Warning! nasty one

[pcbutts1]

I've seen this thing change group policy, expire passwords and modify the
boot.ini. Warning Newbie's don't go here or you will be asking for help to
get rid of it. 64_201_199_24 it arrives in email claiming to be a youtube
video. Dustin you like **** like this have fun.


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

[jen]

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
news:favdgl$n9o$1@blackhelicopter.databasix.com...
> I've seen this thing change group policy, expire passwords and modify
> the boot.ini. Warning Newbie's don't go here or you will be asking for
> help to get rid of it. 64_201_199_24 it arrives in email claiming to
> be a youtube video. Dustin you like **** like this have fun.

Storm of the Day, Now with YouTube:
http://isc.sans.org/diary.html?storyid=3321

-jen

[pcbutts1]

Yep, that be it.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"jen" <jen@example.com> wrote in message
news:aTGAi.36517$t9.31479@bignews7.bellsouth.net.. .
> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
> news:favdgl$n9o$1@blackhelicopter.databasix.com...
>> I've seen this thing change group policy, expire passwords and modify the
>> boot.ini. Warning Newbie's don't go here or you will be asking for help
>> to get rid of it. 64_201_199_24 it arrives in email claiming to be a
>> youtube video. Dustin you like **** like this have fun.
>
> Storm of the Day, Now with YouTube:
> http://isc.sans.org/diary.html?storyid=3321
>
> -jen
>

[Andy Walker]

jen wrote:

>"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in message
>news:favdgl$n9o$1@blackhelicopter.databasix.com.. .
>> I've seen this thing change group policy, expire passwords and modify
>> the boot.ini. Warning Newbie's don't go here or you will be asking for
>> help to get rid of it. 64_201_199_24 it arrives in email claiming to
>> be a youtube video. Dustin you like **** like this have fun.
>
>Storm of the Day, Now with YouTube:
>http://isc.sans.org/diary.html?storyid=3321
>
>-jen

The article doesn't mention it but the IP addresses in the malicious
links are infected zombie computers located all over the world. I
haven't yet seen two the same in all the samples I've collected,
although it is clear that infected computers can send out numerous
emails.

The F-Secure weblog has been pretty good at keeping up on the new
variants http://www.f-secure.com/weblog/

[Clark]

pcbutts1 wrote:
> I've seen this thing change group policy, expire passwords and modify
> the boot.ini. Warning Newbie's don't go here or you will be asking
> for help to get rid of it. 64_201_199_24 it arrives in email claiming
> to be a youtube video. Dustin you like **** like this have fun.



I can't wait for my customers to Click it !!!

Cha Ching!!!


Clark

[Clark]

/Tx2 wrote:
> On Mon, 27 Aug 2007 17:54:18 -0400 Clark
> from the village of Clark_throwaway@yahoo.com
> felt we might be interested in the following...
>
>
>> pcbutts1 wrote:
>>> I've seen this thing change group policy, expire passwords and
>>> modify the boot.ini. Warning Newbie's don't go here or you will be
>>> asking for help to get rid of it. 64_201_199_24 it arrives in email
>>> claiming to be a youtube video. Dustin you like **** like this have
>>> fun.
>>
>>
>>
>> I can't wait for my customers to Click it !!!
>
> Shouldn't your customers have adequate anti-virus/malware software in
> place though?
>
>> Cha Ching!!!
>
> nuff said. Clearly someone who only pretends to be knowledgeable of
> computers and security in order to cash in on their own incompetence
> when their 'victims' have been misled.
>
> Please die.

LOL you ignorant whatever it is that you are.

Every single computer I work on has an antivirus and anti malware software
installed on them.
most of my customers have teenage kids that will click on and download
anything, and that's how they get infected.
Thank god for the reckless teenage *******s! I LOVE them!
(I make between $75 and $150 a repair). :-)

Clark

[Drumstick]

In article <EyVAi.19$g46.0@newsfe03.lga>, Clark_throwaway@yahoo.com
says...
> /Tx2 wrote:
> > On Mon, 27 Aug 2007 17:54:18 -0400 Clark
> > from the village of Clark_throwaway@yahoo.com
> > felt we might be interested in the following...
> >
> >
> >> pcbutts1 wrote:
> >>> I've seen this thing change group policy, expire passwords and
> >>> modify the boot.ini. Warning Newbie's don't go here or you will be
> >>> asking for help to get rid of it. 64_201_199_24 it arrives in email
> >>> claiming to be a youtube video. Dustin you like **** like this have
> >>> fun.
> >>
> >>
> >>
> >> I can't wait for my customers to Click it !!!
> >
> > Shouldn't your customers have adequate anti-virus/malware software in
> > place though?
> >
> >> Cha Ching!!!
> >
> > nuff said. Clearly someone who only pretends to be knowledgeable of
> > computers and security in order to cash in on their own incompetence
> > when their 'victims' have been misled.
> >
> > Please die.
>
> LOL you ignorant whatever it is that you are.
>
> Every single computer I work on has an antivirus and anti malware software
> installed on them.
> most of my customers have teenage kids that will click on and download
> anything, and that's how they get infected.
> Thank god for the reckless teenage *******s! I LOVE them!
> (I make between $75 and $150 a repair). :-)
>
> Clark
>
>
>
>

You remind me of a car salesman my brother worked with who used to brag
about how upside down his customers were when they left in their new car
then he would cry because he didn't get any repeat business.

Drum--

[Clark]

>> LOL you ignorant whatever it is that you are.
>>
>> Every single computer I work on has an antivirus and anti malware
>> software installed on them.
>> most of my customers have teenage kids that will click on and
>> download anything, and that's how they get infected.
>> Thank god for the reckless teenage *******s! I LOVE them!
>> (I make between $75 and $150 a repair). :-)
>>
>> Clark
>>
>>
>>
>>
>
> You remind me of a car salesman my brother worked with who used to
> brag about how upside down his customers were when they left in their
> new car then he would cry because he didn't get any repeat business.
>
> Drum--

Most of my business is repeat, trust me, I tell them how they get infected
and even print out the warnings from the F.B.I etc.
I can't help it that they cannot control their children, hell I even ask
them why does your 14 year old have broadband in their bedroom?
Then I warn them how dangerous the Internet is etc.,

They don't listen, so I go back 3 months later and clean up their systems
again.
I guess they can afford it.

Clark

[Dustin Cook]

"Clark" <Clark_throwaway@yahoo.com> wrote in
news:sTlBi.39$Xt6.15@newsfe06.lga:

>>> LOL you ignorant whatever it is that you are.
>>>
>>> Every single computer I work on has an antivirus and anti malware
>>> software installed on them.
>>> most of my customers have teenage kids that will click on and
>>> download anything, and that's how they get infected.
>>> Thank god for the reckless teenage *******s! I LOVE them!
>>> (I make between $75 and $150 a repair). :-)
>>>
>>> Clark
>>>
>>>
>>>
>>>
>>
>> You remind me of a car salesman my brother worked with who used to
>> brag about how upside down his customers were when they left in their
>> new car then he would cry because he didn't get any repeat business.
>>
>> Drum--
>
> Most of my business is repeat, trust me, I tell them how they get
> infected and even print out the warnings from the F.B.I etc.
> I can't help it that they cannot control their children, hell I even
> ask them why does your 14 year old have broadband in their bedroom?
> Then I warn them how dangerous the Internet is etc.,
>
> They don't listen, so I go back 3 months later and clean up their
> systems again.
> I guess they can afford it.
>
> Clark
>
>
>
>

3 months seems to be the average. I don't like the idea of malware
mind you, but the business for removing it is good. I see your point and
understand it Clark. Many of my customers also have a dumb look on their
face even after you explain how they got infected, and how to prevent it
from happening again. I suppose, they do like paying for repairs.

The few posters who responded to you obviously don't do this for a
living, or if they do, they have customers without teenage children.


--
################################################## ##
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
Email: bughunter.dustin@gmail.com
Web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml
################################################## ##

[Dustin Cook]

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
news:favdgl$n9o$1@blackhelicopter.databasix.com:

> I've seen this thing change group policy, expire passwords and modify
> the boot.ini. Warning Newbie's don't go here or you will be asking for
> help to get rid of it. 64_201_199_24 it arrives in email claiming to
> be a youtube video. Dustin you like **** like this have fun.

I'm a bit behind on things here lately butts. If you want to send a sample
along to my email, your welcome to do so.


--
################################################## ##
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
Email: bughunter.dustin@gmail.com
Web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml
################################################## ##