HI!

This is Speed Freak...
Like some of you guys know, i was visited by a hacker some time ago
(4 days ago) :)... He logged on under "The Big F"...
Well, he was using my art door and uploaded this :

-START-
@X07efjomqifj
%c:\pcb\main\users
%d:\pcb\main\users
%e:\pcb\main\users
%c:\pcboard\main\users
%d:\pcboard\main\users
%e:\pcboard\main\users
%c:\bbs\main\users
%d:\bbs\main\users
%e:\bbs\main\users
%c:\pcb1521\main\users
%d:\pcb1521\main\users
%e:\pcb1521\main\users
%c:\pcb152\main\users
%d:\pcb152\main\users
%e:\pcb152\main\users
%c:\pcb\pcboard.dat
-END-

And this worked... but, hehe.. my dirs. have another name :))...
Only PCBOARD.DAT could he display (only the first lines, because i was
watching the screen, and when he displayed it, i pressed F10 =)) )
Hmm.. This is a REAL asshole mates, i think the a lot of boards in the scene
are screwed.. Because... a few days ago i leeched a file from POINTBREAK..
 -> TRUEFACT.ZIP
well... The diz explained something like: "READ THE TRUE FACTS OF LORD CYRIX,
VENIOR, DR.VIBE, BLUE ADONIS, alablabla...
And offcourse i leeched it <g>... BUT!... the file itself (INFO.EXE)... IS A
FUCKING TROJAN!!...
Today (few minutes ago) a user, "JACK THA KNIVE" logged on... and he
was acting kinda strange... well.. he was looking in the latest uploads,
reading some messages, but all very quick... <and again i was watching my
screen.. huhu>... And.. when he was looking in the latest uploads, he did
this: FLAG COMPR*.ZIP...
I thaught: "huh... dunno that file... damn.. maybe again that hacker.."
And I pulled out the plug.. <g>
Now.. I did a filefind for "COMPR*.ZIP".. and i found it in my latest uploads!
I tryed to uncompress it, but it was protected with a password...
The file in it: USERS
I thaught: "pfew.. again i got the sucker... whahw.. ", and deleted the file.
Few seconds after i put PCB back online... someone called... I saw him type:
JACK (And i pressed F10 to chat).
I logged it :) (sorry dutch)

[SPEED FREAK]: lukt het nie :) wahwahawhwahwah..
[JACK THA KNIVE]: wat is er..
[SPEED FREAK]: compr.zip .. tss tss...
[JACK THA KNIVE]: HEen..
[SPEED FREAK]: waarom doede da jong?
[JACK THA KNIVE]: waarom wat...
[SPEED FREAK]: alez.. USERS.. da kende nie ofwa? heb u beziggezien jong...
[SPEED FREAK]: komt... why?
[JACK THA KNIVE]: Wat is dat, stond daar niet een deel compressors in ,
[SPEED FREAK]: nee jongen.. en ik denk wel da gij da ook weet.. komt.. ik moet nie weten
[JACK THA KNIVE]: Ik denk het niet...
[SPEED FREAK]: wie ge zijt, en alez.. gewoon waarom?
[JACK THA KNIVE]: Ja, ik moet een koppel compressors hebben en..
[SPEED FREAK]: NEE... ik bedoel, is al den 2e keer da'k u betrap op het proberen te hacek
[SPEED FREAK]: en van men board... gij hebt just dezelkfde connect als the big f toen...
[SPEED FREAK]: moet da nie ontkennen... gewoon zeggen waarom...
And CLICK...

I started thinking.. the file date was from 27/07/95. And i saw what was
in my upload dir. from that date.. And i noticed TRUEFACT.ZIP,
I uncompressed it, and ran INFO.EXE... and checked again for COMPR.ZIP
And it was there again... :)

Well.. This is just a warning message to all you sysops who leeched
TRUEFACT.ZIP. Please stop spreading it...
Check for a file called COMP*.ZIP in one of your dirs.

Hope you guys can stop this lamer for doing more harm to any other boards.

More info: Sacred Grounds : +32-11-273000
           COWnet         : 88:132/100

      Greets!
            MOTHA-Fucka Speed Freak - Triloxy Dick (like in TRUEFACT.ZIP)
