Bitcoin Forum
July 15, 2019, 10:58:50 PM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [WARNING] Eva Braun - Trying to infect users  (Read 1371 times)
esadee
Member
**
Offline Offline

Activity: 94
Merit: 10



View Profile
June 13, 2013, 06:56:32 PM
 #1

https://bitcointalk.org/index.php?action=profile;u=126810

Contacted me to buy a GPU. Read the PM logs yourself and you'll know the rest.
http://i.imgur.com/QJtz11D.png
http://i.imgur.com/xiI9TId.png

I'm not gonna post the link here but if any mods want to see it I can PM you the link. Here's a virus scan for the file:
http://goo.gl/gwF9q
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1563231530
Hero Member
*
Offline Offline

Posts: 1563231530

View Profile Personal Message (Offline)

Ignore
1563231530
Reply with quote  #2

1563231530
Report to moderator
1563231530
Hero Member
*
Offline Offline

Posts: 1563231530

View Profile Personal Message (Offline)

Ignore
1563231530
Reply with quote  #2

1563231530
Report to moderator
escrow.ms
Legendary
*
Offline Offline

Activity: 1260
Merit: 1004

GPG Key-ID: B82BA7E1 | I don't use skype.


View Profile
June 13, 2013, 07:03:13 PM
 #2

Well you are lucky that you didn't ran that file, he should get banned for doing this.

Ps: I think hyperlink and image bb code should be disallowed in pm's, once a guy tried to trick members to go on phishing links/java driveby sites by doing fake contest and a another guy also tried to grab my ip using image lol.

pheaonix
Sr. Member
****
Offline Offline

Activity: 392
Merit: 250


http://casinobitco.in/ A+ customer support


View Profile
June 13, 2013, 07:40:14 PM
 #3

familiar name

https://bitcointalk.org/index.php?topic=225245.0


BTC.sx - Leveraged Bitcoin Trading. Simply use Bitcoin to take advantage of a rising or falling Bitcoin price.
redtwitz
Full Member
***
Offline Offline

Activity: 231
Merit: 100


View Profile
June 13, 2013, 08:31:54 PM
 #4

I not sure if I understood the PMs correctly. Does the zip archive contain a file with a .com extension that requires you to enter a password or is it an encrypted archive that contains a link to a .com domain?
pheaonix
Sr. Member
****
Offline Offline

Activity: 392
Merit: 250


http://casinobitco.in/ A+ customer support


View Profile
June 13, 2013, 08:34:36 PM
 #5

I not sure if I understood the PMs correctly. Does the zip archive contain a file with a .com extension that requires you to enter a password or is it an encrypted archive that contains a link to a .com domain?

it is likely a hidden .exe inside of a zip file, like he tried to pull with me.

he is so bad at this.

BTC.sx - Leveraged Bitcoin Trading. Simply use Bitcoin to take advantage of a rising or falling Bitcoin price.
r3wt
Hero Member
*****
Offline Offline

Activity: 686
Merit: 500


always the student, never the master.


View Profile
June 13, 2013, 08:36:33 PM
 #6

what a bitch. if he was smart he would have linked to an image that contained malicious code such as a small process to close and append a command to lsass.exe or csrss.exe to open a socket and then relaunch the process, thus allowing him to sneak a virus into the system with relative ease providing the virus isn't a copy and paste clone of a known virus. its o easy to open jpeg's in notepad and insert a few lines of code. if you were talented programmer you could probably squeeze an entire virus into a picture. imagine having a whole album full of pictures, each with its own virus. talk about domination.

My negative trust rating is reflective of a personal vendetta by someone on default trust.
greyhawk
Hero Member
*****
Offline Offline

Activity: 924
Merit: 1000


View Profile
June 13, 2013, 08:49:34 PM
 #7

what a bitch. if he was smart he would have linked to an image that contained malicious code such as a small process to close and append a command to lsass.exe or csrss.exe to open a socket and then relaunch the process, thus allowing him to sneak a virus into the system with relative ease providing the virus isn't a copy and paste clone of a known virus. its o easy to open jpeg's in notepad and insert a few lines of code. if you were talented programmer you could probably squeeze an entire virus into a picture. imagine having a whole album full of pictures, each with its own virus. talk about domination.

What an excellent idea.



You are now all infected, MuahahahahahahahAAARgh*cough**cough**wheeze*
r3wt
Hero Member
*****
Offline Offline

Activity: 686
Merit: 500


always the student, never the master.


View Profile
June 13, 2013, 08:52:51 PM
 #8

what a bitch. if he was smart he would have linked to an image that contained malicious code such as a small process to close and append a command to lsass.exe or csrss.exe to open a socket and then relaunch the process, thus allowing him to sneak a virus into the system with relative ease providing the virus isn't a copy and paste clone of a known virus. its o easy to open jpeg's in notepad and insert a few lines of code. if you were talented programmer you could probably squeeze an entire virus into a picture. imagine having a whole album full of pictures, each with its own virus. talk about domination.

What an excellent idea.



You are now all infected, MuahahahahahahahAAARgh*cough**cough**wheeze*

smf automatically sanitizes images and removes malicious code.

My negative trust rating is reflective of a personal vendetta by someone on default trust.
TheButterZone
Legendary
*
Offline Offline

Activity: 2492
Merit: 1010


Pay with SegWit!


View Profile WWW
June 13, 2013, 10:02:54 PM
 #9

Shitcan Eva Braun's rating. NOW!

https://bitcointalk.org/index.php?action=trust;u=126810

Saying that you don't trust someone because of their behavior is completely valid.
Tomatocage
Legendary
*
Offline Offline

Activity: 1554
Merit: 1200

brb keeping up with the Kardashians


View Profile
June 13, 2013, 10:10:30 PM
 #10


Done.

Recommended Exchanges: Binance.com | CelsiusNetwork
GPG ID: 4880D85C | 1% Escrow | 8% IPO/ICO Escrow services Temporarily Closed | Bitcointalk is the ONLY place where I use this name (No Skype/IRC/YIM/AIM/etc) | 13CsmTqGNwvFXb7tD9yFvJcEYCDTB8wQTS | Beware of these SCAM sites! | *Sponsored Link
oli123123
Legendary
*
Offline Offline

Activity: 1447
Merit: 1000



View Profile
June 13, 2013, 10:32:37 PM
 #11

He sent the same message to me, i didn't run the file but i opened it with a notepad  after chaning it to .txt am i infected?
Darktongue
Sr. Member
****
Offline Offline

Activity: 350
Merit: 250



View Profile
June 13, 2013, 10:43:23 PM
 #12

Had the same con pulled for my ring I have up.  Offered me 0.1 less then my asking.  After I agreed to the amount I was given an address and the infected link.  I was also told he was going to make a post about the deal so everyone was aware. I was then told "So don't scam".

I checked the users new postings and did not see it.  I did however see a comment wher the user said "I don't use gox. ... ever" That was a LOL
MPOE-PR
Hero Member
*****
Offline Offline

Activity: 756
Merit: 500



View Profile
June 14, 2013, 01:12:12 AM
 #13

Is she trying to give them Hitler?

Sorry, couldn't resist.

what a bitch. if he was smart he would have linked to an image that contained malicious code such as a small process to close and append a command to lsass.exe or csrss.exe to open a socket and then relaunch the process, thus allowing him to sneak a virus into the system with relative ease providing the virus isn't a copy and paste clone of a known virus. its o easy to open jpeg's in notepad and insert a few lines of code. if you were talented programmer you could probably squeeze an entire virus into a picture. imagine having a whole album full of pictures, each with its own virus. talk about domination.

What an excellent idea.



You are now all infected, MuahahahahahahahAAARgh*cough**cough**wheeze*

I think that spider is missing a leg. Please return it.

My Credentials  | THE BTC Stock Exchange | I have my very own anthology! | Use bitcointa.lk, it's like this one but better.
TheButterZone
Legendary
*
Offline Offline

Activity: 2492
Merit: 1010


Pay with SegWit!


View Profile WWW
June 14, 2013, 02:26:34 AM
 #14

Yay, the rghost.net download page now says "Access to the file is restricted: copyright violation."

Downloaded 5 times other than the one I did in order to virus scan it.

Saying that you don't trust someone because of their behavior is completely valid.
DiamondCardz
Legendary
*
Offline Offline

Activity: 1078
Merit: 1028


View Profile WWW
June 14, 2013, 04:13:09 AM
 #15


I second that.

I'm dabbling in Bitcointalk again - I won't be making trades with people. If I try to trade with you, ask for a signature from my address 171717... which I have had control of since about 2015. If I can't provide it, I might have been hacked.
oli123123
Legendary
*
Offline Offline

Activity: 1447
Merit: 1000



View Profile
June 14, 2013, 10:19:20 AM
 #16

He sent the same message to me, i didn't run the file but i opened it with a notepad  after chaning it to .txt am i infected?
escrow.ms
Legendary
*
Offline Offline

Activity: 1260
Merit: 1004

GPG Key-ID: B82BA7E1 | I don't use skype.


View Profile
June 14, 2013, 10:24:44 AM
 #17

He sent the same message to me, i didn't run the file but i opened it with a notepad  after chaning it to .txt am i infected?

nope.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!