forum.vdsworld.com Forum Index forum.vdsworld.com
Visit VDSWORLD.com
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


DLL TROJAN HORSE ALERT
Goto page Previous  1, 2
 
Post new topic   This topic is locked: you cannot edit posts or make replies.    forum.vdsworld.com Forum Index -> Miscellaneous
View previous topic :: View next topic  
Author Message
Garrett
Moderator Team


Joined: 04 Oct 2001
Posts: 2149
Location: A House

PostPosted: Sat Oct 04, 2003 3:58 am    Post subject: Reply with quote

PGWARE wrote:
Garrett the difference between vdslists and the other
dll's is we all know Tommy and Tommy wouldn't do anything like
this. On the other hand while you are listed as the author of the
vdszip, it was another person who actually wrote and compiled this
dll for you.


And there's a story behind that one too, but we won't go into that. Both
dlls contain the same data in reference to the wininet and urlmon, and it
is with this information that the vdsvdd.dll was pulled and labeled as
having a trojan in it. Yet, the vdslists.dll contains the same exact data.
Aswell, both files seem to have extra binary data at the end of them.

And so far, no one has reported any internet activity from this dll, nor
any AV warning reports. It is only pulled because the author is
suspected of being someone who is known for illegal activities. Of
course, it can't be denied either that this is the same person.

So is the file being pulled because the author is suspected of being the
previous person who was conducting illegal activities, or because the
file is supsected of containing malicious code or trojan?

PGWARE wrote:
We've asked you several times who this person is
that wrote the dll for you (and who we suspect is Hallowin - a previous
pirate and problematic person here) and you never did give us this
persons name.


We discussed this indepth before yes, and as I stated at that time that
in order to keep anyone from causing trouble and such, that I had
promised not to mention the authors name at that time. And this
was due to the suspicions that this person may or may not have
been Hallowin.

Of course, I also noted that for the safety of the users of VDS World, I
would continuously monitor the VDSZIP.DLL to insure that it was
safe. And I did such. To this date, there have been absolutely no
reports of an ill will from this dll.

The author of this dll was going through me to earn his funds to register
VDS. He was under an agreement that he upheld the whole time and
he is now a registered user of VDS 5.

As you yourself are aware of this since we first talked about it way back
when. And even back then you were only concerned that I insure that
the dll is safe, and it has been since day one.

PGWARE wrote:
No one is questioning your character here and no
one is suggesting that you are intentionally putting trojans in your files
but the person you are dealing with and is building dll's for you (since
you won't give us the name, we can only suspect who it is) is someone
who cannot be trusted. There's no telling what is put in that code
before he compiles and gives it to you.


Please note, DLL, not DLLs that we are talking about. The only DLL
that I am related to with this author is the VDSZIP.DLL.

PGWARE wrote:
After being told who this person is you continue to
work with him in the hopes of 'helping him change his ways'. I don't
think this person will ever change their ways until they grow up, in
the process you 'MAY' let me stress 'MAY' be putting out files that are
infesting other peoples computers. I really don't think its worth ruining
your reputation and 'MAY' be runing peoples property to try to help
someone who 'MAY' be deceiving you.


And if this is not the person that he is being accused of, would you not
feel seriously bad? I, nor you are able to 100% verify if this is the
same person. And you know me, I will give someone the chance to
prove themselves. And as far as I'm concerned, I will not label this
person as Hallowin unless something comes up that does persude me
otherwise.

Since Rinauld has been here, has he done anything that brings doubt
to their mind that his intentions are anything other than good?

PGWARE wrote:
You can easily solve this by having any dll developer
here take a look over the code to see if anything malicous is in it and
then allow them to compile the dll for you. Of course if you need some
agreement or contract that the developer cant use your code for any
other reason this I think would be more then appropriate for any
developer here willing to help you.


Think about it, if he is the person, you think he's going to send me the
code that contains anything other than the source for the dll itself? He
would have removed any other code prior to sending me the code. So
everytime the dll was sent to me, I ran it through several AV Programs,
checked it out with a hex editor, ran it on a test box with a firewall
running, and monitored all processes while running the dll.

If there is any code in either of these dlls that is anything other than
what the dll is intended for, then he's seriously pulled the wool over
my eyes.

But since I am not owner of this web site, nor responsible for it, I will
not argue anyone's ability to say what is acceptable here at VDS World
and what is not. That is of course up to you and a few others.

If it were me, I probably would have pulled the file, checked it out, and
if nothing was wrong with it, I would have re-enabled it. I also would
not have banned the author unless it was confirmed that he is the
person who conducted the illegal activities, or otherwise did something
that warranted being banned.

The months and months the author and I communicated with each
other, worked with each other etc, he was more than honorable through
the whole time. So in my mind, if he was the person, he may no longer
be the same person that he was before. This of course does not excuse
his previous activities, but I am just not able to confirm if he is the
person or not. And since I cannot do such, I will treat him as if he was
not that person until otherwise proven. I am of course always mindful
of the suspicion that he might be.

Well, enough said from me on this.... I leave the fate of the author and
his dlls in the hands of the maintainers of this site. Choose wisely and
be sure to play nicely about it either way.

-Garrett

_________________
'What you do not want done to yourself, do not do to others.' - Confucius (550 b.c. to 479 b.c.)
Back to top
View user's profile Send private message
Doctor
VDS Pirate
VDS Pirate


Joined: 22 Sep 2003
Posts: 5

PostPosted: Sat Oct 04, 2003 7:14 am    Post subject: Reply with quote

CodeScript wrote:
Hi Doctor
I am not trying to prove or disprove anything but just in case you
don't know tELock has both public and private builds, private being
used by cracking groups.



Humm CodeScript,
if tElock is used by cracker, and must be deleted from hard disk, now we certainly have to deletre, winzip, upx, winrar, petite, pecompact, and certainly windows. Very Happy

if crackers uses tElock, it's not a reason for not using it.

I found in tElock a good protection against crackers, and a good compression near to UPX.

petite is also a good tool, but have also problem with some antivirus program.

I scaned tElock and the vdsvdd.dll with Norton 2003, and find nothing suspicious.
Back to top
View user's profile Send private message
FreezingFire
Admin Team


Joined: 23 Jun 2002
Posts: 3508

PostPosted: Sat Oct 04, 2003 2:40 pm    Post subject: Reply with quote

Garrett you do not understand. We are not trying yell at you, as
that would have no purpose. What we are doing is trying to protect
the users of VDSWORLD. We could just let anyone post their files
that may/may not contain bad code and when one comes along
with bad code the damage would already be done. I don't think
that in a business-like situation here we have time to let people
who previously broke the rules "prove themselves". You can do
that on your own time and let them come to your own web site.
But once someone breaks the rule and they are banned, they are
banned for life. We didn't just start banning this guy. He has been
coming back and we extend the ban. So this is not anything new.

Also, FYI, you and "Doctor" don't seem to realize that scanning a
file with Norton AntiVirus or any AV scanner for that matter will
detect malicious code in a DLL, unless it has virus definitions and
signatures for the file. A while back when this all started I know
people were infected by one of these malicious DLLs. It made
a mess of things. I won't let it happen to me or anyone else to be
fair.

All new authors are welcome here and this won't happen to them
unless they are putting malicious code in their files.

You can have this author write DLLs for you but they will not be
posted at VDSWORLD, as he was banned a long time ago and the
ban is still in effect. And, a word for the author, we know your
new account names here.

Garrett wrote:
Since Rinauld has been here, has he done anything that brings doubt
to their mind that his intentions are anything other than good?


You do not know everything that has been going on behind the
scenes. Rinauld should not be here anyway because he was banned
a long time ago and like I've said before the ban is still in effect.

THIS DLL HAS STILL NOT BEEN VERIFIED AS SAFE

_________________
FreezingFire
VDSWORLD.com
Site Admin Team
Back to top
View user's profile Send private message Visit poster's website
PGWARE
Web Host


Joined: 29 Dec 2001
Posts: 1566

PostPosted: Sat Oct 04, 2003 3:10 pm    Post subject: Reply with quote

Several points I must comment on:

Quote:

So is the file being pulled because the author is suspected of being the
previous person who was conducting illegal activities, or because the
file is supsected of containing malicious code or trojan?


This doesn't have to be an either/or answer. The fact that you insist on not releasing the name of the author makes it look very much that the author of the dll has something to hide. We suspect it is hallowin and yes his previous actions raise many flags, when someone has done things like this in the past that person more then likely will do it again. The file was temporarily pulled because we can't have possible trojans being distributed here, the fact that we suspect hallowin is the author makes this file very suspect.


Quote:

We discussed this indepth before yes, and as I stated at that time that
in order to keep anyone from causing trouble and such, that I had
promised not to mention the authors name at that time. And this
was due to the suspicions that this person may or may not have
been Hallowin.


Who exactly is going to cause 'trouble'? If the person is hallowin then yes we will take action and remove his files and any accounts here. His past actions speak so much about him, no matter how 'good' he acts now will ever erase his previous actions. The fact is he used stolen credit cards to purchase peoples products here and then post the serial numbers on the forum, he then created dll's with trojans in them and distributed them to steal the vds.key, alloy32.key and several serials. He further created a warez website where cracked dlls, serial numbers and vds could be downloaded.
If you are stating that he will cause trouble, that can be dealt with ip block bans in an instant. We won't tolerate any childish behaviour here from anyone trying to launch attacks.


Quote:

The author of this dll was going through me to earn his funds to register
VDS. He was under an agreement that he upheld the whole time and
he is now a registered user of VDS 5.


If he can't afford $99 to purchase VDS, then what makes you believe the copy of Delphi he has is legal. Delphi costs around $999, it's doubtful he paid for that, thus you are distributing illegal binaries. Just realize that anyone distributing a binary that is not legally licensed can face legal issues with Borland, this doesn't include just you but any author linking to the dll with their program. Are you willing to place yourself in legal jeopardy as well as anyone else using your dll just to 'help someone'?


Quote:

And if this is not the person that he is being accused of, would you not
feel seriously bad? I, nor you are able to 100% verify if this is the
same person. And you know me, I will give someone the chance to
prove themselves. And as far as I'm concerned, I will not label this
person as Hallowin unless something comes up that does persude me
otherwise.


And if this person is Hallowin would you not feel seriously bad? If it is Hallowin you are helping a known pirate and criminal, as well as possibly putting people's property at risk. I'd rather temporarily pull a file, get it investigated and determine what may be wrong with it; rather then wait for someones computer to be damaged and send an email saying oops sorry we'll get it sorted and hope your reformat is well.

We can't verify 100% who he is simply because you choose not to give out his identity. This itself looks suspecious and makes it look very much like Hallowin. I'll give someone the chance to prove themselves, but once they come to this forum and commit crimes and make themselves a nuisance they will never be allowed back, ever. As far as I'm concerned I will label this person Hallowin until we get verification of who this person is.


Quote:

Since Rinauld has been here, has he done anything that brings doubt
to their mind that his intentions are anything other than good?


This here speaks to the level of deception Rinauld has put out. You probably are unaware of how childish this person is. I think FreezingFire can explain all too well how much of an idiot Rinauld is. Coming to vdsworld and INTENTIONALLY rating many files down, not once but hundreds of times and sending threatening emails makes this person have intentions other then good. Anyone sitting at their computer spending more then an hour to intentionally rate files down over and over day after day obviously has too much time on their hands and isn't mature enough to participate here.
Back to top
View user's profile Send private message
Doctor
VDS Pirate
VDS Pirate


Joined: 22 Sep 2003
Posts: 5

PostPosted: Sat Oct 04, 2003 5:20 pm    Post subject: Reply with quote

Hi

I'm really disapointed of what happens here.

Doctor is Rinauld Raymond (registered vds 5 user legaly)
I'm not halowin like you persist to write

Let me please, explain you what really happens:

I put My dll vdsvdd.dll to the authors section.
It has been disactivated many time.
I reactivated it all the time, thinking I was doing something wrong in this author section.

I asked Tommy by mail, he told me that my dll was deleted by FreezinFire.

So I sent a mail to FreezinFire, and Get no answer.
I send around 5 or 6 mail to FreezinFire asking him why he deleted the dll, but always no answer.

When a day I come to the vdsworld forum and discovered that I was BANNED, I was really angry against him.
I received an email informing me that I have a private message, but I coudn't log in to read it???

So I rate to minus,perhaps 20 times (not hundred like pgware said).

my vdsvdd.dll have no malicious code inside, is only packked with a protector tool.

But if you doesn't want to use it as a dll, I can do a .dsu file as well

So If I'm not welcome here, please tell me, I'll go away.
Back to top
View user's profile Send private message
FreezingFire
Admin Team


Joined: 23 Jun 2002
Posts: 3508

PostPosted: Sat Oct 04, 2003 5:32 pm    Post subject: Reply with quote

I don't waste my time replying to immature people like you. Think
what you want, but you are not welcome here. Especially becuase
you took it upon yourself to abuse VDSWORLD's services,
I'm absolutely sure any other legimate member here would agree
that we don't want VDSWORLD to be abused.

Pack your bags and leave because this is the last time I am going
to tolerate you. You've sent threatening e-mails, abused VDSWORLD,
put malicious code in your files in the past, and countless other things
.


You're lying to say that you only rated the files down once because
we looked through the logs and found that not only did you do it
more than 20 times, you did it repeatedly on different days.

You are hallowin. We know you are Rinauld. We know what you
think you are tricking us about.

Just because you're registered doesn't mean that you have a
license to be here.
Back to top
View user's profile Send private message Visit poster's website
Doctor
VDS Pirate
VDS Pirate


Joined: 22 Sep 2003
Posts: 5

PostPosted: Sat Oct 04, 2003 5:43 pm    Post subject: Reply with quote

it's not wasting time answer Only One Mail.

I'm not a lyer.

I didn't abuse anything.

freezingfire or freezingmind

Like Mac I just say BYE
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   This topic is locked: you cannot edit posts or make replies.    forum.vdsworld.com Forum Index -> Miscellaneous All times are GMT
Goto page Previous  1, 2
Page 2 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum

Twitter@vdsworld       RSS

Powered by phpBB © 2001, 2005 phpBB Group