Scumware contained in some of the Logons
Thursday, January 16, 2003 by d1g3r4t1 | Discussion: WinCustomize Talk
I came across some scumware, when unzipping one of the logons. I sent a message to wincustomize's IT people to advise same. THeir response was that I was stupid and didn't know what I was talking about. The exchange is appended:
Subject: Re: Fwd: scumware
To: "Stardock Support"
LMAO.......you use MS Security, there's a well know oxymoron. The scum installed WHILE I was downloading, and unzipping, the Logons. The scum is contained in one of the zipped files. I see that, instead of checking the problem, your IT people chastise people for reporting such things.
Xupiter does not work on a time delay, it runs at the next bootup/restart. As I have ActiveX controls disabled, it cannot install on my system. Additionally, it installs as an IE toolbar....NOT a standalone active desktop utility.
Seems you need to learn to read what people report........not assume that they are stupid and you are 'Holier Than Thou'.
Thanks for nothing
Stardock Support wrote:
Dear Sir,
None of the skin files contain executables, so it is not possible
that it came from our site. However, if you had recently been
surfing the next, you most likely ran into a web site that did not
protect themselves against Xupiter, which is spyware which will
download and install on your computer from an infected web site
usually on a time delay. We use all current MS internet securities
that safeguard us from such attacks.
Thank you,
Angie
On Wed, 15 Jan 2003 11:42:22 -0500, Stardock General Information
wrote:
>==================BEGIN FORWARDED MESSAGE==================
>>Return-path:
>>Received: from web12402.mail.yahoo.com ([216.136.173.129])
>> by stardock.com ([127.0.0.1])
>> with SMTP (MDaemon.PRO.v6.0.3.R)
>> for ; Wed, 15 Jan 2003 10:57:27 -0500
>>Message-ID:
>>Received: from [24.129.45.113] by web12402.mail.yahoo.com via HTTP; Wed, 15 Jan 2003 08:00:44 PST
>>Date: Wed, 15 Jan 2003 08:00:44 -0800 (PST)
>>From: Doyle
>>Subject: scumware
>>To: [email protected]
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative; boundary="0-1469653529-1042646444=:7431"
>>X-MDRcpt-To: [email protected]
>>X-MDRemoteIP: 216.136.173.129
>>X-Return-Path: [email protected]
>>X-MDaemon-Deliver-To: [email protected]
>
>
>
>
>Last night, while downloading Logons, for Stardock's LogonStudio(TM), at least one of them installed scumware on my system. Specifically, an active
>desktop componant which was a large 'Search toolbar' style piece of scumware. Took me almost 2 hours to track this slime down, and turn it off (Registry,
>Run) I've yet to find the scumware so I can delete it. IF you bother to find and remove the file(s) containing this slime, I would greatly appreciate being
>advised on how to find and remove the scumware that installed on my system.
>
>Thank you, Doyle aka Citizen d1g3r4t1
Subject: Re: Fwd: scumware
To: "Stardock Support"
LMAO.......you use MS Security, there's a well know oxymoron. The scum installed WHILE I was downloading, and unzipping, the Logons. The scum is contained in one of the zipped files. I see that, instead of checking the problem, your IT people chastise people for reporting such things.
Xupiter does not work on a time delay, it runs at the next bootup/restart. As I have ActiveX controls disabled, it cannot install on my system. Additionally, it installs as an IE toolbar....NOT a standalone active desktop utility.
Seems you need to learn to read what people report........not assume that they are stupid and you are 'Holier Than Thou'.
Thanks for nothing
Stardock Support wrote:
Dear Sir,
None of the skin files contain executables, so it is not possible
that it came from our site. However, if you had recently been
surfing the next, you most likely ran into a web site that did not
protect themselves against Xupiter, which is spyware which will
download and install on your computer from an infected web site
usually on a time delay. We use all current MS internet securities
that safeguard us from such attacks.
Thank you,
Angie
On Wed, 15 Jan 2003 11:42:22 -0500, Stardock General Information
wrote:
>==================BEGIN FORWARDED MESSAGE==================
>>Return-path:
>>Received: from web12402.mail.yahoo.com ([216.136.173.129])
>> by stardock.com ([127.0.0.1])
>> with SMTP (MDaemon.PRO.v6.0.3.R)
>> for ; Wed, 15 Jan 2003 10:57:27 -0500
>>Message-ID:
>>Received: from [24.129.45.113] by web12402.mail.yahoo.com via HTTP; Wed, 15 Jan 2003 08:00:44 PST
>>Date: Wed, 15 Jan 2003 08:00:44 -0800 (PST)
>>From: Doyle
>>Subject: scumware
>>To: [email protected]
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative; boundary="0-1469653529-1042646444=:7431"
>>X-MDRcpt-To: [email protected]
>>X-MDRemoteIP: 216.136.173.129
>>X-Return-Path: [email protected]
>>X-MDaemon-Deliver-To: [email protected]
>
>
>
>
>Last night, while downloading Logons, for Stardock's LogonStudio(TM), at least one of them installed scumware on my system. Specifically, an active
>desktop componant which was a large 'Search toolbar' style piece of scumware. Took me almost 2 hours to track this slime down, and turn it off (Registry,
>Run) I've yet to find the scumware so I can delete it. IF you bother to find and remove the file(s) containing this slime, I would greatly appreciate being
>advised on how to find and remove the scumware that installed on my system.
>
>Thank you, Doyle aka Citizen d1g3r4t1
 |
|
Page 11 of 12 | |
|
|---|
Fuzzy Logic
Reply #202 Wednesday, January 22, 2003 1:44 PM
Reply #202 Wednesday, January 22, 2003 1:44 PM
Only cause he's not allowed to post any more 
werewolf
Reply #203 Wednesday, January 22, 2003 1:48 PM
Reply #203 Wednesday, January 22, 2003 1:48 PM
Oh 
Guess I should have seen that one coming.
Guess I should have seen that one coming.
da_zman20
Reply #204 Wednesday, January 22, 2003 3:06 PM
Reply #204 Wednesday, January 22, 2003 3:06 PM
d1g3r4t1 I understand where you are coming from man... you said you traced it back to the lcars login??? the spy ware have been running when you were installing the file, do you run Kazaa by chance, I don't use them anymore because things like that kept appearing on my computer... and I couldn't track it down at all...got pi$$ed and formatted everything... never put it back on...
da_zman20
Reply #205 Wednesday, January 22, 2003 3:08 PM
Reply #205 Wednesday, January 22, 2003 3:08 PM
did you guys really exile him??? please don't tell me you did that, no offense, but he didn't mean anything bad...
Jafo
Reply #207 Wednesday, January 22, 2003 3:30 PM
Reply #207 Wednesday, January 22, 2003 3:30 PM
1/ 461 Logons on Wincustomize.com.....750, if you include deleted/rejected/exiled ones.
2/ None of them is 'Lcars2'.
3/ If you traced your 'scum' back to 'Lcars2' then I'm happy for you.
It also consequently releases Wincustomize.com from any culpability. [read point '2' when in doubt].
2/ None of them is 'Lcars2'.
3/ If you traced your 'scum' back to 'Lcars2' then I'm happy for you.
It also consequently releases Wincustomize.com from any culpability. [read point '2' when in doubt].
Weaksid
Reply #208 Wednesday, January 22, 2003 3:34 PM
Reply #208 Wednesday, January 22, 2003 3:34 PM
aafus looks like - A Fuss...
You know, every time I think this thread is almost gone. It reappears at the beginning again.
I also found with Imesh, they have a interesting spyware prog that attaches itself. Alot of the programs have issues with them. You know Gator and another company randomly send out those DL pop-ups to sites? I found that out when I found that TigerDirect is sueing their butts for posting that crap on their site.
I'm almost tempted to do a mass ping to these company's servers. What that does is crash them. At this moment I can't think straight to get into the technical parts of this attack. Lack of drugs.
You know, every time I think this thread is almost gone. It reappears at the beginning again.
I also found with Imesh, they have a interesting spyware prog that attaches itself. Alot of the programs have issues with them. You know Gator and another company randomly send out those DL pop-ups to sites? I found that out when I found that TigerDirect is sueing their butts for posting that crap on their site.
I'm almost tempted to do a mass ping to these company's servers. What that does is crash them. At this moment I can't think straight to get into the technical parts of this attack. Lack of drugs.
JamMeister33
Reply #209 Wednesday, January 22, 2003 3:46 PM
Reply #209 Wednesday, January 22, 2003 3:46 PM
I think a baseball bat to the head would be much more effective at this point than a tinfoil hat....
This thread should have deleted long ago.
This thread should have deleted long ago.
Elfkura
Reply #210 Wednesday, January 22, 2003 4:34 PM
Reply #210 Wednesday, January 22, 2003 4:34 PM
d1g3r4t1,
Please remove your pathetic self from my divine presense, oh foul brainless one.
Please remove your pathetic self from my divine presense, oh foul brainless one.
Elfkura
Reply #211 Wednesday, January 22, 2003 4:37 PM
Reply #211 Wednesday, January 22, 2003 4:37 PM
I've been wanting to type that for a long time, but since now he can't reply back, I finally had to let it out.
Jafo, help, I believe I misspelled "presense".
Elfkura sighs at the long and pointless thread this has been, yet it has been such a wonderful way to waste my time =P
Jafo, help, I believe I misspelled "presense"
.Elfkura sighs at the long and pointless thread this has been, yet it has been such a wonderful way to waste my time =P
KarmaGirl
Reply #212 Thursday, January 23, 2003 9:07 AM
Reply #212 Thursday, January 23, 2003 9:07 AM
da_zman20 - "did you guys really exile him??? please don't tell me you did that, no offense, but he didn't mean anything bad..."
They were referring to aafuss, not d1g3r4t1
If somebody is exiled, it will say so before there name.
Elfkura, nice to see you back in true form!
They were referring to aafuss, not d1g3r4t1
If somebody is exiled, it will say so before there name.
Elfkura, nice to see you back in true form!
Elfkura
Reply #213 Thursday, January 23, 2003 11:03 AM, true form eh?
Well, I'm all for people who make mistakes. After all, who doesn't? But when someone has been proven that he -has- made a mistake, I usually expect the person to apologize and move on... that's usually the most respectable way. At least, people with brains usually think so.
But he not only didn't apologize and obviously tried leading us in circles so that he can be proven right (up against admins and mods? What chance does he have in the first place?!?). Insulting my friends, insulting the very place I trusted for so long. I find him very offensive in every possible way . Just a thought.
Reply #213 Thursday, January 23, 2003 11:03 AM
, true form eh?Well, I'm all for people who make mistakes. After all, who doesn't? But when someone has been proven that he -has- made a mistake, I usually expect the person to apologize and move on... that's usually the most respectable way. At least, people with brains usually think so.
But he not only didn't apologize and obviously tried leading us in circles so that he can be proven right (up against admins and mods? What chance does he have in the first place?!?). Insulting my friends, insulting the very place I trusted for so long. I find him very offensive in every possible way
. Just a thought.
kthxbye
Reply #214 Thursday, January 23, 2003 11:26 AM
Reply #214 Thursday, January 23, 2003 11:26 AM
Bravo Elfkura! Well said. At least to me it was. 
Koasati
Reply #215 Thursday, January 23, 2003 1:35 PM
Reply #215 Thursday, January 23, 2003 1:35 PM
I downloaded a bunch of stuff, and when I unzipped them all at once, a thing installed. I deleted the thing, but I don't know what it's called, or where it is installed, so could you tell me what this thing is, and how to removed it?
I know it's your fault, because I run very tight security. That's why I unzip mass quantaties of files all at once, and click OK on every window that pops up, without reading the message. My mouse automatically places the pointer over the OK button, so it must be OK,.........
I know it's your fault, because I run very tight security. That's why I unzip mass quantaties of files all at once, and click OK on every window that pops up, without reading the message. My mouse automatically places the pointer over the OK button, so it must be OK,.........
JamMeister33
Reply #216 Thursday, January 23, 2003 1:57 PM
Reply #216 Thursday, January 23, 2003 1:57 PM
Yes, we can see that the fault obviously lies with Wincustomize.com since you are plainly much more intelligent than everyone else. Please let us bend over backwards to help you with this problem.... 
Fuzzy Logic
Reply #217 Thursday, January 23, 2003 2:03 PM
Reply #217 Thursday, January 23, 2003 2:03 PM
I downloaded some stuff, it unzipped something, and now I have Windows on my pc - why have you done this to me?
wombat_1
Reply #219 Thursday, January 23, 2003 3:24 PM
Reply #219 Thursday, January 23, 2003 3:24 PM
The only "Lcars2" bauble I've been able to trace ANYWHERE turns out to be a 'freebie' screensaver .... 
Being a bit of a gambler I downloaded and installed it on the sacrificial box ....
It runs fine, nothing very special, and the box is going about its business without a problem.
Pass the Louisville Slugger please! >
Being a bit of a gambler I downloaded and installed it on the sacrificial box ....
It runs fine, nothing very special, and the box is going about its business without a problem.
Pass the Louisville Slugger please! >
IPlural
Reply #220 Thursday, January 23, 2003 3:32 PM
Reply #220 Thursday, January 23, 2003 3:32 PM
WinC will be marketing Jafo like Mr Microphone !!
Break to a person typing and re-typing a response in an IRChat as they throw their hands out to the side and plop their forehead onto their keyboard. Zoom in on face with grimace as eyes slowly open, lips quivering, a sigh, then after a pause, eyes turn to the camera and they clearly say with longing infectious whine " I want my Jafo "
Disembodied trained male power voice breaks into script:
Be the hit of the party, never live a dull moment from the second you install the batteries, yes folks it's Jafo, the contextual spell-checking, grammatic buddy of the future brought to you today by WinC-o!
Not sold where prohibited by law, life sized version available upon request, full spectrum of hair and eye color to choose from, accent is not an option.
$19.95 plus shipping and handling, %7 sales tax applicable in Florida, fully EPA certified for ownership in California.
Break to a person typing and re-typing a response in an IRChat as they throw their hands out to the side and plop their forehead onto their keyboard. Zoom in on face with grimace as eyes slowly open, lips quivering, a sigh, then after a pause, eyes turn to the camera and they clearly say with longing infectious whine " I want my Jafo "
Disembodied trained male power voice breaks into script:
Be the hit of the party, never live a dull moment from the second you install the batteries, yes folks it's Jafo, the contextual spell-checking, grammatic buddy of the future brought to you today by WinC-o!
Not sold where prohibited by law, life sized version available upon request, full spectrum of hair and eye color to choose from, accent is not an option.
$19.95 plus shipping and handling, %7 sales tax applicable in Florida, fully EPA certified for ownership in California.
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
|
|
Page 11 of 12 | |
|
|---|
Reply #201 Wednesday, January 22, 2003 1:19 PM
I haven't heard anything from him in a long time.