Page 2 of 2

Posted: 11 Feb 2009, 21:24
by IchoTolot
~[A]lex~ wrote:... Yes, it DID say "foto". You know what it is? It's a GERMAN word, it means PHOTO, and guess what? The makers of that virus are... GERMAN! ...

German quality :wink: :lol:

Posted: 11 Feb 2009, 23:29
by Skilgannon
~SaSQuAtCH~ wrote:
[AK]Sanguine wrote:I wasn't infected, im not that dumb. I just find it annoying getting send
links and such like that. I'm pretty sure it was him and not the trojan
itself doing it. He can't spell worth crap and its usually improper phonics
like foto instead of goto.
Trust me, he didn't send it to you on purpose. I could show you at least a dozen of messages like that from my MSN logs and I'm sure (or at least hope :) ) that those people didn't sent me them because they all hate me.
Skilgannon wrote:Get XF. You can chat realtime thru that too. :D :P
Not as many people use XFire as MSN nowadays. I have 370 contacts on my MSN account, 90% of them are Hungarians. I have only 4 or 5 Hungarians on my XFire account.

MSN is popular and most of those young people I know who have internet access at home and own an e-mail address have an MSN account aswell. That's my personal experience though.
Click my mini-prof and add me dude. 8)

Posted: 13 Feb 2009, 23:40
by Batch
~[A]lex~ wrote:
[AK]Sanguine wrote:I wasn't infected, im not that dumb. I just find it annoying getting send
links and such like that. I'm pretty sure it was him and not the trojan
itself doing it. He can't spell worth crap and its usually improper phonics
like foto instead of goto.
Uh.

First of all, when did you receive this URL?
As the virus SHOULD be offline already. Maybe a new version was made though. But I think was quite a while ago when he sent you that virus? :)

Second, he did NOT send it, it WAS the virus.
Yes, it DID say "foto". You know what it is? It's a GERMAN word, it means PHOTO, and guess what? The makers of that virus are... GERMAN!

How do I know? I analyzed it together with Batch, we even managed to talk to one of the makers of the virus.

The virus connects to an IRC server, and there it receives it's commands:

Image





I love the way people accuse others while it's not actually true.
Yeah, That botnet had about ~600k users connected.

Posted: 14 Feb 2009, 13:46
by ~[A]lex~
[AK]Sanguine's last visit was on 12th of February. I posted my conclusions about the virus on the 11th. He did not respond, nor did he apologize.

Can someone delete the e-mail address of that MIRK clan member?
It's not really fair that spambots can find the e-mail address due to some whiner who randomly blurts things without coming up with proof.

Posted: 14 Feb 2009, 15:01
by ~[FGS]SaSQuATcH~
Done

Posted: 14 Feb 2009, 15:02
by ~][FGS][Nobody~
Lol, bigfoot, that's a joke!
I was just doing it.. so we were doing it simultaneously.