42 replies to this topic

[Noitidart]

Please DO NOT accept any files over AIM/MSN there is someone impersonating a member from NeoCodex and sending people this file. This file is a key logger!

Again DO NOT accept any files over AIM/MSN from anyone as this person is impersonating others. Make sure you know the screen name of the person is really who you think it is before talking to them.



EDIT by SL64: The autobuyer being passed around is called the "JennBuyer" and it contains a mailer that sends your account details to their e-mail. There may be a legitimate version of this autobuyer, but the AB being passed around is a variant of the autobuyer.

[Raui]

Thanks for the warning noit. It would help if we could know who it is ?

[redlion]

Errr, does this have anything to do with what we were discussing in private?

[ShadowLink64]

If this person doesn't stop, we may have to revert to public humiliation.

The person responsible, please PM me because I want to talk to you. If you don't PM me, I'll come and find you as I know who you are.

[SupermanFTM]

So it's a member of codex...pretending to be a member of codex? -ish confused-

Well, thanks for the warning Noit!

[Waser Lave]

So it's a member of codex...pretending to be a member of codex? -ish confused-

Well, thanks for the warning Noit!

The first one...

Let's hope people actually take notice of this warning and nobody else gets caught out.

[Magma]

ummm.... i believe they are inpersenating eyore or w/e and sending the file.. im not sure if thats it but i accepted it earlier and got sent a file called...JennBuyer... could anyone help me remove this?

[Mumei]

Altho this topic is in reaction to a specific set of circumstances - i would like to say this:

All programs downloaded from the internet, be they from here at Codex or from some random person of MSN/AIM/e-mail have the potential to contain potentially harmful code

If someone claims to be a member of Codex and you are not 100% sure it's them ask them to prove it (a PM via codex, or whatever you feel nessesary) if it's really them they should have no problems with this.

If someone sends you a program or attachment and you're not 100% sure it's safe, don't run it - it's as simple as that.

There are a number of people here who can check over any neopets based programs to see if they may contain keyloggers/password posters etc... we do our best to make sure that the programs posted on codex (that have gone thru the validation process) are safe, this is never 100%, and if you have any concerns about ANY programs on codex, raise it, we'll investigate the issue further.

Please Be AWARE that on the internet you can pretend to be ANYONE.

[ShadowLink64]

ummm.... i believe they are inpersenating eyore or w/e and sending the file.. im not sure if thats it but i accepted it earlier and got sent a file called...JennBuyer... could anyone help me remove this?

JennBuyer is probably a legitimate ABer.. just the guy who programmed it decided to make a more evil version of it.

I'm still waiting for that PM impostor.

[Magma]

Nevermind.. that was a false alarm on my part.. i scanned the program and found no viruses (i didnt think i had McAfee, but i guess i do lol) ...false alarm.

DON'T OPEN IT. MY OLD FRIEND WHO BLOCKED ME CALLED BAMBOY FROM NeoFreaks.COM TOLD ME HE HAS PUT A PASS STEALER.. I think thats what it is called. JennyAutobuyer.. But he might of renamed it.. Don't trust it.. its going to take Your neopets password.

ya.. i never opened it.. an error occured so im lucky

[Mumei]

ummm.... i believe they are inpersenating eyore or w/e and sending the file.. im not sure if thats it but i accepted it earlier and got sent a file called...JennBuyer... could anyone help me remove this?

Look at the properties - if the internal name is called "fakebuyer" then delete it, and change your neopets password (if you've actually run the program)

Programs like this rarely get raised as viruses by AV programs

[Waser Lave]

Even if you virus scan it, dont open it if you suspect it is bogus. A virus scan wont reveal a password stealer. If in doubt, just delete the file. It isnt worth losing your neopets account and possibly more over it.

[Ives]

JennBuyer is probably a legitimate ABer.. just the guy who programmed it decided to make a more evil version of it.

I'm still waiting for that PM impostor.

The legit one doesn't even work anyways. rofl.

DON'T OPEN IT. MY OLD FRIEND WHO BLOCKED ME CALLED BAMBOY FROM NeoFreaks.COM TOLD ME HE HAS PUT A PASS STEALER.. I think thats what it is called. JennyAutobuyer.. But he might of renamed it.. Don't trust it.. its going to take Your neopets password.

He's at SlopDog. And I'm not too happy about what I'm hearing.

[Freddy]

I haven't come into contact with anything like this, yet.

[Hawk]

http://virusscan.jotti.org/
If that doesnt turn up anything, check it with a packet sniffer

Also, I suggest having people prove that they are who they claim to be by messaging me on the boards. Just a minor safety tip.

[Silk]

Thank you for the warning, Noitidart! Never have come into contact with this person, or been sent Neopets programs over messengers so i'm good.
Can't wait to find out who this impersonator is It's just like a Scooby Doo mystery

[Balistix]

psst its zulfi *cough* just kidding xP.

Any recomendation on packet sniffers?

[Dan]

Nevermind.. that was a false alarm on my part.. i scanned the program and found no viruses (i didnt think i had McAfee, but i guess i do lol) ...false alarm.




ya.. i never opened it.. an error occured so im lucky

Lol... the standard process for SCKeylog is to show an error when first executed....pwned

[Dazz]

I don't use programs anyway so they can try but they wont get one over on me

[Mr. Hobo]

Even if you virus scan it, dont open it if you suspect it is bogus. A virus scan wont reveal a password stealer. If in doubt, just delete the file. It isnt worth losing your neopets account and possibly more over it.

Or you can do what I do and log into a cracked account so when the other person logs onto the cracked account they get chain frozen .

[Raillery]

Well, I accepted the file even though I was suspicious of it. THe file size is like a perfect 80.00kb I believe. It was a very small file, I had a feeling it wasn't legit, but honestly, I didn't care. I lost 2 accounts, one worth about 4mil with a size 250 shop pet with 85 boosts, and another worth only 100k that I did as part of an experiment.

The person was offering an AB'er for free, I had restored my computer about 3 months ago and lost 3 of the AB'ers I had been using and I have never been able to get a main shop AB'er back. So i figured what the hell, i'll accept it, I dont really play much anyway.

After putting in both accounts and having them both not work, I was even more suspicious. My fears were confirmed once this person stopped responding to me

I'm glad I'm not so much of an avid player as I once was, or I would be very upset as this is my second time getting an account hacked (Last time was worse, I lost about 11mil :-x)

Just goes to show you, don't get greedy like I did. All I wanted was a main shop ab'er again, I hoped that this was legit and that once again I could be rich and not make money from a failing mall like I had been.

I was thinking about asking the person to prove who they were. . . but, I decided against it because I was in a good mood.

So is this just a PWS for neo, or will everything I have start to disappear (aim accounts, other games, steam, etc)

[Waser Lave]

So is this just a PWS for neo, or will everything I have start to disappear (aim accounts, other games, steam, etc)

Probably just your neo account (the person who made it isnt the best programmer in the world )

[Mumei]

So is this just a PWS for neo, or will everything I have start to disappear (aim accounts, other games, steam, etc)

This specific example is just a password sender for Neopets and as far as i could tell doesn't log anything else

[Decade]

yeah, i think i made the mistake of opening a malicious program...guys, my system32 folder is like super hidden!!!!!!! i cannt find it when browsing through /WINDOWS... ive set it so i can see hidden folders and yet still nothing...when i do a search for files and folders it wont find it!...but if i got on IE and browsed to C:\\windows\system32 it goes to it.......so its there but like freaking super hidden and im pretty sure its due to a evil neopet program i was sent.....any suggestions to help un infect my computer? i feel like a dumbarse!!! my account hasnt been stolen yet though so i think im safe and its been about a week