Scumware contained in some of the Logons
Thursday, January 16, 2003 by d1g3r4t1 | Discussion: WinCustomize Talk
I came across some scumware, when unzipping one of the logons. I sent a message to wincustomize's IT people to advise same. THeir response was that I was stupid and didn't know what I was talking about. The exchange is appended:
Subject: Re: Fwd: scumware
To: "Stardock Support"
LMAO.......you use MS Security, there's a well know oxymoron. The scum installed WHILE I was downloading, and unzipping, the Logons. The scum is contained in one of the zipped files. I see that, instead of checking the problem, your IT people chastise people for reporting such things.
Xupiter does not work on a time delay, it runs at the next bootup/restart. As I have ActiveX controls disabled, it cannot install on my system. Additionally, it installs as an IE toolbar....NOT a standalone active desktop utility.
Seems you need to learn to read what people report........not assume that they are stupid and you are 'Holier Than Thou'.
Thanks for nothing
Stardock Support wrote:
Dear Sir,
None of the skin files contain executables, so it is not possible
that it came from our site. However, if you had recently been
surfing the next, you most likely ran into a web site that did not
protect themselves against Xupiter, which is spyware which will
download and install on your computer from an infected web site
usually on a time delay. We use all current MS internet securities
that safeguard us from such attacks.
Thank you,
Angie
On Wed, 15 Jan 2003 11:42:22 -0500, Stardock General Information
wrote:
>==================BEGIN FORWARDED MESSAGE==================
>>Return-path:
>>Received: from web12402.mail.yahoo.com ([216.136.173.129])
>> by stardock.com ([127.0.0.1])
>> with SMTP (MDaemon.PRO.v6.0.3.R)
>> for ; Wed, 15 Jan 2003 10:57:27 -0500
>>Message-ID:
>>Received: from [24.129.45.113] by web12402.mail.yahoo.com via HTTP; Wed, 15 Jan 2003 08:00:44 PST
>>Date: Wed, 15 Jan 2003 08:00:44 -0800 (PST)
>>From: Doyle
>>Subject: scumware
>>To: [email protected]
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative; boundary="0-1469653529-1042646444=:7431"
>>X-MDRcpt-To: [email protected]
>>X-MDRemoteIP: 216.136.173.129
>>X-Return-Path: [email protected]
>>X-MDaemon-Deliver-To: [email protected]
>
>
>
>
>Last night, while downloading Logons, for Stardock's LogonStudio(TM), at least one of them installed scumware on my system. Specifically, an active
>desktop componant which was a large 'Search toolbar' style piece of scumware. Took me almost 2 hours to track this slime down, and turn it off (Registry,
>Run) I've yet to find the scumware so I can delete it. IF you bother to find and remove the file(s) containing this slime, I would greatly appreciate being
>advised on how to find and remove the scumware that installed on my system.
>
>Thank you, Doyle aka Citizen d1g3r4t1
Subject: Re: Fwd: scumware
To: "Stardock Support"
LMAO.......you use MS Security, there's a well know oxymoron. The scum installed WHILE I was downloading, and unzipping, the Logons. The scum is contained in one of the zipped files. I see that, instead of checking the problem, your IT people chastise people for reporting such things.
Xupiter does not work on a time delay, it runs at the next bootup/restart. As I have ActiveX controls disabled, it cannot install on my system. Additionally, it installs as an IE toolbar....NOT a standalone active desktop utility.
Seems you need to learn to read what people report........not assume that they are stupid and you are 'Holier Than Thou'.
Thanks for nothing
Stardock Support wrote:
Dear Sir,
None of the skin files contain executables, so it is not possible
that it came from our site. However, if you had recently been
surfing the next, you most likely ran into a web site that did not
protect themselves against Xupiter, which is spyware which will
download and install on your computer from an infected web site
usually on a time delay. We use all current MS internet securities
that safeguard us from such attacks.
Thank you,
Angie
On Wed, 15 Jan 2003 11:42:22 -0500, Stardock General Information
wrote:
>==================BEGIN FORWARDED MESSAGE==================
>>Return-path:
>>Received: from web12402.mail.yahoo.com ([216.136.173.129])
>> by stardock.com ([127.0.0.1])
>> with SMTP (MDaemon.PRO.v6.0.3.R)
>> for ; Wed, 15 Jan 2003 10:57:27 -0500
>>Message-ID:
>>Received: from [24.129.45.113] by web12402.mail.yahoo.com via HTTP; Wed, 15 Jan 2003 08:00:44 PST
>>Date: Wed, 15 Jan 2003 08:00:44 -0800 (PST)
>>From: Doyle
>>Subject: scumware
>>To: [email protected]
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative; boundary="0-1469653529-1042646444=:7431"
>>X-MDRcpt-To: [email protected]
>>X-MDRemoteIP: 216.136.173.129
>>X-Return-Path: [email protected]
>>X-MDaemon-Deliver-To: [email protected]
>
>
>
>
>Last night, while downloading Logons, for Stardock's LogonStudio(TM), at least one of them installed scumware on my system. Specifically, an active
>desktop componant which was a large 'Search toolbar' style piece of scumware. Took me almost 2 hours to track this slime down, and turn it off (Registry,
>Run) I've yet to find the scumware so I can delete it. IF you bother to find and remove the file(s) containing this slime, I would greatly appreciate being
>advised on how to find and remove the scumware that installed on my system.
>
>Thank you, Doyle aka Citizen d1g3r4t1
 |
|
Page 2 of 12 | |
|
|---|
Jafo
Reply #22 Thursday, January 16, 2003 9:28 AM
Reply #22 Thursday, January 16, 2003 9:28 AM
Doyle, the name is 'Jafo', not 'Jofo'.
All of the logon files are 'zipped'...the format 'logonui'as a suffix is a renamed 'zip'.
All of the logon files are 'zipped'...the format 'logonui'as a suffix is a renamed 'zip'.
Jafo
Reply #23 Thursday, January 16, 2003 9:29 AM
Reply #23 Thursday, January 16, 2003 9:29 AM
WELL TELL US THEN.
Typing in all caps is not good manners, either....
Typing in all caps is not good manners, either....
d1g3r4t1
Reply #24 Thursday, January 16, 2003 9:29 AM
Reply #24 Thursday, January 16, 2003 9:29 AM
well "JOFO".....go look, you'll find only a few are zipped. Logons are small
paxx
Reply #25 Thursday, January 16, 2003 9:34 AM
Reply #25 Thursday, January 16, 2003 9:34 AM
d1g3r4t1: again, unzipping a file cannot execute anything. So look somewhere else cause that's not it.
d1g3r4t1
Reply #27 Thursday, January 16, 2003 9:36 AM
Reply #27 Thursday, January 16, 2003 9:36 AM
Paxx...........Smartmove catches mouse clicks when you don't intend them........that's a clue
Jafo
Reply #29 Thursday, January 16, 2003 9:38 AM
Reply #29 Thursday, January 16, 2003 9:38 AM
459 Logons to look through, and I have a burning desire NOT to want to assist you.
I'm sorry but unless your attitude improves you may find that UserID 95810 has 'Exiled' as a prefix.
Most people needing help or helping others tend to be reasonably polite, and I'm afraid that "JOFO" is just childish and unnecessary.
I'm sorry but unless your attitude improves you may find that UserID 95810 has 'Exiled' as a prefix.
Most people needing help or helping others tend to be reasonably polite, and I'm afraid that "JOFO" is just childish and unnecessary.
Koasati
Reply #30 Thursday, January 16, 2003 9:45 AM
Reply #30 Thursday, January 16, 2003 9:45 AM
d1.... stop being a jerk, if you're trying to help, why are you being so cryptic?
Smartmove catches mouse clicks when you don't intend them........that's a clue
To heck with clues, spell it out.
As has been pointed out twice now, unzipping doesn't execute anything........ so how could it be a zip that cause your troubles?
Smartmove catches mouse clicks when you don't intend them........that's a clue
To heck with clues, spell it out.
As has been pointed out twice now, unzipping doesn't execute anything........ so how could it be a zip that cause your troubles?
d1g3r4t1
Reply #31 Thursday, January 16, 2003 9:46 AM
Reply #31 Thursday, January 16, 2003 9:46 AM
Geez, did I ask for help?
Have I not said that I DON'T NEED HELP?
Is reading comprehension not taught in skool anymore?
Have I not said that you can 'Exile' anything you want?
Did I get reasonable responses at first, or sly accusations of downloading wares?
Did I not get a lot of ASSumptions that I didn't know what I was doing??
Have I not said that I DON'T NEED HELP?
Is reading comprehension not taught in skool anymore?
Have I not said that you can 'Exile' anything you want?
Did I get reasonable responses at first, or sly accusations of downloading wares?
Did I not get a lot of ASSumptions that I didn't know what I was doing??
d1g3r4t1
Reply #32 Thursday, January 16, 2003 9:48 AM
Reply #32 Thursday, January 16, 2003 9:48 AM
Koasati, as 'Smartmove' caught the mouse clicks, intended in another program, that activiated the scumware when it unzipped........
d1g3r4t1
Reply #33 Thursday, January 16, 2003 9:49 AM
Reply #33 Thursday, January 16, 2003 9:49 AM
I'm not TRYING to ge cryptic, I bulk unzipped the files, I don't KNOW which, of the 10 or so, it came out of.
kthxbye
Reply #34 Thursday, January 16, 2003 9:54 AM
Reply #34 Thursday, January 16, 2003 9:54 AM
So - 'Smartmove' caught these mouseclicks when you were working in another program - and then activated the scumware program as it was unzipped from the logon archive - which means by your own words, this Smartmove was already running when you unzipped the archive?
No, you didn't ask for help - you posted a vague, unclear warning about an unknown program in an unknown file - and people are now merely trying to figure out what, when and where. It's not so hard really, you know.
Otherwise it boils down to:
You: "Hey, I downloaded a thing, and it had a scumware thing in it, but I don't know what either were - but I'm being nice and warning people, even though nobody can do anything about it."
WC: "Okay, thanks!"
Hmmm... need more coffee.
No, you didn't ask for help - you posted a vague, unclear warning about an unknown program in an unknown file - and people are now merely trying to figure out what, when and where. It's not so hard really, you know.
Otherwise it boils down to:
You: "Hey, I downloaded a thing, and it had a scumware thing in it, but I don't know what either were - but I'm being nice and warning people, even though nobody can do anything about it."
WC: "Okay, thanks!"
Hmmm... need more coffee.
Jafo
Reply #35 Thursday, January 16, 2003 9:55 AM
Reply #35 Thursday, January 16, 2003 9:55 AM
Try naming the '10 or so'....it'd be better than 459.
I learned 'reading comprehension' about 40 years ago...around about the time I understood clearly that 'please' and 'thankyou' would get me further in life than a lot of other words would.
I learned 'reading comprehension' about 40 years ago...around about the time I understood clearly that 'please' and 'thankyou' would get me further in life than a lot of other words would.
d1g3r4t1
Reply #36 Thursday, January 16, 2003 9:57 AM
Reply #36 Thursday, January 16, 2003 9:57 AM
sly accusations of downloading wares don't get you anywhere either......one moment and I'll pull up the full list
d1g3r4t1
Reply #37 Thursday, January 16, 2003 9:59 AM
Reply #37 Thursday, January 16, 2003 9:59 AM
'SmartMove' is a Mouse program, used by Logitech Mice.....it automoves the mouse pointer to the buttons in the active window....quite usefull, saves a lot moving the mouse around......sometimes it bites though
Koasati
Reply #38 Thursday, January 16, 2003 10:01 AM
Reply #38 Thursday, January 16, 2003 10:01 AM
I found SmartMove http://www.trillian.se/products/smartmove/index_e.html#features
this seems to be a handy app, if you want to move a file, but I still don't know what you mean by 'caught the click intended in another program'
Can you explain that?
this seems to be a handy app, if you want to move a file, but I still don't know what you mean by 'caught the click intended in another program'
Can you explain that?
kthxbye
Reply #39 Thursday, January 16, 2003 10:02 AM
Reply #39 Thursday, January 16, 2003 10:02 AM
AH! I know what you're talking about then. Not really a stand-alone app so much as a feature of MouseWare (at least the last time I bothered with a logitech mouse.) Always annoyed the heck out of me, personally - I always found myself clicking on the wrong things with it!
Koasati
Reply #40 Thursday, January 16, 2003 10:02 AM
Reply #40 Thursday, January 16, 2003 10:02 AM
move a file, should read move a program......... 
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
|
|
Page 2 of 12 | |
|
|---|
Reply #21 Thursday, January 16, 2003 9:22 AM