|
Well I just stayed up 3 hours later than I planned to read all 36 (34 when I started) pages of this thread. I eagerly await the payoff.
----------------
|
# ? Apr 30, 2004 09:44 |
|
|
# ? Apr 26, 2024 23:37 |
|
dammit. finally reached the end of the topic, now what am I supposed to do?
|
# ? Apr 30, 2004 09:44 |
|
quote:iwinatinternet came out of the closet to say: Keep hitting refresh. Or if you're using Opera, set it to refresh automatically.
|
# ? Apr 30, 2004 09:46 |
|
quote:iwinatinternet came out of the closet to say: 1 hit refresh 2 drink caffiene 3 goto 1 edit - so very beaten
|
# ? Apr 30, 2004 09:46 |
|
well it's now 1:55am pst and i'm tired. I tried and tried to stay up but I keep hitting refresh on the FedEx tracking and its still saying it's being held by regulatory whatever. I'm sad :(
|
# ? Apr 30, 2004 09:55 |
|
Why does this have to come to a resolution just as I am needing to finish an essay?? Is there no god? Oh, wait, a scammer is getting hosed over. There is a god...
|
# ? Apr 30, 2004 10:03 |
|
Ok guys. For those of you who are still up over here on our side. I'm going to step away and get some sleep. Once again, if something changes with FedEx, or something serious happens at the drop, please call me. If anything like this happens an email form the mark is sure to follow. I want to have it up as soon as possible. Thanks again. MyNameIsJeff fucked around with this message at 21:38 on Apr 30, 2004 |
# ? Apr 30, 2004 10:07 |
|
quote:TheKevman came out of the closet to say: I imagine somewhere a turned off mobile phone is getting phone calls requesting that he pay his import tax bill. I have had letters requesting I pay import tax before, so maybe if they can't get through on the phone they will send a letter. This could be a long weekend; Monday is a national holiday in the UK!
|
# ? Apr 30, 2004 10:13 |
|
Okay, I am in the cafe here is some info, there are webcams, anyone wanna get a msn webcam recorder and i will pan and scan, they dont have memory stick readers so i cant get info from my camera, but there are plenty of pictures WHERE ARE THE OTHER GOONS anyway, here is some info HIJACK THIS LOG Logfile of HijackThis v1.97.7 Scan saved at 11:33:33, on 30/04/2004 Platform: Windows 2000 (WinNT 5.00.2195) MSIE: Internet Explorer v5.00 (5.00.2920.0000) Running processes: C:\WINNT\Explorer.exe C:\WINNT\System32\khooker.exe C:\WINNT\loadqm.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\WinZip\WZQKPICK.EXE C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe C:\Program Files\Internet Explorer\iexplore.exe E:\Programs\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.about.co.uk R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr/*http://www.yahoo.com/ext/search/search.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr/*http://www.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr/*http://www.yahoo.com R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = https://loginnet.passport.com/ppsecure/md5auth.srf?lc=1033 O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_12_0.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_12_0.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [SiS KHooker] C:\WINNT\System32\khooker.exe O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Reality Fusion GameCam SE.lnk = C:\Program Files\Reality Fusion\Reality Fusion GameCam SE\Program\RFTRay.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM) O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O9 - Extra button: Real.com (HKLM) O16 - DPF: DigiChat Applet - http://host9.digichat.com/DigiChat/DigiClasses/Client_IE.cab O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yse/ymmapi_416.dll O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{0E55F79E-5B8B-42B6-81FA-EA6780223388}: NameServer = 212.67.96.129,212.67.96.130 O17 - HKLM\System\CS1\Services\Tcpip\..\{0E55F79E-5B8B-42B6-81FA-EA6780223388}: NameServer = 212.67.96.129,212.67.96.130 O17 - HKLM\System\CS2\Services\Tcpip\..\{0E55F79E-5B8B-42B6-81FA-EA6780223388}: NameServer = 212.67.96.129,212.67.96.130
|
# ? Apr 30, 2004 10:23 |
|
last person to use msn on this CPU was k_b26@hotmail.com and i am LOGGED IN to a account set up on yahoo here balanpetrica, gonna check other pc's now EDIT: other PCs next to me have no info apart from one using GamesNet IRC, no channel logs left or channel history Starbucks fucked around with this message at 10:29 on Apr 30, 2004 |
# ? Apr 30, 2004 10:27 |
|
FAN-loving-TASTIC Starbucks. One thing I noticed right away was khooker.exe quote:Starbucks came out of the closet to say: Are they going to notice you hopping computers??
|
# ? Apr 30, 2004 10:27 |
|
Totally awesome. Wouldn't it be great if we found a keylogger and some evidence of the scam plan! GO GOONS GO! DO IT FOR THE P-P-P-POWERBOOK!
|
# ? Apr 30, 2004 10:28 |
|
Khooker seems to be a system tray utility from s SiS vga card. Not a keylogger.
|
# ? Apr 30, 2004 10:29 |
|
Khooker is a system Tray utility which gets installed by the drivers of the latter day SiS VGA cards Beaten like a bitch :)
|
# ? Apr 30, 2004 10:32 |
|
I can hook up with you on MSN so I can record some pictures. What is your email?
|
# ? Apr 30, 2004 10:33 |
|
must...fight...sleep... (Any way you guys could, say, speed it up a bit? I have class in the morning.)
|
# ? Apr 30, 2004 10:34 |
|
quote:Soos came out of the closet to say: lets start a conference call eh? contact me on the yahoo address i gave as well
|
# ? Apr 30, 2004 10:35 |
|
quote:Starbucks came out of the closet to say: oops
|
# ? Apr 30, 2004 10:37 |
|
Did you check for a hardware based keylogger?
|
# ? Apr 30, 2004 10:39 |
|
quote:Ataraxia came out of the closet to say: WE ALL SAW THAT. :lol: Owner/Lead Tech of Sagebrush Repair in Pinole, CA.
|
# ? Apr 30, 2004 10:40 |
|
Starbuck's cam feed dropped all of a sudden.
|
# ? Apr 30, 2004 10:41 |
|
It's a trap!!
|
# ? Apr 30, 2004 10:41 |
|
quote:Starbucks came out of the closet to say: If you can log into an IRC server and /whois yourself, then you'll have (one of) the IP address(es) that this internet cafe uses. Wonder if they route everything via a Romanian proxy server :)
|
# ? Apr 30, 2004 10:42 |
|
I can barely keep my eyes open, but I MUST STAY AWAKE.
|
# ? Apr 30, 2004 10:42 |
|
Hardware keyloggers.. good idea Check the back of the computer.. look at the keyboard wire. If there is a hardware keylogger, the keyboard will be plugged into a patch cable before going into the PC. ----keyboard wire----|||||:|||||----keylogger----|||||:|COMPUTER CASE|
|
# ? Apr 30, 2004 10:43 |
|
OKAY IM GOING TO CONNECT THIS PC TO SA IRC, I WILL BE IN #SA IN A MO
|
# ? Apr 30, 2004 10:44 |
|
quote:Starbucks came out of the closet to say: DalNET? Or what?
|
# ? Apr 30, 2004 10:45 |
|
These are the only two noteworthy webcam shots so far. The sign outside: http://www.soosed.com/images/superfast.jpg We need more goons! http://www.soosed.com/images/needmoregoons.jpg
|
# ? Apr 30, 2004 10:47 |
|
quote:MyNameIsJeff came out of the closet to say: Edit: drat, thought that had the info. I found out that there's irc.somethingawful.com:6667 that I went to a while ago, maybe it's that? ---------------- ZeromusMog fucked around with this message at 10:53 on Apr 30, 2004 |
# ? Apr 30, 2004 10:48 |
|
quote:Starbucks came out of the closet to say: this is torture! :cry: edit: because I can't irc at work.
|
# ? Apr 30, 2004 10:49 |
|
where's the blaxx guy
|
# ? Apr 30, 2004 10:49 |
|
no physical keyloggers also INTERNET Windows 2000 IP Configuration Host Name . . . . . . . . . . . . : zy5 Primary DNS Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Broadcast IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8139(A) PCI Fast Ethernet Adapter Physical Address. . . . . . . . . : 00-A0-B0-0C-92-76 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.1.14 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1 DNS Servers . . . . . . . . . . . : 212.67.96.129 212.67.96.130
|
# ? Apr 30, 2004 10:51 |
|
okay... unregistered hypercam is recording i've got his limey mug lolling alot... small browser window sry for typos Owner/Lead Tech of Sagebrush Repair in Pinole, CA.
|
# ? Apr 30, 2004 10:52 |
|
This thread is incredible. There's just so much being shared in here... I wish I could meet you all guys in person so I could invite you to beer. You deserve it. I'm sitting in the edge of my chair, anxiously waiting for a conclusion.
|
# ? Apr 30, 2004 10:52 |
|
quote:Cuerzo came out of the closet to say: If you bring the cider down here, I'll pay while we wait together! Torquemada era un jula.
|
# ? Apr 30, 2004 10:53 |
|
Absolute craziness. It's 6 am here and I'm mashing the refresh to see some webcam footage of a marked up binder. I love it.
|
# ? Apr 30, 2004 10:55 |
|
quote:Fufo came out of the closet to say: 3 of my buddies are heading off to Madrid right now. If only I knew earlier... ...MEGA-TWO-PEOPLE-GOONMEET!!!!!!!!
|
# ? Apr 30, 2004 10:55 |
|
quote:Starbucks came out of the closet to say: Go to https://www.whatismyip.com to se the ip adress out from the router (the internet adress, this is his internal NAT adress)
|
# ? Apr 30, 2004 10:55 |
|
I promised my fiance I'd get some sleep tonight so I wouldn't be a walking zombie tomorrow, but this is just too good to miss. quote:cplhades came out of the closet to say:
|
# ? Apr 30, 2004 10:56 |
|
|
# ? Apr 26, 2024 23:37 |
|
quote:Potassium came out of the closet to say: I send and recieve text messages from a friend in Switzerland and have never had any trouble or complaints. I can't call him, though.
|
# ? Apr 30, 2004 10:58 |