d1g3r4t1 d1g3r4t1

Scumware contained in some of the Logons

Scumware contained in some of the Logons

I came across some scumware, when unzipping one of the logons. I sent a message to wincustomize's IT people to advise same. THeir response was that I was stupid and didn't know what I was talking about. The exchange is appended:


Subject: Re: Fwd: scumware
To: "Stardock Support"

LMAO.......you use MS Security, there's a well know oxymoron. The scum installed WHILE I was downloading, and unzipping, the Logons. The scum is contained in one of the zipped files. I see that, instead of checking the problem, your IT people chastise people for reporting such things.

Xupiter does not work on a time delay, it runs at the next bootup/restart. As I have ActiveX controls disabled, it cannot install on my system. Additionally, it installs as an IE toolbar....NOT a standalone active desktop utility.

Seems you need to learn to read what people report........not assume that they are stupid and you are 'Holier Than Thou'.

Thanks for nothing



Stardock Support wrote:


Dear Sir,
None of the skin files contain executables, so it is not possible
that it came from our site. However, if you had recently been
surfing the next, you most likely ran into a web site that did not
protect themselves against Xupiter, which is spyware which will
download and install on your computer from an infected web site
usually on a time delay. We use all current MS internet securities
that safeguard us from such attacks.

Thank you,
Angie

On Wed, 15 Jan 2003 11:42:22 -0500, Stardock General Information
wrote:

>==================BEGIN FORWARDED MESSAGE==================
>>Return-path:
>>Received: from web12402.mail.yahoo.com ([216.136.173.129])
>> by stardock.com ([127.0.0.1])
>> with SMTP (MDaemon.PRO.v6.0.3.R)
>> for ; Wed, 15 Jan 2003 10:57:27 -0500
>>Message-ID:
>>Received: from [24.129.45.113] by web12402.mail.yahoo.com via HTTP; Wed, 15 Jan 2003 08:00:44 PST
>>Date: Wed, 15 Jan 2003 08:00:44 -0800 (PST)
>>From: Doyle
>>Subject: scumware
>>To: [email protected]
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative; boundary="0-1469653529-1042646444=:7431"
>>X-MDRcpt-To: [email protected]
>>X-MDRemoteIP: 216.136.173.129
>>X-Return-Path: [email protected]
>>X-MDaemon-Deliver-To: [email protected]
>
>
>
>
>Last night, while downloading Logons, for Stardock's LogonStudio(TM), at least one of them installed scumware on my system. Specifically, an active
>desktop componant which was a large 'Search toolbar' style piece of scumware. Took me almost 2 hours to track this slime down, and turn it off (Registry,
>Run) I've yet to find the scumware so I can delete it. IF you bother to find and remove the file(s) containing this slime, I would greatly appreciate being
>advised on how to find and remove the scumware that installed on my system.
>
>Thank you, Doyle aka Citizen d1g3r4t1
46,535 views 221 replies
Reply #201 Top
I may regret saying this, but...

I haven't heard anything from him in a long time.

Powered by SkinBrowser!
Reply #202 Top
Only cause he's not allowed to post any more

Powered by SkinBrowser!
Reply #203 Top
Oh Guess I should have seen that one coming.

Powered by SkinBrowser!
Reply #204 Top
d1g3r4t1 I understand where you are coming from man... you said you traced it back to the lcars login??? the spy ware have been running when you were installing the file, do you run Kazaa by chance, I don't use them anymore because things like that kept appearing on my computer... and I couldn't track it down at all...got pi$$ed and formatted everything... never put it back on...

Powered by SkinBrowser!
Reply #205 Top
did you guys really exile him??? please don't tell me you did that, no offense, but he didn't mean anything bad...

Powered by SkinBrowser!
Reply #207 Top
1/ 461 Logons on Wincustomize.com.....750, if you include deleted/rejected/exiled ones.

2/ None of them is 'Lcars2'.

3/ If you traced your 'scum' back to 'Lcars2' then I'm happy for you.
It also consequently releases Wincustomize.com from any culpability. [read point '2' when in doubt].
Reply #208 Top
aafus looks like - A Fuss...

You know, every time I think this thread is almost gone. It reappears at the beginning again.

I also found with Imesh, they have a interesting spyware prog that attaches itself. Alot of the programs have issues with them. You know Gator and another company randomly send out those DL pop-ups to sites? I found that out when I found that TigerDirect is sueing their butts for posting that crap on their site.

I'm almost tempted to do a mass ping to these company's servers. What that does is crash them. At this moment I can't think straight to get into the technical parts of this attack. Lack of drugs.
Reply #209 Top
I think a baseball bat to the head would be much more effective at this point than a tinfoil hat....
This thread should have deleted long ago.

Powered by SkinBrowser!
Reply #210 Top
d1g3r4t1,

Please remove your pathetic self from my divine presense, oh foul brainless one.
Reply #211 Top
I've been wanting to type that for a long time, but since now he can't reply back, I finally had to let it out.

Jafo, help, I believe I misspelled "presense" .

/me sighs at the long and pointless thread this has been, yet it has been such a wonderful way to waste my time =P
Reply #212 Top
da_zman20 - "did you guys really exile him??? please don't tell me you did that, no offense, but he didn't mean anything bad..."

They were referring to aafuss, not d1g3r4t1

If somebody is exiled, it will say so before there name.


Elfkura, nice to see you back in true form!
Reply #213 Top
, true form eh?

Well, I'm all for people who make mistakes. After all, who doesn't? But when someone has been proven that he -has- made a mistake, I usually expect the person to apologize and move on... that's usually the most respectable way. At least, people with brains usually think so.

But he not only didn't apologize and obviously tried leading us in circles so that he can be proven right (up against admins and mods? What chance does he have in the first place?!?). Insulting my friends, insulting the very place I trusted for so long. I find him very offensive in every possible way . Just a thought.
Reply #214 Top
Bravo Elfkura! Well said. At least to me it was. ^_^

Powered by SkinBrowser!
Reply #215 Top
I downloaded a bunch of stuff, and when I unzipped them all at once, a thing installed. I deleted the thing, but I don't know what it's called, or where it is installed, so could you tell me what this thing is, and how to removed it?
I know it's your fault, because I run very tight security. That's why I unzip mass quantaties of files all at once, and click OK on every window that pops up, without reading the message. My mouse automatically places the pointer over the OK button, so it must be OK,.........
Reply #216 Top
Yes, we can see that the fault obviously lies with Wincustomize.com since you are plainly much more intelligent than everyone else. Please let us bend over backwards to help you with this problem....

Powered by SkinBrowser!
Reply #217 Top
I downloaded some stuff, it unzipped something, and now I have Windows on my pc - why have you done this to me?

Powered by SkinBrowser!
Reply #219 Top
The only "Lcars2" bauble I've been able to trace ANYWHERE turns out to be a 'freebie' screensaver ....
Being a bit of a gambler I downloaded and installed it on the sacrificial box ....
It runs fine, nothing very special, and the box is going about its business without a problem.
Pass the Louisville Slugger please! >

Powered by SkinBrowser!
Reply #220 Top
WinC will be marketing Jafo like Mr Microphone !!

Break to a person typing and re-typing a response in an IRChat as they throw their hands out to the side and plop their forehead onto their keyboard. Zoom in on face with grimace as eyes slowly open, lips quivering, a sigh, then after a pause, eyes turn to the camera and they clearly say with longing infectious whine " I want my Jafo "

Disembodied trained male power voice breaks into script:

Be the hit of the party, never live a dull moment from the second you install the batteries, yes folks it's Jafo, the contextual spell-checking, grammatic buddy of the future brought to you today by WinC-o!

Not sold where prohibited by law, life sized version available upon request, full spectrum of hair and eye color to choose from, accent is not an option.

$19.95 plus shipping and handling, %7 sales tax applicable in Florida, fully EPA certified for ownership in California.





Powered by SkinBrowser!
Reply #221 Top
koasati, nice one