|
|
shia // User Search
shia // User Search
Jul 22, 2003, 1:43pm
Its a bunch of punks on AWTeen doing it...They steal your cit then use it to
telegram your friends with the link
[View Quote]"calhoun" <coen at charter.net> wrote in message
news:3f1d59f5 at server1.Activeworlds.com...
> my cit is hacked and guess who told me? OneSummer that hacker and now I
cant
> get on AW...
> "pineriver" <pineriver at thenett.com> wrote in message
> news:3f1c39d6 at server1.Activeworlds.com...
> cit
> files
> to
the
utilities
them.
in
lot
> to
you
It
you
> to
> to
show
remote
is
for
>
>
|
Jul 22, 2003, 12:51pm
Can someone tell me how to remove this awtoolkit trojan from my computer...I
read all the posts but no one mentions the registry changes and AW is not
responding to my emails.
Jul 22, 2003, 1:29pm
I'll try that...thanks
[View Quote]"kah" <kah at kahnews.cjb.net> wrote in message
news:Xns93C0AC7934029kahatkahnewsdotcjbdo at 64.94.241.201...
> "shia" <cabaround at cox.net> wrote in
> news:3f1d4f62$1 at server1.Activeworlds.com:
>
>
> It probably just adds some entries in
>
HKEY_(LOCAL_MACHINE|CURRENT_USER)\Software\Microsoft\Windows\CurrentVersion\
Run[Once|Service|etc]
>
> An easy way to find them (although they're of no danger if you got
> rid of the files) would be to search the registry for the filename(s)
> the trojan was dumped as. Just use regedit (be warned, if you edit
> the wrong entries you could screw some things up, make sure it's
> only stuff pertaining to the trojan).
>
> KAH
|
Jul 22, 2003, 11:30pm
Thats the one...
[View Quote]"e n z o" <enzo at activeworlds.com> wrote in message
news:3f1da9b5 at server1.Activeworlds.com...
> What email address are you sending your questions to? The address is
> support at activeworlds.com
>
>
>
> E
>
>
> "shia" <cabaround at cox.net> wrote in message
> news:3f1d4f62$1 at server1.Activeworlds.com...
> computer...I
not
>
>
|
Jul 22, 2003, 3:42pm
What amazes me is AW's total lack of response to this situation. Nothing in
the news groups or at the gate...they won't even answer my emails to
support! And I paid for this?????
[View Quote]"builderz" <builderz at vastnexus.com> wrote in message
news:3F1D71AA.4533EE5D at vastnexus.com...
> I'm not sure, but I think the AW newsgroup server doesn't update
> password changes immediately, so Calhoun can still use his old password
> for the time being to post.
>
> Builderz
> http://www.3dhost.net
>
> john wrote:
One
|
Jul 22, 2003, 4:03pm
I still would think some kind of general announcement would be in order to
ease those who are victims. Then at least we would know they are aware and
care about the problem. A posting, a message on the web, a sign at the
gate...Something....
[View Quote]"builderz" <builderz at vastnexus.com> wrote in message
news:3F1D79B6.C7035B41 at vastnexus.com...
> Look at it this way:
>
> 1. AWI is a small company with probably less than a dozen full-time
> staffers.
> 2. This AW "Toolkit"/Trojan horse thing just started last night (ET), as
> far as I know.
> 3. AWI probably has gotten dozens of e-mails from people just like you
> who clicked/downloaded the malicious file. It takes time to reply to
> everyone and get their account issues resolved.
> 4. If you want a fast answer, go call the AWI offices at (978) 499-0222.
> 5. I don't believe in this personally, but others have said it in the
> past: "If you are stupid enough to click on a link like that, then you
> deserve what you get."
>
> Builderz
> http://www.3dhost.net
>
> shia wrote:
in
|
Jul 22, 2003, 1:51pm
Its a bunch of punks on AWTeen doing it...They steal your cit then use it to
telegram your friends with the link
[View Quote]"calhoun" <coen at charter.net> wrote in message
news:3f1d5c21$1 at server1.Activeworlds.com...
> yeah, the person on my cit just got off and the telegram is GONE from the
> telegram file but the name is there and its "OneSummer"
> "binarybud" <leo at realPANTStourvision.com> wrote in message
> news:3f1d5bdd at server1.Activeworlds.com...
> Matt also...
> news:3f1d5b1c$1 at server1.Activeworlds.com...
> that
>
>
|
|
