|
|
| Author |
Message |
Grummpy
Luke Warm
Joined: 12 Oct 2002
Posts: 322
|
 Posted: 03/30/03 - 21:52 Post subject: I been h4x0r3D!
|
|
|
/Sigh
I turned on the computer this morning and lo and behold a WINvnc Control properties box pops up on the screen at startup telling me to Put in a password.
Im like WTF!!!?? I didnt download or install anything questionable recently.
Well for those that dont know what WINvnc is , its a remote desktop program that allows a remote computer to view and have full control of your computer.
basicly they can see what your doing just like they were looking at your screen, and can f**k with files browse the internet ect.
So I installed and updated my Virus scan that I never install unless I been doing things I shouldnt be.
I for 5 infected Files.
b***h b***h b***h.
Well heres How I got it.
last night My cousin In Florida wanted to connect and play a Game, My router/Firewall doesnt let me create games unless I open the DMZ port to expose my IP.
Im on Cable and my cousin is Dial up so im the best Host.
Well I forgot I had left a Folder on shareing when I Built a friend a computer last week, I had transfered a few Programs and files to the new Computer from Mine.
So I opened the DMZ port to my PC , created a Game played for about a hour, then closed the DMZ port shut the computer off and went to bed.
Port was open for only 1 Hour!!! f**k!
heres the virus/worm Codeing:
This worm Scans for Broadcasting IP's then spreads via network shares that are protected by no or weak passwords. As such, infected networks will see an increase in traffic on TCP port 445.
The worm requires Windows2K/XP in order to spread. The worm also drops an installer, which installs BackDoor-ARG and IRC-Pitchfork.
The worm Then copies itself to accessible shares as Dvldr32.exe and uses the Remote Process Launch (PSEXEC.EXE) tool to execute the file remotely. When run, it creates the following regsitry key value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run "messnger" = %worm path%.
The trojan is installed by a trojan dropper. The dropper is installed by W32/Deloder.worm. When run, the installer creates the following registry run key to load the trojan at startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run "TaskMan" = %Fonts folder%\rundll32.exe
The IRC/Flood Trojan allows an infected computer to be used by another person without the owners knowledge and it is also frequently used to launch denial of service attacks against other computers.
My Computer had the Following Hidden files.
Backdoor-arg.dr
IRC/Flood.i
w32/Deloader worm
IRC+Pitchfork
HotPacket_Over_
What a p****r, But deserves a round of applaus /claps
|
|
|
Back to top
|
|
|
|
 |
FireIsFun
Luke Warm
Joined: 19 Jan 2003
Posts: 329
|
|
Posted: 03/30/03 - 23:11 Post subject:
|
|
|
WHAT YA GONNA PICK?
HOT PACKETS.
|
|
|
Back to top
|
|
|
|
|
Sabathius
RealPoor Guru
Joined: 11 Oct 2002
Posts: 2179
Location: San Angelo
|
|
Posted: 03/31/03 - 15:10 Post subject:
|
|
|
vary funny fif
I <3 fif
|
|
|
Back to top
|
|
|
|
|
compusmack
RealPoor Master of Posts
Joined: 15 Oct 2002
Posts: 6354
|
|
Posted: 03/31/03 - 17:34 Post subject:
|
|
|
|
|
|
Back to top
|
|
|
|
|
Goraz
RealPoor Guru
Joined: 11 Oct 2002
Posts: 3736
Location: Philadelphia
|
|
Posted: 03/31/03 - 17:36 Post subject:
|
|
|
|
sucks to be you, no one gives a flying f**k though
|
|
|
Back to top
|
|
|
|
|
Grummpy
Luke Warm
Joined: 12 Oct 2002
Posts: 322
|
|
Posted: 04/01/03 - 13:39 Post subject:
|
|
|
Everyone congratulate Goraz
For Being Elected as our general Spokesperson for Real Poor!
/Cheer
"I feel somewhat safer and more secure now that Goraz Is speaking for all of us on our behalf."
How could we Discourage such a man who speaks out for our protection, lets all remember a few of his Greatest moments.
Goraz Says:
"Get some decent sentence structure and proper punctuation then you are allowed to flame people."
How about this Great Reply: "shut the f**k up"
And my all time Favorite: "f**k you"
I must End This Post By asking you all, Whos the "REAL" Post reply Sheriff of these Boards anyway?
|
|
|
Back to top
|
|
|
|
|
Goraz
RealPoor Guru
Joined: 11 Oct 2002
Posts: 3736
Location: Philadelphia
|
|
Posted: 04/01/03 - 14:57 Post subject:
|
|
|
|
I am for sure. wee
|
|
|
Back to top
|
|
|
|
|
Crackr
Luke Warm
Joined: 13 Oct 2002
Posts: 175
|
|
Posted: 04/01/03 - 15:41 Post subject:
|
|
|
|
No, Just no.
|
|
|
Back to top
|
|
|
|
|
|
|
