounds, and (C) I have a 3.0 GHz processor and 2 GB of RAM... and he persisted it has to be the hardware, and sort of seemed insulted that I'd suggest the virus is causing it, lol. We've all had customer service jobs before, I've encountered people in those jobs who thought they knew what the problem was but were wrong, and I'm sure he gets a lot of really silly questions (you know... "my cupholder isn't working" or "this footpedal (mouse) is really annoying to use"). But when someone calls you and says they can't access their HJT log because notepad won't work, and that they've run a number of programs that regular users likely haven't heard of, you'd expect them to either escalate the conversation to match your understanding of computers, or get someone on the line who knows as much as the customer .

Ugh, it feels good to vent lol. That is, until I look across the room and see my PC doing its virus scan crawling along at 11%

draknir_
18
Years of Service
User Offline
Joined: 19th Oct 2006
Location: Netherlands
Posted: 2nd Jun 2008 03:09
man that sucks gl getting it fixed
Venge
18
Years of Service
User Offline
Joined: 13th Sep 2006
Location: Iowa
Posted: 2nd Jun 2008 03:47
This is clearly an evil plot by [insert game company] to steal the plans for top-secret MISoft games.

MISoft 3D Artist.
Matt Rock
19
Years of Service
User Offline
Joined: 5th Mar 2005
Location: Binghamton NY USA
Posted: 2nd Jun 2008 22:18
Totally cooked. I think a format might be my *only* option at this point . Now, *nothing* on my computer can access the internet... there's simply no access. M$'s OneCare started running at 6pm, and at 1am, it was only at 70% completed. At 5am, it was... 70% . I had to get some sleep, and when I woke up earlier, it was at the login screen... apparently something happened with the power, or onecare finished running and rebooted my computer. I guess I'll never know. What I do know is that my PC is running slower than ever, it can't access the internet, and transferring files between computers is the only way to get anything into or out of that computer. LAN or nothing at all. So, I'm going to email the guy that came up for whois -- why not -- and tell him to fix this crap or get reported to his ISP, his government, and anyone else who may or may not listen. This isn't merely an inconvenience... it's literally costing me money now and it very well could cost me my new job, and all of the years and years of work I've put into game design and game development could be lost because of this crap.

I'm going to move over fundamental stuff to my gf's computer and backup whatever else I can on DVD-R... otherwise, nothing much else to do I guess. I strongly need some serious tech support. Not as much as I need some aspirin and a break to chill out for a while though.

NeX the Fairly Fast Ferret
19
Years of Service
User Offline
Joined: 10th Apr 2005
Location: The Fifth Plane of Oblivion
Posted: 2nd Jun 2008 22:31
Sue him/her for damages and irresponsible behaviour.


I fail at life. No, really.
Agent Dink
20
Years of Service
User Offline
Joined: 30th Mar 2004
Location:
Posted: 2nd Jun 2008 23:01
I wish I could take a look at it for you Matt

It's probably fixable without a format but I don't know what to tell you without going through your computer myself... Backup your stuff and FedEx it

revenant chaos
Valued Member
17
Years of Service
User Offline
Joined: 21st Mar 2007
Location: Robbinsdale, MN
Posted: 2nd Jun 2008 23:29 Edited at: 2nd Jun 2008 23:36
I recently contracted a root-kit which totaly screwed up my computer. Luckily I had previously downloaded Hijack This, which found it for me yet is powerless to remove it, so after a quick trip into DOS (to delete the responsible dll file from my system32 folder) I am back up and running. If you can get a copy onto your computer I suggest using the utillity (in safe mode) since it seemed to be the only thing which found my rootkit, then look for entries with either no name or entries with crazy names (mine was something like LWLWZYSYESD.dll). You should also go into msconfig and make sure no entries were added into your startup or services. Other than the obvious (viruses/general malware), it could be that the spyware damaged your registry.
Jeku
Moderator
21
Years of Service
User Offline
Joined: 4th Jul 2003
Location: Vancouver, British Columbia, Canada
Posted: 2nd Jun 2008 23:32
Quote: "and all of the years and years of work I've put into game design and game development could be lost because of this crap. "


Come again? Just backup your files and then reformat. It will take you all of a few hours to get everything back up and ready. No need to be so extreme


Matt Rock
19
Years of Service
User Offline
Joined: 5th Mar 2005
Location: Binghamton NY USA
Posted: 3rd Jun 2008 08:33
Quote: "Come again? Just backup your files and then reformat. It will take you all of a few hours to get everything back up and ready."

It's going to take a heck of a lot of DVD-R's, lol. I went through and did the math today (took forever, sadly): about 50 gigs of meaningful content. My girlfriend's hard drive is empty enough for the transfer, but my computer can't access the LAN for some reason. Internet doesn't respond in safe mode with networking . I'd love to be able to get this stuff onto her computer, that'd make things easier/ cheaper/ less time-consuming. Does safe mode allow for a burner to run, or does it avoid loading the necessary drivers or whatever?

Quote: "Sue him/her for damages and irresponsible behaviour."

I emailed the guy that whois found. I asked (nicely, mind you) if he knew anything about the virus, or why the adverts seem to all be pointing to his website. No reply. If he doesn't respond in a day or two I'm going to find a way to sue him, get him arrested, and/ or make his life a living hell for as long as I possibly can, lol.

Quote: "I wish I could take a look at it for you Matt"

Me too . It doesn't warrant the 5+ hour drive lol, and trust me, I've considered it! Before I format, anyone who wants to have a go at helping me fix this is more than welcome. Sharyn's desk is on wheels, so I could cart it over to my desk and be the eyes/ hands for anyone wanting a go. I'll give it a shot tomorrow... if I don't sort this all out tomorrow, I'm going to format it wednesday .

Quote: "Luckily I had previously downloaded Hijack This, which found it for me yet is powerless to remove it, so after a quick trip into DOS (to delete the responsible dll file from my system32 folder) I am back up and running."

I wasn't able to make a HJT log (actually, that's how I found out notepad was broken). I haven't used HJT or Killbox in quite some time, so I forgot how it works. But it's worth giving it a try tomorrow. I've run every antivirus and spyware tool I could think of against this, as well as a few that've been suggested, and no dice. I didn't try HJT because I forgot it could do anything other than the log, lol.

Anyone who needs to make viruses to feel good about themselves most likely googlebates to view the trouble they cause, so with any luck they'll find this thread. If this should occur, I ask the hijacker to read the following two paragraphs. A warning to TGC'ers, if you're easily offended or faint of heart, please toggle this post immediately:

I really don't understand what hackers/ virus-makers get out of this. It isn't making them money... not from me anyway. In fact, I'd bet I've made more money out of legal, legitimate software than the guy who made this virus ever will from viruses/ spyware/ adware. Do they get kicks off of breaking the law? Does it make them feel cool? Are they striking back at society because they got picked on in school? No... I think they're just compensating for something. A *lack* of something. Anyone who gets their kicks out of knowing they're annoying people are pathetic cowards with bad parents and low self-esteem.

Want to know why I'm pro-choice? You're the reason why. Maybe if you spent some of your computer "talents" finding a job, putting your "l33t h@x0rz sk!11z" toward something meaningful, you could finally get yourself a few friends, maybe even a date? Well, I don't want to push it, you're probably too ugly and fat for dates. But you're more likely to attract a member of the opposite sex (if that's what you're into) with a proper job than you are making viruses in your mom's basement all day. I promise you there isn't a meaningful soul on this planet (or any other planet either, Star Trek nerd) who thinks what you're doing is impressive. Your pudgy friend might think it's cool, but look at him... is he really worth impressing? If you answered "yes" to that last question, you should just kill yourself, because life won't get any better for you. But hey, what do I know... hot girlfriend, great job (which you may have ruined for me btw, way to go), tons of friends, co-owner of a game dev company that people actually care about... oh, that's right, it turns out I actually know quite a bit! So just remember this: I can get rid of your virus, but you can't get rid of your misery and loneliness. Well, you can actually, and in much the same fashion as me getting rid of the virus... just buy yourself a firearm and "format" the inside of your head. Don't worry, you weren't getting into heaven anyway.

No offense to any Star Trek fans who just read that.

Jeku
Moderator
21
Years of Service
User Offline
Joined: 4th Jul 2003
Location: Vancouver, British Columbia, Canada
Posted: 3rd Jun 2008 09:34 Edited at: 3rd Jun 2008 09:34
Did you read any of the posts? His domain name was most likely hijacked, so there's no point in trying to sue him (that actually made me laugh).

Quote: "It's going to take a heck of a lot of DVD-R's"


So it's your fault for not making regular backups. You should be prepared for something like this to happen. I still don't see how you'll lose *years* of game design work


jinzai
18
Years of Service
User Offline
Joined: 19th Aug 2006
Location: USA
Posted: 3rd Jun 2008 11:07 Edited at: 3rd Jun 2008 11:09
Did you try a restore point?

btw, when my system slowed down...it was the Yahoo Toolbar that was the culprit....opening MANY instances of iexplore.exe as seen in Task Manager under Processes. They were spawned because I keep my PopUp blocker on full strength, so it just started another instance of Internet Explorer. I fixed it by uninstalling the Yahoo Toolbar after reverting to a restore point set before I updated my computer using Automatic Updates, which wiped out the Remove buttons from Control Panel.

P.S. Thanks for the warning this time; I appreciate that alot more than the highly charged rant that followed.
Mr Z
17
Years of Service
User Offline
Joined: 27th Oct 2007
Location:
Posted: 3rd Jun 2008 13:10 Edited at: 3rd Jun 2008 13:11
You can always connect to your girlfriends computer using a LAN cable directly, if you haven´t done it.

Otherwise you cab remove your HD and connect it to her computer or something, and do everything from there.

Darkness, you haunt me. If I give in, I would be an monster beyond imagining. Light, you guide me. Thanks to you, I see past the nothingness. Life, I choose to live in the light.
Seppuku Arts
Moderator
20
Years of Service
User Offline
Joined: 18th Aug 2004
Location: Cambridgeshire, England
Posted: 3rd Jun 2008 13:42 Edited at: 3rd Jun 2008 14:01
Try other anti-spyware, Adaware sucked for trying to get rid of a trojan I had once, my main AV software killed it when it popped-up to do anything, adaware removed the spyware, but it kept coming back - turned out it was reviving itself through the registry and Spybot did the trick (I think I used a registry cleaner as well...but you need to be careful with them, some are just junkware)

But Firstly:

The back-up idea, dude, it may take a lot of time and DVDs, but it's a lesson to be learned when backing up regularly - my Uni work is backed-up on my emails, USB Drive, disk and on my computer. I found once that my computer screwed up with a problem and my USB stopped working once - luckily I had also backed up my important stuff onto the internet as well, so none of it was lost.

If all of your important stuff is on one computer, BACK IT UP ASAP, you don't want to lose it right? The fact you have spyware and are trying to get rid of it, puts that data at a risk of being lost - I mean what if your registry buggers up beyond a point you can repair it? Anything can go wrong, so spend all day burning to DVD, buy an external hard drive to back-up onto and see what you can back-up elsewhere. Unfortunately computers aren't reliable all of the time. Once you back up regularly, you won't have as much to back up when such a problem does arise.

Next time use Firefox, most of my web problems used to come from IE, like when an unfamiliar website managed to download a lot of illegal pron, that meant an immediate re-format, because I didn't want to mess around with a malware IE downloaded from the site. Firefox stops things download involuntarily, at least with what you choose to download, you can do a virus scan on before even opening it.

Secondly:

The revenge, I've always been tempted - but I've always said, (after receiving the advice myself) when there's a problem, don't attack the bigots, they're just small meat and they won't solve the real problem, but find the source. Though in terms of hackers, it's probably not easy to get to the source of hacking and stopping it.

Revenge can also escalate things, I mean if he's a hacker, he can get back at you again.

As the Mitchell brothers in our beloved UK soap opera, Eastenders would say, (in your best east London accent) "he ain't worth it mate, leave it out"

"Experience never provides its judgments with true or strict universality; but only (through induction) with assumed and comparative universality." - Immanuel Kant
David R
21
Years of Service
User Offline
Joined: 9th Sep 2003
Location: 3.14
Posted: 3rd Jun 2008 17:44 Edited at: 3rd Jun 2008 17:46
Quote: "Did you read any of the posts? His domain name was most likely hijacked,"


I'm under the impression it's deliberate - if you look at the frontpage, it says "Please make sure javascript is turned on" - if you turn it off, the site does nothing (it doesn't do anything at all to my machine, but it does try and contact other domains; turn off JScript and it does nothing) and since the remainder of the site continues to function, it seems as though the malicious activity is the only thing which 'needs' javascript.

At the same time though, I'm not sure this site even gave out the virus (or worm, or whatever it is) It doesn't seem to do anything besides contact a few domains and then stop.


09-f9-11-02-9d-74-e3-5b-d8-41-56-c5-63-56-88-c0
Dared1111
18
Years of Service
User Offline
Joined: 25th Oct 2006
Location:
Posted: 3rd Jun 2008 18:05
Quote: "I have a small idea. If you have his email. Make a DB program that basically drops thousands of useless files ALL over his computer, in the system folder, on the desktop, etc. I know, a simple system restore can fix it, but some people don't think of that. You fool him into downloading the program in an email attachment and he runs it, and poof, his PC has thousands of trash files on it.
"


Illegal.

In the Computer Missuse act it says that you cannot:

Secure access or try to (Ok if you own the pc)
Create a Program which restricts accsess (Its ok if you own the PC)

So therefore we can still make a program that pops up and calls them noobs before they must hide it in the very bottom of their screen because it stays on top and is hidden and read only.


Where can I get the codes. I know how to build it with codes. GET IT. I HOPE U UNDERSTAND. DUHH
revenant chaos
Valued Member
17
Years of Service
User Offline
Joined: 21st Mar 2007
Location: Robbinsdale, MN
Posted: 3rd Jun 2008 18:29
If you try HJT, just have it do a system scan without the log since your notepad is broken.

Quote: "I really don't understand what hackers/ virus-makers get out of this. It isn't making them money..."

I have my suspicions that antivirus companies might hire those "googlebaters" to keep themselves in business.
Matt Rock
19
Years of Service
User Offline
Joined: 5th Mar 2005
Location: Binghamton NY USA
Posted: 3rd Jun 2008 20:09
Quote: "His domain name was most likely hijacked, so there's no point in trying to sue him (that actually made me laugh)."

I could see the world.guns.ru site being hijacked, but why would waytoprotect.com be hijacked? The ads I'm getting all tell me to buy products from that website, so it seems pretty unlikely his site was hacked by someone who wants his products to sell. The domain itself seems to line up pretty well with the antivirus crud that's being peddled my way. If he doesn't respond to my email, or if he doesn't come across as honest (I think I have a nose for that), then I'm definitely going to look into learning if there's any way to sue him, or get him arrested. If I can't, I want to make sure to make his life *at least* as miserable as he's made mine . If he's innocent, he'd respond to my email before I get wheels under whatever I decide to do.

Quote: "I still don't see how you'll lose *years* of game design work"

I said I *could* lose years of design work... what if the virus somehow got its way into a game design folder? Back when I was dealing with the Dr. Watson thing a few years ago, people said some viruses infect random files and hide themselves in exe's. I don't know enough about viruses to know if that's true or not, but it's definitely a scary concept. The bottom line is that the last time I encountered a virus that made me format the HD, it happened on a Windows 95 machine, lol. I keep making the stupid mistake of killing viruses, and then convincing myself that my computer is bulletproof. But you're right, it's dumb of me , I can't deny that.

Quote: "Did you try a restore point?"

I haven't tried that because the HD is so large. After backing everything up tomorrow (if I don't solve this today) then I'll try using the Vaio recovery thing and restoring from a month or two ago. It'd be a lot faster/ smoother than a format, that's for sure.

Quote: "You can always connect to your girlfriends computer using a LAN cable directly, if you haven´t done it."

I tried it with a crossover cable and then a regular one, it doesn't work for some reason. Could this be messing with my drivers?

Quote: "I'm not sure this site even gave out the virus (or worm, or whatever it is) It doesn't seem to do anything besides contact a few domains and then stop."

I think it has to be. Stuff started happening as soon as I navigated away from world.guns.ru, with pop-ups for antispyware programs and that odd icon thing coming up in my system tray. I haven't done anything naughty on my computer lol, haven't gone to "adult" websites, haven't downloaded music or anything... the only downloads I've done have all been game dev related. The most dangerous site I've gone to in recent months was myspace, lol... I do most of my design-related research on Wiki and using a CD-ROM encyclopedia . I made the near-fatal mistake of using an alternative resource this time... it was stupid of me to do that .

Quote: "If you try HJT, just have it do a system scan without the log since your notepad is broken."

Thanks, I'm trying that right now. I hope it finds something!

Jeku
Moderator
21
Years of Service
User Offline
Joined: 4th Jul 2003
Location: Vancouver, British Columbia, Canada
Posted: 3rd Jun 2008 22:00
Quote: "waytoprotect.com"


Okay, so let's assume this dude is the culprit. How do you plan on suing somebody who lives in a foreign country? I wouldn't know the first thing about suing someone in England, much less Russia.

So you find a lawyer to help you. He will ask for a lot of money to sue somebody in Russia, believe me. Let's say he agrees to do it pro bono. What are the charges? A lot of shady sites are hosted in Russia because their laws are lax. Are you sure it's even against the law where he's from to create software with ads? Technically you went to the site so you already agreed to view his site.

So let's pretend it's illegal in Russia (it very well may be). What damages has he done to you? You have to reformat and reinstall Windows. Let's say it takes you 3 hours, and your time is worth, say, $30/hr. Suing somebody in a foreign country for $90?


Login to post a reply

Server time is: 2024-11-20 08:44:48
Your offset time is: 2024-11-20 08:44:48