abb e norm somewhere@fake. // User Search

abb e norm somewhere@fake. // User Search

1  |  

New Trojan Floating around AW

Jul 21, 2003, 4:45pm
This is what it contains,

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.beasty.html

"themask" <admin at themask.3dhost.net> skrev i meddelandet news:3f1c2f0d$1 at server1.Activeworlds.com...
> Just a warning, I recieved a telegram, and it was this:
> Telegram from Armaggeddon X, sent Mon Jul 21, 2003 9:07 AM:
>
> My friend and I have made an awesome program called AW Toolkit, please try
> it out and tell me what you think: www.twisted-inc.com/awtoolkit.exe
>
> Now, do you think that looks very toolkitish? In one part of the file, there
> is something with this, though it seems compressed, and I was lazy to
> decompress it.
>
> MAIL FROáâM:<> sÿ TRCPT TOC¢oÈ/DATA#S +:£A&[VÃO.X;QUIT-
> '©môøs
>
> and
>
> f_.Èox72%Ȭ.1ÖÕ£É;H FuZ³íncz'Ì3ì0BN6o{ÌôKmail.Ó com&¬ô!ßfla
>
> za.mx.ao4í#fl÷PHSh¨]mõºæ_.ì£Dò¸¡ ?S±s^%
>
>
> Looks like M a t t strikes again. Trying to trojan me.. I'd love to talk to
> him and see how 'uber' he is. Kid can't take a life and go play some
> basketball, have a girlfriend and etc.
>
> Damn n00bs.
>
>
>

OneSummer a Hacker?

Jul 22, 2003, 6:10pm
You're logging telegrams?

"calpantera" <bill at activeworlds.com> skrev i meddelandet news:3f1d946a$1 at server1.Activeworlds.com...
> I have found no evidence of this telegram even being sent. I think this post
> wasn't even from the real Calhoun. His account was stolen because he
> downloaded and installed the trojan. At this time as far as we can tell the
> trojan is STILL running on his machine. I hope everyone understand how
> dangerous it can be to download and run software from anyone. Even if you
> trust the source. I make it a habit to only run software that is code signed
> or at least from a legitimate company and I suggest that others do the same.
>
> Bill
>
>
>
[View Quote]

OneSummer a Hacker?

Jul 22, 2003, 6:21pm
"at will"? it's an all or nothing deal. They can't know in advance when it's needed to log a few telegrams. But, maybe they've
invented a time machine, so I might be wrong :)

"builderz" <builderz at vastnexus.com> skrev i meddelandet news:3F1D9AF9.7D44D323 at vastnexus.com...
> That's a feature of the AW unisever, so AWI can log them or not log them
> at will.
>
> Builderz
> http://www.3dhost.net
>
[View Quote]

OneSummer a Hacker?

Jul 22, 2003, 6:34pm
As I said, they can't possibly know in advance when it's a good time to turn it on, so it's likely to be on all the time. And unless
they have a special version of the universe server then it will log all telegrams.

http://www.activeworlds.com/help/aw34/uniserver_log.html

"builderz" <builderz at vastnexus.com> skrev i meddelandet news:3F1D9C59.FB635384 at vastnexus.com...
> What I meant is that at anytime they have the option to either turn
> telegram logging on or off. So they can enable or disable telegram
> logging "at will" for all users. I'm unsure if they can log or not log
> individual users' telegrams and not others, however. You can do the same
> if you own your own universe.
>
> Builderz
> http://www.3dhost.net
>
[View Quote]

OneSummer a Hacker?

Jul 22, 2003, 6:48pm
I wonder why logging would be needed now when all the new privacy features exists. And who exactly has access to it? For what
purposes is it used? I could still be wrong about them logging. But what Calpantera sure made me wonder.

"builderz" <builderz at vastnexus.com> skrev i meddelandet news:3F1D9F90.3233868C at vastnexus.com...
> That's right, they don't have a little birdie in their ear that says
> "turn telegram logging on or off at X time," but they have the ability
> to turn logging on or off for ALL users anytime they wish. So if they
> wanted to stop logging right now, they could. If they wanted to start it
> up again tomorrow at 3:33 AM ET, they could. If they don't want to
> change anything the way it is right now, they can do that too. Hope
> that's clear now.
>
> Builderz
> http://www.3dhost.net
>
[View Quote]

1  |  
Awportals.com is a privately held community resource website dedicated to Active Worlds.
Copyright (c) Mark Randall 2006 - 2020. All Rights Reserved.
Awportals.com   ·   ProLibraries Live   ·   Twitter   ·   LinkedIn