d1g3r4t1 d1g3r4t1

Scumware contained in some of the Logons

Scumware contained in some of the Logons

I came across some scumware, when unzipping one of the logons. I sent a message to wincustomize's IT people to advise same. THeir response was that I was stupid and didn't know what I was talking about. The exchange is appended:


Subject: Re: Fwd: scumware
To: "Stardock Support"

LMAO.......you use MS Security, there's a well know oxymoron. The scum installed WHILE I was downloading, and unzipping, the Logons. The scum is contained in one of the zipped files. I see that, instead of checking the problem, your IT people chastise people for reporting such things.

Xupiter does not work on a time delay, it runs at the next bootup/restart. As I have ActiveX controls disabled, it cannot install on my system. Additionally, it installs as an IE toolbar....NOT a standalone active desktop utility.

Seems you need to learn to read what people report........not assume that they are stupid and you are 'Holier Than Thou'.

Thanks for nothing



Stardock Support wrote:


Dear Sir,
None of the skin files contain executables, so it is not possible
that it came from our site. However, if you had recently been
surfing the next, you most likely ran into a web site that did not
protect themselves against Xupiter, which is spyware which will
download and install on your computer from an infected web site
usually on a time delay. We use all current MS internet securities
that safeguard us from such attacks.

Thank you,
Angie

On Wed, 15 Jan 2003 11:42:22 -0500, Stardock General Information
wrote:

>==================BEGIN FORWARDED MESSAGE==================
>>Return-path:
>>Received: from web12402.mail.yahoo.com ([216.136.173.129])
>> by stardock.com ([127.0.0.1])
>> with SMTP (MDaemon.PRO.v6.0.3.R)
>> for ; Wed, 15 Jan 2003 10:57:27 -0500
>>Message-ID:
>>Received: from [24.129.45.113] by web12402.mail.yahoo.com via HTTP; Wed, 15 Jan 2003 08:00:44 PST
>>Date: Wed, 15 Jan 2003 08:00:44 -0800 (PST)
>>From: Doyle
>>Subject: scumware
>>To: [email protected]
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative; boundary="0-1469653529-1042646444=:7431"
>>X-MDRcpt-To: [email protected]
>>X-MDRemoteIP: 216.136.173.129
>>X-Return-Path: [email protected]
>>X-MDaemon-Deliver-To: [email protected]
>
>
>
>
>Last night, while downloading Logons, for Stardock's LogonStudio(TM), at least one of them installed scumware on my system. Specifically, an active
>desktop componant which was a large 'Search toolbar' style piece of scumware. Took me almost 2 hours to track this slime down, and turn it off (Registry,
>Run) I've yet to find the scumware so I can delete it. IF you bother to find and remove the file(s) containing this slime, I would greatly appreciate being
>advised on how to find and remove the scumware that installed on my system.
>
>Thank you, Doyle aka Citizen d1g3r4t1
46,533 views 221 replies
Reply #28 Top


Powered by SkinBrowser!
Reply #29 Top
459 Logons to look through, and I have a burning desire NOT to want to assist you.
I'm sorry but unless your attitude improves you may find that UserID 95810 has 'Exiled' as a prefix.

Most people needing help or helping others tend to be reasonably polite, and I'm afraid that "JOFO" is just childish and unnecessary.
Reply #30 Top
d1.... stop being a jerk, if you're trying to help, why are you being so cryptic?
Smartmove catches mouse clicks when you don't intend them........that's a clue
To heck with clues, spell it out.

As has been pointed out twice now, unzipping doesn't execute anything........ so how could it be a zip that cause your troubles?
Reply #31 Top
Geez, did I ask for help?

Have I not said that I DON'T NEED HELP?

Is reading comprehension not taught in skool anymore?

Have I not said that you can 'Exile' anything you want?

Did I get reasonable responses at first, or sly accusations of downloading wares?

Did I not get a lot of ASSumptions that I didn't know what I was doing??
Reply #32 Top
Koasati, as 'Smartmove' caught the mouse clicks, intended in another program, that activiated the scumware when it unzipped........
Reply #33 Top
I'm not TRYING to ge cryptic, I bulk unzipped the files, I don't KNOW which, of the 10 or so, it came out of.
Reply #34 Top
So - 'Smartmove' caught these mouseclicks when you were working in another program - and then activated the scumware program as it was unzipped from the logon archive - which means by your own words, this Smartmove was already running when you unzipped the archive?

No, you didn't ask for help - you posted a vague, unclear warning about an unknown program in an unknown file - and people are now merely trying to figure out what, when and where. It's not so hard really, you know.

Otherwise it boils down to:

You: "Hey, I downloaded a thing, and it had a scumware thing in it, but I don't know what either were - but I'm being nice and warning people, even though nobody can do anything about it."

WC: "Okay, thanks!"

Hmmm... need more coffee.

Powered by SkinBrowser!
Reply #35 Top
Try naming the '10 or so'....it'd be better than 459.

I learned 'reading comprehension' about 40 years ago...around about the time I understood clearly that 'please' and 'thankyou' would get me further in life than a lot of other words would.
Reply #36 Top
sly accusations of downloading wares don't get you anywhere either......one moment and I'll pull up the full list
Reply #37 Top
'SmartMove' is a Mouse program, used by Logitech Mice.....it automoves the mouse pointer to the buttons in the active window....quite usefull, saves a lot moving the mouse around......sometimes it bites though
Reply #38 Top
I found SmartMove http://www.trillian.se/products/smartmove/index_e.html#features
this seems to be a handy app, if you want to move a file, but I still don't know what you mean by 'caught the click intended in another program'
Can you explain that?
Reply #39 Top
AH! I know what you're talking about then. Not really a stand-alone app so much as a feature of MouseWare (at least the last time I bothered with a logitech mouse.) Always annoyed the heck out of me, personally - I always found myself clicking on the wrong things with it!


Powered by SkinBrowser!
Reply #40 Top
move a file, should read move a program.........
Reply #41 Top
I do not know which of these files was zipped. I'd Perma deleted them before I noticed the scum.
Contents of G:\Downloads\ThemeXP\Login Screens\
At 1/16/2003 10:00:13 AM 59 Files 82.31Mb
Abe.logonxp 768.09Kb A 1/15/2003 5:02:14 AM
AnimalNap.logonxp 2.41Mb A 1/15/2003 4:31:30 AM
BluScape.logonxp 2.06Mb A 1/15/2003 4:55:24 AM
Cheshire.logonXP 438.57Kb A 1/7/2002 6:40:14 AM
Colony_logonxp.logonxp 1.46Mb A 1/15/2003 3:46:40 AM
CopperDeck_II-logon.logonxp 384.56Kb A 1/15/2003 4:26:08 AM
Earth & Beyond.logonxp 545.77Kb A 9/24/2002 4:53:44 PM
EarthAndBeyond.logonxp 980.27Kb A 1/15/2003 4:28:10 AM
F-22.logonxp 1.11Mb A 1/15/2003 4:27:58 AM
FBI1152x864.logonxp 2.39Mb A 1/15/2003 3:34:42 AM
FeelthePower.logonxp 999.04Kb A 1/15/2003 3:52:24 AM
fishpaste.logonxp 1.74Mb A 1/15/2003 5:05:58 AM
Floydian.logonxp 364.91Kb A 1/15/2003 3:33:18 AM
Gothic.logonxp 105.83Kb A 1/15/2003 4:32:26 AM
GraveyardPumpkins.logonxp 954.99Kb A 1/15/2003 4:25:42 AM
Green_X-FILES.logonXP 286.91Kb A 1/15/2003 5:22:40 AM
HAL9000logon.logonxp 1.69Mb A 1/15/2003 5:05:02 AM
HappyHolyday.logonxp 6.68Mb A 1/15/2003 3:46:28 AM
JumbledCircuits2002.logonxp 5.64Mb A 1/15/2003 4:43:00 AM
LCARS.logonxp 175.64Kb A 1/15/2003 3:42:40 AM
LCARS2.logonxp 117.78Kb A 12/21/2002 10:14:42 PM
logonui.logonxp 2.17Mb A 1/15/2003 5:09:40 AM
matrix1.logonxp 1.83Mb A 1/15/2003 4:52:24 AM
Medal of Honour.logonXP 2.28Mb A 2/9/2002 8:46:46 PM
Medieval.logonxp 235.88Kb A 1/15/2003 3:54:22 AM
metallogon.logonxp 1.45Mb A 1/15/2003 3:44:22 AM
MilitaryC42.logonxp 915.85Kb A 1/15/2003 4:30:14 AM
MyPlace.logonxp 2.55Mb A 1/15/2003 3:53:30 AM
NarnRegimeLogon.logonxp 1.88Mb A 1/15/2003 5:00:58 AM
Nuke.logonxp 939.71Kb A 1/15/2003 3:43:36 AM
Pumpkinhead.logonxp 635.73Kb A 1/15/2003 4:26:56 AM
Pumpkins.logonxp 1.98Mb A 1/15/2003 4:27:32 AM
RedDragon.logonxp 1.29Mb A 1/15/2003 4:29:30 AM
RELOADED.logonxp 1.59Mb A 8/23/2002 10:31:22 PM
rustysteel.logonxp 954.00Kb A 1/15/2003 5:23:56 AM
Sailing.logonxp 3.49Mb A 1/15/2003 4:32:52 AM
SantaatNorthPole.logonxp 733.04Kb A 1/15/2003 3:52:52 AM
SantasWatching.logonxp 2.52Mb A 1/15/2003 3:43:00 AM
SG-1ChevronLocked.logonxp 258.41Kb A 1/15/2003 4:32:14 AM
Sinister_Lantern.logonxp 284.29Kb A 1/15/2003 4:27:42 AM
SpaceEye.logonxp 2.16Mb A 1/15/2003 5:01:26 AM
SShock2.logonxp 1.56Mb A 1/15/2003 4:56:38 AM
SShock2v101-1.logonxp 920.78Kb A 1/15/2003 4:56:58 AM
StarTrek1.logonxp 302.43Kb A 1/15/2003 4:28:36 AM
StarTrek2.logonxp 307.16Kb A 1/15/2003 4:28:30 AM
stop.logonxp 541.70Kb A 3/12/2002 6:39:02 PM
Stronghold.logonXP 569.99Kb A 1/5/2002 9:50:00 PM
SUVAndXmasTree.logonxp 1.95Mb A 1/15/2003 3:52:40 AM
TheBug.logonxp 1.13Mb A 1/15/2003 3:53:58 AM
TheMatrixhasyou.logonxp 3.31Mb A 1/15/2003 4:38:50 AM
uicon.jpg 9.72Kb A 1/7/2002 6:38:48 AM
user1.bmp 7.47Kb A 1/5/2002 9:28:00 PM
user2.bmp 7.47Kb A 1/5/2002 9:29:00 PM
user3.bmp 7.47Kb A 1/5/2002 9:29:00 PM
user4.bmp 7.47Kb A 1/5/2002 9:29:00 PM
WhatIstheMatrix.logonxp 1.36Mb A 1/15/2003 4:40:04 AM
Wheel.logonxp 5.02Mb A 1/15/2003 3:47:26 AM
XP1_Bindi.logonxp 2.95Mb A 3/10/2002 5:11:14 PM
YuleTide.logonxp 1.09Mb A 1/15/2003 3:54:52 AM
Reply #42 Top
kthxbye.......I don't catch the wrong thing very often, if anything, I end up typing in the wrong window. But, it works for me
Reply #43 Top
Oh, that Smartmove.......... I hate that........... I use a Logitech mouse, but without the software.
Reply #44 Top
I'm running Intellipoint which does the same thing.
It does NOT catch clicks, but pre-empts the most likely [default] button to hover over, saving you the 'move'.

Really no help at all in locating a source of the problem...
Reply #45 Top
Kosati: I'd found looking up SmartMove on google to be an exercise in futility - there are simply far too many apps or other things named Smartmove out there!

digerati/anyone else: I also know I've installed at least 1/3rd of those logons at one time with no ill effects - but, but help that is, since I don't remember which ones. ^.^

Powered by SkinBrowser!
Reply #46 Top
OK...I've saved that list...and I'll DL them all and look.

If the 82 meg is found to be clean and I have wasted my time I'll be really jovial and high spirited, hugs all round....[yeah, right]...
Reply #47 Top
Hey - I'm supposed to be job hunting - but if you wat to split that list up and farm some of it off to somebody else....


Powered by SkinBrowser!
Reply #48 Top
82 megs......... heck, I could have that downloaded in a week or so........
Reply #49 Top
kthxbye...no, that's OK...better an Admin kills his comp with some nasty than one of the public...
I mean...better than one of the public killing their comp, not an Admin killing their comp with a member of the public....

Ah, pedantry....can be fun....
Reply #50 Top
Jeez ...."is reading comprehension not taught on SKOOL anymore?" ...... aside from majoring in bad manners and pig ignorance this clod certainly missed the spelling and grammar class!
Nuke it Jafo. >

Powered by SkinBrowser!