Scumware contained in some of the Logons
Thursday, January 16, 2003 by d1g3r4t1 | Discussion: WinCustomize Talk
I came across some scumware, when unzipping one of the logons. I sent a message to wincustomize's IT people to advise same. THeir response was that I was stupid and didn't know what I was talking about. The exchange is appended:
Subject: Re: Fwd: scumware
To: "Stardock Support"
LMAO.......you use MS Security, there's a well know oxymoron. The scum installed WHILE I was downloading, and unzipping, the Logons. The scum is contained in one of the zipped files. I see that, instead of checking the problem, your IT people chastise people for reporting such things.
Xupiter does not work on a time delay, it runs at the next bootup/restart. As I have ActiveX controls disabled, it cannot install on my system. Additionally, it installs as an IE toolbar....NOT a standalone active desktop utility.
Seems you need to learn to read what people report........not assume that they are stupid and you are 'Holier Than Thou'.
Thanks for nothing
Stardock Support wrote:
Dear Sir,
None of the skin files contain executables, so it is not possible
that it came from our site. However, if you had recently been
surfing the next, you most likely ran into a web site that did not
protect themselves against Xupiter, which is spyware which will
download and install on your computer from an infected web site
usually on a time delay. We use all current MS internet securities
that safeguard us from such attacks.
Thank you,
Angie
On Wed, 15 Jan 2003 11:42:22 -0500, Stardock General Information
wrote:
>==================BEGIN FORWARDED MESSAGE==================
>>Return-path:
>>Received: from web12402.mail.yahoo.com ([216.136.173.129])
>> by stardock.com ([127.0.0.1])
>> with SMTP (MDaemon.PRO.v6.0.3.R)
>> for ; Wed, 15 Jan 2003 10:57:27 -0500
>>Message-ID:
>>Received: from [24.129.45.113] by web12402.mail.yahoo.com via HTTP; Wed, 15 Jan 2003 08:00:44 PST
>>Date: Wed, 15 Jan 2003 08:00:44 -0800 (PST)
>>From: Doyle
>>Subject: scumware
>>To: [email protected]
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative; boundary="0-1469653529-1042646444=:7431"
>>X-MDRcpt-To: [email protected]
>>X-MDRemoteIP: 216.136.173.129
>>X-Return-Path: [email protected]
>>X-MDaemon-Deliver-To: [email protected]
>
>
>
>
>Last night, while downloading Logons, for Stardock's LogonStudio(TM), at least one of them installed scumware on my system. Specifically, an active
>desktop componant which was a large 'Search toolbar' style piece of scumware. Took me almost 2 hours to track this slime down, and turn it off (Registry,
>Run) I've yet to find the scumware so I can delete it. IF you bother to find and remove the file(s) containing this slime, I would greatly appreciate being
>advised on how to find and remove the scumware that installed on my system.
>
>Thank you, Doyle aka Citizen d1g3r4t1
Subject: Re: Fwd: scumware
To: "Stardock Support"
LMAO.......you use MS Security, there's a well know oxymoron. The scum installed WHILE I was downloading, and unzipping, the Logons. The scum is contained in one of the zipped files. I see that, instead of checking the problem, your IT people chastise people for reporting such things.
Xupiter does not work on a time delay, it runs at the next bootup/restart. As I have ActiveX controls disabled, it cannot install on my system. Additionally, it installs as an IE toolbar....NOT a standalone active desktop utility.
Seems you need to learn to read what people report........not assume that they are stupid and you are 'Holier Than Thou'.
Thanks for nothing
Stardock Support wrote:
Dear Sir,
None of the skin files contain executables, so it is not possible
that it came from our site. However, if you had recently been
surfing the next, you most likely ran into a web site that did not
protect themselves against Xupiter, which is spyware which will
download and install on your computer from an infected web site
usually on a time delay. We use all current MS internet securities
that safeguard us from such attacks.
Thank you,
Angie
On Wed, 15 Jan 2003 11:42:22 -0500, Stardock General Information
wrote:
>==================BEGIN FORWARDED MESSAGE==================
>>Return-path:
>>Received: from web12402.mail.yahoo.com ([216.136.173.129])
>> by stardock.com ([127.0.0.1])
>> with SMTP (MDaemon.PRO.v6.0.3.R)
>> for ; Wed, 15 Jan 2003 10:57:27 -0500
>>Message-ID:
>>Received: from [24.129.45.113] by web12402.mail.yahoo.com via HTTP; Wed, 15 Jan 2003 08:00:44 PST
>>Date: Wed, 15 Jan 2003 08:00:44 -0800 (PST)
>>From: Doyle
>>Subject: scumware
>>To: [email protected]
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative; boundary="0-1469653529-1042646444=:7431"
>>X-MDRcpt-To: [email protected]
>>X-MDRemoteIP: 216.136.173.129
>>X-Return-Path: [email protected]
>>X-MDaemon-Deliver-To: [email protected]
>
>
>
>
>Last night, while downloading Logons, for Stardock's LogonStudio(TM), at least one of them installed scumware on my system. Specifically, an active
>desktop componant which was a large 'Search toolbar' style piece of scumware. Took me almost 2 hours to track this slime down, and turn it off (Registry,
>Run) I've yet to find the scumware so I can delete it. IF you bother to find and remove the file(s) containing this slime, I would greatly appreciate being
>advised on how to find and remove the scumware that installed on my system.
>
>Thank you, Doyle aka Citizen d1g3r4t1
 |
|
Page 7 of 12 | |
|
|---|
messybuu
Reply #122 Thursday, January 16, 2003 11:44 PM
Reply #122 Thursday, January 16, 2003 11:44 PM
Paxx.......again....the file popped up at the end of the unzipp....not when executing the logon file. Winzip, at least, pops up the 'Install Now?' window, if an exe is present, and/or opens the folder that the file was unzipped to.
This was a very interesting thread indeed, and I want to be a part of it! I've noticed that he said that WinZip occasionally brings up an "Install Now?" window if an exe is present during the unzipping of many zip files. Has this actually happened to anybody, because I have WinZip, and that has never happened to me while unzipping multiple zip files at once, or even while unzipping one from the WinZip window. If anything, that looks more like a message I see from a shady ad trying to get me to install Gator or the like.
This was a very interesting thread indeed, and I want to be a part of it! I've noticed that he said that WinZip occasionally brings up an "Install Now?" window if an exe is present during the unzipping of many zip files. Has this actually happened to anybody, because I have WinZip, and that has never happened to me while unzipping multiple zip files at once, or even while unzipping one from the WinZip window. If anything, that looks more like a message I see from a shady ad trying to get me to install Gator or the like.
Jafo
Reply #123 Friday, January 17, 2003 12:00 AM
Reply #123 Friday, January 17, 2003 12:00 AM
Messy Buu...no, Winzip has never auto-prompted me to install an exe on unzipping.....though now I use the integrated zip-handling of Powerdesk Pro...which enables viewing individual files within a zip prior to 'unzipping'.
It's just one of the proggies LiteSTEPpers tend to use..rather than Exploder.exe as a file manager.
I'm slowly coming around to agreeing with Wombat about all this.....just a few too many anomalies in the 'claims' of what happened.
It's just one of the proggies LiteSTEPpers tend to use..rather than Exploder.exe as a file manager.
I'm slowly coming around to agreeing with Wombat about all this.....just a few too many anomalies in the 'claims' of what happened.
Jafo
Reply #124 Friday, January 17, 2003 12:13 AM
Reply #124 Friday, January 17, 2003 12:13 AM
The Telecommunications act which controls the content of distribution of information via Telephone networks and Radio transmissions is quite clear about the rights of confidentiality and/or public broadcast.
It is an offence to even privately record a communication without clear, prior notification to all parties of same.
There is an inherent expectation that mail, whether 'snail' or Internet will NOT be intercepted or distributed/disseminated other than by Legal, legitimate prior-authorised entities [eg, anti-Terrorism Investigators, whatever [big brother]].
It may be a fact that any and/or all mail can be intercepted by unauthorised people, but that does NOT negate any rights to an expectation of privacy.
It is an offence to even privately record a communication without clear, prior notification to all parties of same.
There is an inherent expectation that mail, whether 'snail' or Internet will NOT be intercepted or distributed/disseminated other than by Legal, legitimate prior-authorised entities [eg, anti-Terrorism Investigators, whatever [big brother]].
It may be a fact that any and/or all mail can be intercepted by unauthorised people, but that does NOT negate any rights to an expectation of privacy.
Jafo
Reply #125 Friday, January 17, 2003 12:33 AM
Reply #125 Friday, January 17, 2003 12:33 AM
There are 2 'Lcars.logonxp' themes on this site...and there has never been a Lcars2.logonxp here.
But Like me, downloading both requires one of them to be renamed...guess what?, I renamed one to lcars2, totally unprompted...so maybe 'IF' the file came from here that was how it became named such on your comp.
BTW they are both clean with nothing executable in any form.
To retain comment history, even when a skin is deleted from the site's public access there is a record of it still. Whether on public view, exiled for moderation or deleted by the author there is not now and never was a 'Lcars2' logon here.
#101 by Citizen d1g3r4t1 - 1/16/2003 10:07:48 PM
As this file has not been cleared, or found hmmmmmmmmmmm......all of the evidence still points here.
Time to start looking elsewhere, lad...
But Like me, downloading both requires one of them to be renamed...guess what?, I renamed one to lcars2, totally unprompted...so maybe 'IF' the file came from here that was how it became named such on your comp.
BTW they are both clean with nothing executable in any form.
To retain comment history, even when a skin is deleted from the site's public access there is a record of it still. Whether on public view, exiled for moderation or deleted by the author there is not now and never was a 'Lcars2' logon here.
#101 by Citizen d1g3r4t1 - 1/16/2003 10:07:48 PM
As this file has not been cleared, or found hmmmmmmmmmmm......all of the evidence still points here.
Time to start looking elsewhere, lad...
IPlural
Reply #126 Friday, January 17, 2003 1:10 AM
Reply #126 Friday, January 17, 2003 1:10 AM
> by Citizen d1g3r4t1 - 1/16/2003 2:07:54 AM
>
> I came across some scumware, when unzipping one of the logons.
> I sent a message to wincustomize's IT people to advise same.
> THeir response was that I was stupid and didn't know what I was
> talking about. The exchange is appended:
>>
>>
>> Subject: Re: Fwd: scumware
>> To: "Stardock Support"
>>
>> LMAO.......you use MS Security, there's a well know oxymoron.
>> The scum installed WHILE I was downloading, and unzipping,
>> the Logons. The scum is contained in one of the zipped files.
>> I see that, instead of checking the problem, your IT people
>> chastise people for reporting such things.
Personally you have you to give enough information indicating there
is a problem other than the fact that you expect people to spend
hours tracking down soemthing only because you say so.
>> Xupiter does not work on a time delay, it runs at the next
>> bootup/restart. As I have ActiveX controls disabled, it cannot
>> install on my system. Additionally, it installs as an IE
>> toolbar....NOT a standalone active desktop utility.
Below in your origional email to Stardock Support suggests otherwise.
Which is it, it installed on your system and it took you almot two
hours to track it down and turn it off. Or it didn't install because
your smart enough to turn off active X to defeat such evil scumware?
Also, below you state another possible contradiction. You took almost
two hours to find it and remove it and then follow up with you have
yet to find it and remove the files?
If this is the case, and you are not versed in editing the registry
and not look at the information in a speficic registry key and locate
the installed file, you sir, should not be in your registry...
As a matter of fact if you really want to get rid of it without any
effort or fear of screwing it up to the point of no return. I would
suggest you go and download an intelligant spyware killer that will
scan your system and delete the stuff automatically for you and will
check compressed files also like oh say SpyWatch or a number of others.
>> Seems you need to learn to read what people report........
>> not assume that they are stupid and you are 'Holier Than Thou'.
>>
>> Thanks for nothing
, I love this, you imply they are less than forth right in your
first email to the attechsupport and then you infer they call you
stupid, when in fact you might not be stupid but you sure have acted
stupidly in the use of or lack or communication skills.
how in the hell do you expect respect, no demand it, when you demean
them out of hand the first time you communicate with them?
>> Stardock Support wrote:
[ snip } pointless in this instance...
>>
>>==================BEGIN FORWARDED MESSAGE==================
>>
>> by Citizen d1g3r4t1 - 1/16/2003 2:07:54 AM
>>
>> Last night, while downloading Logons, for Stardock's LogonStudio(TM),
>> at least one of them installed scumware on my system. Specifically,
>> an active desktop componant which was a large 'Search toolbar' style
>> piece of scumware. Took me almost 2 hours to track this slime down,
>> and turn it off (Registry, Run) I've yet to find the scumware so I
>> can delete it. IF you bother to find and remove the file(s)
>> containing this slime, I would greatly appreciate being advised on
>> how to find and remove the scumware that installed on my system.
>>
>> Thank you, Doyle aka Citizen d1g3r4t1
dunno, you ask me, at this point I would just drop it, you hit the point
of diminishing returns at the point that you emailed them without any
information other than [ I said so ]
>
> I came across some scumware, when unzipping one of the logons.
> I sent a message to wincustomize's IT people to advise same.
> THeir response was that I was stupid and didn't know what I was
> talking about. The exchange is appended:
>>
>>
>> Subject: Re: Fwd: scumware
>> To: "Stardock Support"
>>
>> LMAO.......you use MS Security, there's a well know oxymoron.
>> The scum installed WHILE I was downloading, and unzipping,
>> the Logons. The scum is contained in one of the zipped files.
>> I see that, instead of checking the problem, your IT people
>> chastise people for reporting such things.
Personally you have you to give enough information indicating there
is a problem other than the fact that you expect people to spend
hours tracking down soemthing only because you say so.
>> Xupiter does not work on a time delay, it runs at the next
>> bootup/restart. As I have ActiveX controls disabled, it cannot
>> install on my system. Additionally, it installs as an IE
>> toolbar....NOT a standalone active desktop utility.
Below in your origional email to Stardock Support suggests otherwise.
Which is it, it installed on your system and it took you almot two
hours to track it down and turn it off. Or it didn't install because
your smart enough to turn off active X to defeat such evil scumware?
Also, below you state another possible contradiction. You took almost
two hours to find it and remove it and then follow up with you have
yet to find it and remove the files?
If this is the case, and you are not versed in editing the registry
and not look at the information in a speficic registry key and locate
the installed file, you sir, should not be in your registry...
As a matter of fact if you really want to get rid of it without any
effort or fear of screwing it up to the point of no return. I would
suggest you go and download an intelligant spyware killer that will
scan your system and delete the stuff automatically for you and will
check compressed files also like oh say SpyWatch or a number of others.
>> Seems you need to learn to read what people report........
>> not assume that they are stupid and you are 'Holier Than Thou'.
>>
>> Thanks for nothing
, I love this, you imply they are less than forth right in yourfirst email to the attechsupport and then you infer they call you
stupid, when in fact you might not be stupid but you sure have acted
stupidly in the use of or lack or communication skills.
how in the hell do you expect respect, no demand it, when you demean
them out of hand the first time you communicate with them?
>> Stardock Support wrote:
[ snip } pointless in this instance...
>>
>>==================BEGIN FORWARDED MESSAGE==================
>>
>> by Citizen d1g3r4t1 - 1/16/2003 2:07:54 AM
>>
>> Last night, while downloading Logons, for Stardock's LogonStudio(TM),
>> at least one of them installed scumware on my system. Specifically,
>> an active desktop componant which was a large 'Search toolbar' style
>> piece of scumware. Took me almost 2 hours to track this slime down,
>> and turn it off (Registry, Run) I've yet to find the scumware so I
>> can delete it. IF you bother to find and remove the file(s)
>> containing this slime, I would greatly appreciate being advised on
>> how to find and remove the scumware that installed on my system.
>>
>> Thank you, Doyle aka Citizen d1g3r4t1
dunno, you ask me, at this point I would just drop it, you hit the point
of diminishing returns at the point that you emailed them without any
information other than [ I said so ]
paxx
Reply #127 Friday, January 17, 2003 8:29 AM
Reply #127 Friday, January 17, 2003 8:29 AM
OK d1, the matter is now closed.
Every file has been checked and there are no executable in any of them.
Your problem did not originate from anything here. Look somewhere else.
And you know what? I think you know it now, but are too stuborn to admit it.
Official note: this issue is closed.
Every file has been checked and there are no executable in any of them.
Your problem did not originate from anything here. Look somewhere else.
And you know what? I think you know it now, but are too stuborn to admit it.
Official note: this issue is closed.
d1g3r4t1
Reply #128 Friday, January 17, 2003 9:06 AM
Reply #128 Friday, January 17, 2003 9:06 AM
Static, that was a directory printout. Not a history.
d1g3r4t1
Reply #129 Friday, January 17, 2003 9:08 AM
Reply #129 Friday, January 17, 2003 9:08 AM
Good job. One of you found the offending file and deleted it. Congrats all around.
d1g3r4t1
Reply #130 Friday, January 17, 2003 9:12 AM
Reply #130 Friday, January 17, 2003 9:12 AM
kthxbye, the cya wasn't aimed at you. You were the only one who bothered to pull up the files. You cleared all of them except the one that had already been found and removed.
KarmaGirl
Reply #131 Friday, January 17, 2003 9:14 AM
Reply #131 Friday, January 17, 2003 9:14 AM
d1g3r4t1, there was no file!
Oh wait....I see the black helicopters now......
As I repeat from Paxx: "Official note: this issue is closed."
Oh wait....I see the black helicopters now......
As I repeat from Paxx: "Official note: this issue is closed."
d1g3r4t1
Reply #132 Friday, January 17, 2003 9:14 AM
Reply #132 Friday, January 17, 2003 9:14 AM
Wombat, that was a directory printout, not a history.
Jafo
Reply #133 Friday, January 17, 2003 9:17 AM
Reply #133 Friday, January 17, 2003 9:17 AM
There are exactly 750 logons on this site, including 'deleted' ones. NONE is named 'Lcars2' or anything similar [with a '2'].
Got it from elsewhere perhaps?
Got it from elsewhere perhaps?
Action_Jay
Reply #137 Saturday, January 18, 2003 8:45 PM
Reply #137 Saturday, January 18, 2003 8:45 PM
Good gawd. Jafo, you deserve a big hug after all this. I've never seen anyone with more patience and professional candor than you and the other techies going through this 'issue'. It'd be so easy and tempting to do a big ole ban but wow, you're really dedicated. Kudos. If anything I love Stardock more than ever after this.
One telltale quote I found in this thread by ole D1...
"In the grand scheme of things, this is the exact same sort of responses I get from IT departments, customer service, etc....whether by email or phone"
I think we all get the picture.
One telltale quote I found in this thread by ole D1...
"In the grand scheme of things, this is the exact same sort of responses I get from IT departments, customer service, etc....whether by email or phone"
I think we all get the picture.
IPlural
Reply #138 Saturday, January 18, 2003 10:36 PM
Reply #138 Saturday, January 18, 2003 10:36 PM
Action Jay exactly so to the word, concise to boot !
If one person or even a number of them treat in kind with such a negative response when it is in fact in their favor to be as helpful as possible. It pretty much indicates the problem might not be at the other end and a change of course to the desired goal might be in order.
and you said it in so few words !!!
If one person or even a number of them treat in kind with such a negative response when it is in fact in their favor to be as helpful as possible. It pretty much indicates the problem might not be at the other end and a change of course to the desired goal might be in order.
and you said it in so few words !!!
JamMeister33
Reply #139 Saturday, January 18, 2003 11:46 PM
Reply #139 Saturday, January 18, 2003 11:46 PM
I think the main point to consider here is the fact that through it all, Jafo never once wavered from his dedication to the ideal that he believes in and despite the fact that this "person" was belligerent, abusive and obtusive, Jafo went out of his way to resolve the issue in a calm and logical manner.
@shu
Reply #140 Saturday, January 18, 2003 11:58 PM
Reply #140 Saturday, January 18, 2003 11:58 PM
Salutations o Great One. If I had been in ur place....
[note to self: when did u start hatching such devious schemes. shame on you]
oops!!!
[note to self: when did u start hatching such devious schemes. shame on you]
oops!!!
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
|
|
Page 7 of 12 | |
|
|---|
Reply #121 Thursday, January 16, 2003 11:28 PM
(Ack! I've descended into the depths of using the graphical smilies - my soul is lost!)