Session Start: Sun Jul 08 21:22:49 2001 [21:22] Session Ident: Markland (~The@newham-01.teleregion.co.uk) [21:22] (Markland): change ur script [21:22] (Markland): stop using pnp [21:23] (FireBitch): u think itz the script? [21:23] (Markland): could be [21:23] (Markland): stop using it and change all ur passwords [21:23] (Markland): espec ially ur dialup ones [21:24] (FireBitch): [20:23] *** Joins: F1reBitch (uNf@user-2ivfucr.dialup.mindspring.com) - Clones: 2 from *uNf@user-2ivfucr.dialup.mindspring.com (FireBitch) CtrlF1 whois; ShiftF8 ping [21:24] (FireBitch): [20:23] 06(F1reBitch06): !ichat [21:24] (FireBitch): [20:23] 06(F1reBitch06): !icas [21:24] (FireBitch): [20:23] 06(F1reBitch06): !ochat [21:24] (FireBitch): [20:23] 06(F1reBitch06): !ocas [21:24] (FireBitch): [20:23] *** Parts: F1reBitch (uNf@user-2ivfucr.dialup.mindspring.com) (F1reBitch) [21:24] (FireBitch): [20:24] 08(@fo0l08): uh [21:24] (FireBitch): [20:24] 08(@fo0l08): right.... [21:24] (FireBitch): that waznt me [21:25] (Markland): similar not the same as u [21:25] (Markland): soemone has an account on ur isp [21:25] (Markland): uNf@user-2ivfucr.dialup.mindspring.com [21:25] (FireBitch): thatz wut mine waz at the time tho [21:25] (Markland): uNf@user-2ivfuas.dialup.mindspring.com [21:25] (FireBitch): til i rebooted [21:26] (Markland): k [21:26] (Markland): its a hijack then [21:26] (Markland): remove ur script and redo all ur passwords [21:26] (Markland): especially ur dialup one [21:26] (FireBitch): i keep checking mai netstats [21:26] (FireBitch): i might have a trojan of sum sort [21:26] (FireBitch): look at thiz....sec..... [21:27] (FireBitch): Active Connections [21:27] (FireBitch): Proto Local Address Foreign Address State [21:27] (FireBitch): TCP firecat:6668 PPPa41-ResaleGaryMetro11-1R7433.dialinx.net:1151 [21:27] (FireBitch): ESTABLISHED [21:27] (FireBitch): TCP firecat:1385 backup.selfdestruct.net:80 CLOSE_WAIT [21:27] (FireBitch): TCP firecat:1387 backup.selfdestruct.net:80 CLOSE_WAIT [21:27] (FireBitch): TCP firecat:1389 backup.selfdestruct.net:80 CLOSE_WAIT [21:27] (FireBitch): TCP firecat:1392 backup.selfdestruct.net:80 CLOSE_WAIT [21:27] (Markland): well check ur machine and then do as I said [21:27] (Markland): simple [21:27] (FireBitch): TCP firecat:1393 irc-3.stealth.net:6668 ESTABLISHED [21:27] (FireBitch): TCP firecat:1395 backup.selfdestruct.net:80 CLOSE_WAIT [21:27] (FireBitch): TCP firecat:1397 pop02.primenet.com:pop3 TIME_WAIT [21:27] (FireBitch): TCP firecat:31966 PPPa41-ResaleGaryMetro11-1R7433.dialinx.net:1150 [21:27] (FireBitch): ESTABLISHED [21:27] (FireBitch): TCP firecat:1274 irc.ins.net.uk:6667 ESTABLISHED [21:27] (FireBitch): TCP firecat:1276 gollum.xs4all.nl:6666 ESTABLISHED [21:27] (Markland): hmmm [21:28] (FireBitch): the second time i rebooted......... [21:28] (FireBitch): C:\WINDOWS>netstat [21:28] (FireBitch): Active Connections [21:28] (FireBitch): Proto Local Address Foreign Address State [21:28] (FireBitch): TCP firecat:1462 irc.ins.net.uk:6667 ESTABLISHED [21:28] (FireBitch): TCP firecat:1496 irc-1.stealth.net:6666 ESTABLISHED [21:28] (FireBitch): TCP firecat:31966 cx961503-a.sking1.ri.home.com:4681 ESTABLISHED [21:28] (FireBitch): TCP firecat:1505 pop03.primenet.com:pop3 TIME_WAIT [21:28] (FireBitch): TCP firecat:1508 pop02.primenet.com:pop3 TIME_WAIT [21:28] (FireBitch): the dialinx iz indis ip [21:28] (FireBitch): dunno whose the home.com iz [21:28] (Markland): TCP firecat:31966 cx961503-a.sking1.ri.home.com:4681 ESTABLISHED [21:28] (Markland): indii [21:29] (Markland): :) [21:29] (FireBitch): they cant both be indi [21:29] (Markland): wanna bet? [21:29] (Markland): I seen her use that b4 [21:29] (Markland): :) [21:29] (FireBitch): hrm [21:29] (FireBitch): so shez hijacking me? [21:29] (Markland): looks like trojan [21:29] (Markland): get some fukkin antivirus shit [21:30] (FireBitch): i have old scripts she gave me that i dun use no more cuz they quit working right [21:31] (Markland): look [21:31] (Markland): redo ur whole machine [21:31] (Markland): ok? [21:31] (Markland): what part of that dont u nunderstand? [21:31] (FireBitch): okay [21:31] (Markland): get some antivirus stuff anf get rid of everything [21:31] (Markland): k? [21:31] (FireBitch): okay [21:31] (Markland): like NOW