When will this thievery stop!?

Paladinexe

Senior member
Jul 18, 2000
307
0
0
I do not view the efforts of bymer@ukrpost.net to be acceptable. I apparently got hacked by him while visiting Anandtech. There is a lot of competitive bragging about dnet here. It has gotten out of hand when competitors resort to stealing from others. My computer does indeed belong to me and I have not authorized any person to wear out my processor et.al. by running it at 100% capacity for a game of folly. Someone please help me find a way to put a stop to such thievery. I searched through my hard drive and found all the entries molested there by this hacker. I also modified registry to remove all components there. This also means this person stole my time (that I had to use to restore my pc to it's pre-molestated status). ZoneAlarm provided me with his/her IP. How do we use such information to see that this person does not benefit from stolen goods? If no cooperative efforts are provided by Anandtech or it's participants I will stop visiting here.

 

mechBgon

Super Moderator<br>Elite Member
Oct 31, 1999
30,699
1
0
Hang tough Paladinexe, I will be right back with a fix. This is a worm program, similar to a virus, not anything that a Dnet team has concocted. I will be right back with a link to the de-worm program for you.
 

Russ

Lifer
Oct 9, 1999
21,093
3
0
Paladinexe,

Whoah, sky down there, bunky. No need to pop in and start tossing accusations around. NOBODY on this team or at Dnet has ANYTHING to do with this bymer twerp. His worm has manifested itself in thousands of systems all over the world with people who've never even heard of AnandTech.

The ONLY way the worm can get in to your system is if your shares are open to the world or you download and execute an attachment. Before you start screaming at us, you need to take a serious look at your own security.

Might I suggest that you head over to Shield's Up! and do a little research?

Russ, NCNE
 

mechBgon

Super Moderator<br>Elite Member
Oct 31, 1999
30,699
1
0
Ok, here is Distributed.net's full Trojans page here: Trojans page at Dnet. Look for their Wormfree utility on that page. Rest assured that visiting AnandTech Forums is not the cause of this infestation.

edit: since the Bymer worm has also been made more dangerous by a subsequent compound infestation with the kriz virus, I am going to find the kriz fix utility for you too. BRB...
 

Paladinexe

Senior member
Jul 18, 2000
307
0
0
Wow! those were quick responses. I am not blaming Anandtech for anything other than inducing the competitiveness. Interesting a person with the signature &quot;Resistance is futile! Join Team Anandtech&quot; would defend a hacker. I removed ZoneAlarm as it caused some problems and my wife does not understand enough about these things and she enjoys playing games on the internet. I am only seeking information how to stop such activities so innocent people do not have to invest resources to protect themselves just have have fun.

The atmosphere that &quot;Anandtech MUST win&quot; is what draws suspicious thoughts concerning it's highly valued involvement in this processor destroying game.
When my processor is worn out, I want to know that I got all the enjoyment and benefit of my money and time...not some thief.

Please do read this as irrational responding. I am looking for mature solutions to some of the problems relating to the internet. I am not looking for reprimands from those who seek self glorification. I will not &quot;join Anandtech&quot; if it involves overriding the world's privileges and rights. If Anandtech is responsible and sincere to it's visitors they will provide a means of limiting such immoral behavior rather than allow vicims to be chastised. I thank you for your response and information.
 

DanC

Diamond Member
Jun 2, 2000
5,553
0
0
Ahem. Russ did not &quot;defend a hacker&quot; - quite the contrary.

You may not intend it as such, but your tone is decidedly accusatory.
You may want to brace yourself for imminent flaming that will come from folks with standards every bit as high as those you describe.

Don't think for a moment that we do not have people well technically adept and technically capable of cheating. Those same people would not for a moment consider it, and will likely be chafed by any insinuation that they would. :|
 

Russ

Lifer
Oct 9, 1999
21,093
3
0


<< Interesting a person with the signature &quot;Resistance is futile! Join Team Anandtech&quot; would defend a hacker. >>



I'm not defending a hacker. I'm defending my team from unwarranted accusations leveled by some over-excited doofus who opened his mouth before he decided to engage his brain.

You don't EVEN want to start accusing me of defending this craphead.

Russ, NCNE
 

Paladinexe

Senior member
Jul 18, 2000
307
0
0
BTW thanks for the links. I am sure these are faster and better than the manual cleaning I went through. As a note of interest I was editing the original post and clicked &quot;Stop&quot; when I noted my browser was searching for an advertising &quot;cookie monster&quot; in order to process my posting. When I returned to the thread (very quickly indeed) there were the posts between my two. I then visited the thread in the distributed computing category and found there were still no replies there even though I posted it first.

All in all I say this is the best group to get response from.
And don't overlook the fact that I am trying to warn others who come here to keep an eye on their systems and what is running on it.

Let's have a team of anti-hackers to enlighten and instruct others how to protect themselves that will rival the enthusiasm as the dnet team.
 

mechBgon

Super Moderator<br>Elite Member
Oct 31, 1999
30,699
1
0
By the way, you will be gratified to note that Bymer's stats do NOT exist at Distributed.net, he has been banned. :)

I do want to let you know that the RC5 program is actually not very hard on CPUs. The CPU uses its idle cycles one way or the other, although to be fair, with some versions of Windows, the idle cycles would otherwise be used to run HLT commands that help cool the processor. I have not had any problems with my CPUs though, the client only raises the temperature a small amount (a couple degrees Celcius). I think a CPU in a server probably works much harder than our home systems that run RC5.
 

Paladinexe

Senior member
Jul 18, 2000
307
0
0
ROFL this is amazing. I am a relatively fast typist and I am writing back to back responses and by the time they are posted others have already appeared. I am indeed making accusations but the name of the accusee is on the first line of this thread. All others I am seeking an alliance. Bitter defensiveness is not condusive of respect and admiration and is not tantamount with ethics. It shows a self-centered entity that is seeking to elevate itself above others. Hopefully there are no (at least minimal quantity) of such entities that post at Anandtech. I have thouroughly enjoyed visiting here on a regular basis and do not wish to instigate emotions that lead to awkwardness and reluctance to continue as a member. Please do not feel attacked...grow up. Thank you.
 

Sir Fredrick

Guest
Oct 14, 1999
4,375
0
0
Heh. Please note that dnetc will NOT wear out your processor. Processors don't have moving parts. The most it can do is raise your CPU temperature a degree or two.

Anandtech is not responsible for introducing a level of competitiveness - it was there from the beginning, that's why they have stats pages with rankings.

For security, if you don't like ZomeAlarm, try BlackICE defender by NetworkICE
 

Paladinexe

Senior member
Jul 18, 2000
307
0
0
Fantastic!! That Makes My Day. Now on to better things in life. I feel refreshed now. Back to the forums.
 

Viztech

Platinum Member
Oct 9, 1999
2,807
0
0
McAfee info on the Bymer worm
You might want to read the above about the Bymer methods of operation.
<< . It scans random IP address over NetBIOS for computers that have shares named &quot;C&quot; and a Windows folder called &quot;Windows&quot;. When it finds one, it copies itself and the files &quot;dnetc.exe&quot; and &quot;dnetc.ini&quot; to the &quot;c:\windows\system&quot; folder of the remote computer. The file &quot;dnetc.exe&quot; is an encryption-cracking program from www.distributed.net, which is not the author of this worm. The samples received by AVERT are packed with the UPX file-compression utility. >>

An infected machine will scan the 'net to find other machines with open shares to infect. Most annoying. The IP address that you have probably belongs to another victim. :( If it is from AOL, hold your breath. AOL will not help you at all to contact the victim. AOL will just blame YOUR ISP for allowing this to happen to you. Stupid people.

Best of luck.

viz
 

mechBgon

Super Moderator<br>Elite Member
Oct 31, 1999
30,699
1
0
LOL, Paladinexe, this is typical of our Team, we jump when you need help ;) Are you sure you don't want to join...? ;) ;) ;) There's plenty of room here!

edit: /me makes lemonade
 

Russ

Lifer
Oct 9, 1999
21,093
3
0
Reading this guy's posts, I can only assume that he's related to Moonbeam.

Backpedal all you want, Paladinexe, but you accused this team, then you accused me personally. If you lack the skill to protect your own system, then perhaps you should consider getting off of the web. Better that, then blaming others for your own failings.

Russ, NCNE
 

DanC

Diamond Member
Jun 2, 2000
5,553
0
0


<< Please do not feel attacked...grow up. Thank you >>




<< Anandtech MUST win&quot; is what draws suspicious thoughts >>




<< this processor destroying game. >>




<< a means of limiting such immoral behavior >>



Uh... I don't think it was any of us that began with any kind of an attitude.
If you don't run an antivirus, or if you share your drive to the world and you get a virus... that's not remotely dnet's, AnandTechs, or anyone's fault but yours!

We're just delighted to provide help, but yours is an exceedingly interesting attitude.
[shaking head in disbelief]

edit below:


<< I apparently got hacked by him while visiting Anandtech >>



ahhhh... yeah. Does the e-mail address end with .nl by any chance?

edit: Does YOUR e-mail addres end wih .nl by any chance?
 

Paladinexe

Senior member
Jul 18, 2000
307
0
0
Oops the immoral behavior was in reference to hackers not to the members of Anandtech. The most important reason I stopped using ZoneAlarm (which I am now currently using again until I finish some research) is the fact it is so highly promoted by Prodigy and other ISP's. They are so huge on data gathering I am sure they would not promote anything that would hinder them. In fact I would not be surprised if I learned ZoneAlarm itself incorporated spyware elements. Many of the &quot;security providers&quot; I researched in the past were nothing more than &quot;Cookie Monsters&quot; who only wished to eliminate their competitors. Hence my signature:
 

Sloth

Senior member
Oct 21, 1999
243
0
0
The best advise I can give you is to engage the brain before the mouth (or fingers as it is) If you would take the time to read up on the worm that you are so convinced you got by coming here you would know that it is from your own poor computing skills that you got it.

The typical infection is from open shares under windows. The worm tries to access groups of IP addresses. Those machines that it finds with open shares are then infected with the worm and it also drops a payload. In this case it happens to be the DNet client. It could have just as easily been a much more serious virus, or Aunt Sally's cookie recipe.

If you bother to read up on the sites that everyone has pointed you to then you will see a lot about the worm. Since you have one virus you might have another. Grab a virus scan program and look to see if you have gotten others through your open shares. Also it will check to make sure that YOU are not infecting other machines with the virus.

Outside of open shares the most common way of getting a virus is from downloading infected programs, most commonly wares, or running attachments to email that contain viruses. We know you would not be stupid enough to do that, so that is why they are rarely mentioned as possible ways of getting them.


S.
 

DanC

Diamond Member
Jun 2, 2000
5,553
0
0
Wouldn't it be easier to perhaps admit that you may have been upset about the attack, and spoke hastily?

There's folks here that can help you lock your system up tighter than a frog's butt stretched over a rain barrel and provide you enough information to get your system running like a Ferrari - but I'm not sure you chose a direction that will win lots of allies.

We're a forgiving lot, but don't take kindly to accusations.
 

Paladinexe

Senior member
Jul 18, 2000
307
0
0
Having reread my post several times I do not see any accusation towards Anandtech. I accused outsiders of taking advantage of me >>&quot;I apparently got hacked by him while visiting Anandtech<<. For the entire e-mail address re-read the post. May I suggest some links for reading comprehension? hehe.
 

Russ

Lifer
Oct 9, 1999
21,093
3
0
Hey, wait a minute. This guy doesn't even have a profile. For all we know, he could be from one of the other teams and is just trying to stir up trouble by making up stories. No profile, no credibility.

Why are we wasting our time?

Russ, NCNE