1  ...  23  24  25  26  27  28  ...  35  |   Order by default

Dec 30, 2003, 3:48pm

[View Quote] again

--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 13, 2003, 8:31pm

[View Quote] > There is currently a trojan going around, a supposed "Terrain bot" that is
> from terbot.0catch.com. I was infected with it and the little #$%^& used my
> acct and ftp server to distrobute another version of it called VWTViewer. If
> you see eather one DO NOT DOWNLOAD THEM. VWTViewer i have deleted and have
> changed all of my passwords, but DO NOT UNDER ANY CIRCUMSTANCES download
> these. They are a real #$%^& to remove.
>
> -Ep0ch
>
>

Never EVER run a program which is not from a trusted source! If there is a new program out, it is either from someone you trust, or wait till you see reports about it.
The terbot.0catch.com site was mentioned only in my ng (best of my knowledge) where you'd see an immediate response from several ppl that it is a backdoor trojan.
The webpage explicitly explains it is not the original program from the author (which indeed was a nice bot!) but an upload by a script kiddie.

--
Andras
"It's MY computer" (tm Steve Gibson)
FU set to community

Dec 19, 2003, 1:38am

[View Quote] > BluPearl World will be participating in the Multi World Present Hunt! Good
> luck to everyone that will be attending!
>
>

Storage world will participate in the hunt too. Strange.... isn't it?

As it stands now - we have 21 worlds on the list. The current scores can be achieved in those worlds are exceeeding 100,000!!!!
We are hoping that AWI's SDK can handle as many as 200+ bot instances at once!
The prize donations are coming in somewhat slowly but it is still beyond our expectation.
We are excited to get all the hunters gathering inworld and have fun together.
Tens of hosts are standing by to help you with the hunt and plenty of presents are await to be dispersed :)

Check out: http://www.andras.net/2003chhunt.html !!!

--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 22, 2003, 10:28pm

[View Quote] > hm - I can press "refresh" and it still shows.
>
> Might be a bug in Mozilla or OE decides to hide
> non-public groups.
>
> I wonder what would happen if I unsubscribed and
> then would try to refresh the list ...
>
>

Until you have it subscribed it will stay on the list (in Mozilla)

--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 23, 2003, 10:51pm

[View Quote] > I unsubscribed and it's gone from the newsreader
> subscribe list now (using Mozilla 5.0 - 1.3.1).
> So it was like Andras said, a Mozilla bug.
>

I wouldn't call it a bug - you still ahve a bunch of posts from that group, so Mozilla tries to keep it alive for you :)
OTOH - the group indeed marked for deletion .


--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 23, 2003, 4:45pm

Hi everyone,

I'm not good writing speaches but I decided to do one:)
We had an excellent event in ActiveWorld Universe this Christmas. We held out first multiworld present hunt and it was a great success (with some hickups but hey - every FIRST thing have hickups don't they?).
The hunt assembled 20 worlds where each world owner did her/his best to please the crowd. We had 600 players total and they hunted a lot! Someone even broke his mouse twice doing it! <No - I'm not working for Logitech but next year maybe?? I'll get a good comission on them >
There were 191 robots supervising the 20 worlds and those bots did not became tired - not even after the 36 hours of hunt! <Am I proud of myself too much?>
The bots were running in The Netherland - courtesy of AWEurope and IrcMan from there on a fast network connection on a W2K machine. A big thank you is due to him for the machine!
A sad event interrupted the hunt when Ep0ch world's OP was compromized by a silly child and had to be taken off from the hunt. Of course Murphy did not sleep, so the scores are resetted but after a while I was able to fix the bot and all hunters were happy again.

I want to use this opportunity to thank all the world owners to do their best to make this hunt a great community success. Special thank to one person who decided to get a world for just that particular occasion due to his hoster's resistance to run my bots in his server.
I wish to express my sincere appretiation to the donors who made the event possible with their generous prize donation.

Thanks for all the participant and everyone who were involved in the hunt <the list of names are too long to post here>, and for the patience of the hunters for my glitches.


See you next year around Easter,

--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 25, 2003, 3:48pm

--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 25, 2003, 3:49pm

[View Quote]
--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 25, 2003, 3:50pm

[View Quote]
--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 28, 2003, 12:42pm

[View Quote] > AWRadio with no details regarding where the funds came from?
>

I want to know where did you get the funds for your citizenship.
I want ALL details, CC receipts, bank transfers, your latest bank account statements, your source of income, a copy of your detailed tax returns back in five years, etc.

--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 29, 2003, 8:07am

[View Quote] Don't try it with that video <http://63.162.24.170/axis-cgi/mjpg/video.cgi?resolution=352x240&camera=1&dummy=garb> !
That is a continuous jpeg feed and AW won't display it but it will fill your harddisk very soon!


--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 29, 2003, 8:23am

[View Quote] > Just to make my comments clear with reference to the comment I was making
> about OneSummers Staged Turmoil Post,

<snip>

Check your facts please - the mentioned post is from The Lady, not from OneSummer.

--
Andras
"It's MY computer" (tm Steve Gibson)

Dec 30, 2003, 7:17pm

[View Quote] > When he trojaned me the isp he was using was in Australia :-o. I suppose he
> just has lots of proxies in America.
>
>

He was just lucky - such a kid is not able to pull any tricks :) he actually lives is Pikeville, Kentucky. I'll post more details later :)


--
Andras
"It's MY computer" (tm Steve Gibson)

Jan 14, 2004, 5:44pm

Even if this wish is late - I think everyone should prosper and live happily in 2004 and beyond!

--
Andras
"It's MY computer" (tm Steve Gibson)

Jan 27, 2004, 7:42pm

[View Quote] > The floating tabs are such a pain in the ass I stopped using AW for about a
> week after getting the upgrade. The toolbar is also not improved, just
> "different" so I had to re-learn the buttons. Not a big deal, but why oh
> why did they waste time making new buttons and this stupid floating toolbar,
> most everyone I know on the beta now runs aw exactly like in that screen
> shot. If you maximise AW, the tabs panel gets in the way of the viewing
> area and puts your view off-center, very distracting. Before one could
> simply turn off and on the tabs panel if they didn't want it, I see no
> reason to make to float and no ability to "lock" it onto the side like
> before.
>
>
>

You can turn the tabs off with a single click.

--
Andras
"It's MY computer" (tm Steve Gibson)

Jan 30, 2004, 5:09pm

[View Quote] > Where ever i look on AW 3.5 there is a bug, and yes i do know it is beta but
> there is simply too many bugs they could of atleast fixed a few before
> releace
>
>

Where ever I look on King Small Guy there is a bug. Yes I know he is still in beta but he has too many bugs.
He should at least explain all of the bugs in him to us :)

--
Andras
"It's MY computer" (tm Steve Gibson)

Feb 20, 2004, 4:28pm

[View Quote] > Would have thought 1st rule would be buy a decent virus checker and make
> sure its updated daily..
>

Virus writers are one step ahead of virus checkers:(
#1 is still: Don't open any attachment you don't know and you are not expecting!!!!

--
Andras
"It's MY computer" (tm Steve Gibson)

Feb 21, 2004, 5:58am

[View Quote] First - if you feel the urge to crosspost to all the groups, set the follow-up to community (where this topic belongs to)
Second - before you start to spread FUD, study the case :)
This (and several other) worm picks its "From" address from the infected computer's address book and sends its payload to all the addresses it found within the address book.
According to Symantec's discovery the worm uses not only the address book but:

"8. Retrieves email addresses from files on the computer that have the following extensions:

* .msg
* .oft
* .sht
* .dbx
* .tbb
* .adb
* .doc
* .wab
* .asp
* .uin
* .rtf
* .vbs
* .html
* .htm
* .pl
* .php
* .txt
* .eml

"
In other words: someone in AW has an infected machine (should be an AW user - why else would he/she have the billing address of AWI?) and your email address is on that machine too - this is how the mail ended up on your machine with the sender mentioned above.
I'm not an advocate of MATT but it is not his job :)

FU set to community.
--
Andras
"It's MY computer" (tm Steve Gibson)

Feb 22, 2004, 2:19pm

Hi all,
I implemented a straight FTP to FTP rezip operation when selecting the "SourceFromFTP" checkbox.
The program now can log in to the FTP server, get the source list from there (click on the GetList button!) then operate a rezip on it. The files are downloaded to the Target Path (and not deleted!), rezipped with the new password and can be uploaded back to the server in the same batch by selecting the FTP To Host checkbox.
File security is strengthened by adding random strings to the file every time you rezip it with a password.


Please report any errors!!

Enjoy,
--
Andras
"It's MY computer" (tm Steve Gibson)

Feb 26, 2004, 8:19am

[View Quote] > I got something like that about 3 weeks ago too but from a
> 3DTom at activeworlds.com with an attachment and the following in the body of
> the email:
>
> attachment.
>
>
>
>
>
> Dunno what was in the attachment cus I dont' open those unless I feel its
> safe and if a friend of mine warns me ahead of time to expect it. I replied
> back and tried to explain that since I don't know who it is, that I won't
> open it. But got the mailerdaemon instead. Saved the message from
> mailerdaemon just in case but figured it was some immature jerk playing
> games with me. ;-"D
>
>

http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.a at mm.html?Open

Never NEVER NEVER EVER open any attachment if you don't know the source!!!!
--
Andras
"It's MY computer" (tm Steve Gibson)

Mar 4, 2004, 3:03pm

[View Quote] > Hi,
>
> It has come to my attention that one of the viruses out there (the
> W32.Netsky.B at mm virus) has picked up my email address at awnewbie.com
> and has sent mail from other people's systems falsely using my address.
> I have received a few bounced emails this way.
>
> I have received 7 e-mails infected with this particular virus in my
> mailbox, none of those attempts made it through.
>
> If you receive a message from ryan at awnewbie dot com containing a
> virus, please understand that it is not from me. Thank you :)
>
> Ryan

Anyone in AW has the IP address 68.82.250.15 ? <pcp01466071pcs.lpaxtn01.pa.comcast.net>
It is an infected computer flooding several people with tis virus picking up AW related email addreses from that machine.

--
Andras
"It's MY computer" (tm Steve Gibson)

Mar 4, 2004, 3:19pm

[View Quote]
> Anyone in AW has the IP address 68.82.250.15 ?
> <pcp01466071pcs.lpaxtn01.pa.comcast.net>
> It is an infected computer flooding several people with tis virus
> picking up AW related email addreses from that machine.
>

n/m I found the person :)

--
Andras
"It's MY computer" (tm Steve Gibson)

Mar 10, 2004, 11:37am

[View Quote] > I use a hotmail acct for everything else though, the only thing I use the
> email that the worm was sent to was in AW newsgroups...

Which only indicates that the infected person reads the newsgroup and the virus can find the newsgroup file on his/her computer.

--
Andras
"It's MY computer" (tm Steve Gibson)

Mar 4, 2004, 6:57am

I did not mean to reply to XelaG - just a general spot within this thread.

When will you folks learn: "DON'T FEED THE TROLL" !

http://www.winternet.com/~mikelr/flame27.html or
http://www.winternet.com/~mikelr/flame8.html

Feel free to browse that collection and maybe you'll find better references :)

--
Andras
"It's MY computer" (tm Steve Gibson)

Mar 4, 2004, 11:06am

[View Quote] > That's a lot of hooey. It just makes it harder to get problems fixed. I
> had to badger Roland at times to get him to come look at some Av problems
> back in 3.0 and 3.1 and when he finally did come he was able to track down
> the problem and get it fixed in the next upgrade. AWI and the current
> programmers just want to stick to a little "clique" of people to work on the
> beta's and that's why it has taken so long and been so many problems to fix
> and IMO a big part of the reason Roland left. It's just like the terrible
> problems that exist with transparencies now. They used to work better back
> in AW 2.2 and 3.0. But particularly since 3.2 multiple transparencies are
> much worse and if you aren't on the "beta team" no ones wants to listen.
> Well I don't want to be on the beta team. I just want to tell someone at
> AWI about the problems I see since I am a modeler and have some insight to
> some of the problems from observation in Truespace vs the AWB.
> Andras and I just had a few discussions about the transparency problems and
> he was going to talk to the programmers about what we saw. he is more of
> an insider so maybe he will have some luck. I gave up sometime back trying
> to get my opinions heard. I'm about at the point that it can stay broke for
> all I care.
>
> Paul

Well,, since Chrispeg on board we have again someone who listens instead of dodging the problems.
The reason I'm closer to the devteam than most of the folks is that I have an ability to describe the problem (and trace the bugs and all circumstances) better than average.
The programmers can't solve the bug if they can't see it - I usually spend hours to track it down, find the cause (sometimes giving advices) and create simple examples where it is easy to reproduce them.
I always listen to folks in the community if they asks me about problems and I try to relay them the best I can do to the devteam. Sometimes those hours I spend can save much more time for them to fix it - meaning we can get the fix faster:)
I am a modeler (not a really good one), I know programming (very well) and I know how the system works (better than almost everyone). I designed several software, run a big devteam to develop systems and acted as a firewall between them and the user to make the process more productive and effective. You have to live with this multilayer approach to get the most bang for your money (virtually :).
Having The Lady on the beta group would ruin completely the process - the beta folks don't want to hear any "democracy" and "it is not right - they abuse me/others" issues while they are doing their job. I could question the selection of the beta team (few people shouldn't be there IMO) but it is solely the devteam's decision. if they satisfied - I'm happy.

my 2 cents,
--
Andras
"It's MY computer" (tm Steve Gibson)

Mar 4, 2004, 2:12pm

[View Quote] > Sounds like time for another "shut up"... *G*
>

http://www.winternet.com/~mikelr/flame12.html ?

I should spend some more time to learn all the characters to properly categorize the posts :)

--
Andras
"It's MY computer" (tm Steve Gibson)

Mar 4, 2004, 6:31am

[View Quote] > I see www.bitmebaitandtackle.com's IP as 63.251.83.54. It looks like the
> server is running Apache with name-based virtual hosting.
>
> [JerMe at www JerMe]$ host www.bitemebaitandtackle.com
> www.bitemebaitandtackle.com has address 63.251.83.54
>
> So, looking up that IP directly gives an error message from the server
> b/c it doesn't know which domain to use.
>
>
> What IP did you use mongo?
>

I'm not mongo but all the webpage references point to physical IP addresses: 64.217.80.179

--
Andras
"It's MY computer" (tm Steve Gibson)

Mar 7, 2004, 8:55pm

[View Quote] > I dunno why this is here but I downloaded the browser just because I was
> bored and played this game. Its very cool but what strikes me is that there
> are more people on this program than there is on Active Worlds itself.. lol

Thanks to the Holland TV coverage!

--
Andras
"It's MY computer" (tm Steve Gibson)

Mar 5, 2004, 10:51am

[View Quote] > You know....I just checked the nominations coming in, and found about 10
> attempts at sending me a virus with return addresses from
> blahblah at andras.net bkahblah at hu.storage.net and blahblah at blaxxun.net.
> It seems pretty obvious that where it's coming from, the person is a
> definate 3D'er person.
> I wouldn't want to be in their shoes once I find out where the root is
> from:)
> Could everyone PLEASE make sure you have virus scanners running on your
> incoming and outgoing mail?
> And definately scan thoroughly ALL your hard drives.
> If you aren't savvy on how to do these things, please ask here. I am sure
> there are many that will help, if it stops this insanity:)
> Thanks!
> Bit:)
>
>

It is always helpful to get the email header. If there is one or two hops in the Received From: header - you can pinpoint the sender's IP address which is my case :
pcp01466071pcs.lpaxtn01.pa.comcast.net [68.82.250.15].
The person who owns this IP did not cleaned his machine yet.

--
Andras
"It's MY computer" (tm Steve Gibson)

Mar 10, 2004, 12:02pm

Thanks

--
Andras
"It's MY computer" (tm Steve Gibson)

1  ...  23  24  25  26  27  28  ...  35  |   Order by default