Worrying message

10-19-2003

Hi all. Just like many folk here i visit the odd porn site. On one of them i
was re-directed to the following site http://64.237.57.214/alert.php where
it supposedly loaded a "FBI remote forensic scanner FRFS v4.1" onto my pc
then scanned my machine. It detected info on my pc including IP address, my
city, browser etc. It then went on to allegedly list the details of the
sites i visit - i don't visit the sort of sites this page mentioned. It then
went on to say that i need to install "Evidence Eliminator" and that a
report has been sent to ; . I'm
sure this is just a marketing ploy to buy their software but am more worried
that a false report HAS been sent to these organisations. Has anyone had a
similar problem - or should i just forget about it.

10-19-2003

You have been taken by Evidence Eliminator scam.
Ignore it. Here is the beginning of the code:

Fetching http://64.237.57.214/alert.php ...
GET /alert.php HTTP/1.1
Host: 64.237.57.214
Connection: close
HTTP/1.1 200 OK
Transfer-Encoding: chunked
Date: Sun, 19 Oct 2003 17:48:16 GMT
Content-Type: text/html
Connection: close
Server: Apache
Via: 1.1 webcacheB05 (NetCache NetApp/5.2.1R3)
154e

<html>




<script language="javascript">
var n = Math.round(Math.random()*100+700);
if (confirm(" !!! ALERT !!!\nYOU HAVE BEEN DETECTED
VISITING PORN SITES!\n\nOur porn detection script has found at least
"+n+"\nevidences of visiting porn sites on you computer.\nBut in fact there
are much more tracks of porn.\n\nPress [OK] to eliminate all those evidences
and\nsave your job, marriage and keep out of trouble.\n\nPress [Cancel] to
allow your boss, wife and kids\nto find out what porn sites you've visited
and what\nporn content you've recently seen. It's very easy.") == true)
{window.location.href("http://www.evidence-eliminator.com/d2w/e.d2w?a=A666236&tr=t&rq=549377&click=conf");}
</script>

<script language="JavaScript">
if (window != top) top.location.href = location.href;
self.moveTo(6000,6000);
self.blur();

function load()
{
self.moveTo(-4,-4);
self.resizeTo(screen.availWidth + 8,screen.availHeight +

;
window.focus();

window.setInterval('window.focus()',30000);

setTimeout("window.open('alert_console.html','','t oolbar=no,location=no,status=no,menubar=no,scrollb ars=no,resizable=no,width=500,height=500,top=6000, left=6000')",6000);

setTimeout('document.getElementById("ls").innerHTM L = "<table width=100%
height=100%><tr><td align=center valign=middle>Scanner loaded successfully!</td></tr></table>"',5500);
setTimeout('document.getElementById("ls").innerHTM L = ""',6500);

var t=new Array();
var wd=new Array(
"xxx", "hardcore", "porn", "sex", "spam", "cum", "amateur", "oral",
"underage rape", "blowjob", "violence", "incest", "incest", "teen", "****",
"pussy", "black couple", "spam", "babes", "tits", "naked", "uncensored",
"porn", "****", "adult", "horny", "adult", "anal", "xxx", "upskirt",
"whore", "tits", "sluts", "lesbian", "gay", "boy", "rape", "interracial",
"fetish", "pervert", "pervert", "pervert", "taboo", "school", "sluts",
"cock", "spy cams",
"forbidden teen porn", "nude
schoolgirls", "forced sex", "violent rape", "brutal ****", "dady rapes little doughter", "mom sucks
young cock", "illegal porn", "underage", "incest", "young girls", "lolita", "lolita", "lolita"
);
for (i=1; i<42; i++) {a=Math.round(Math.random()*wd.length); t[i]=wd[a]+",
";}

var ar1 = new Array(
"Suspect's IP address: ", "", "195.92.168.167 ", "",
"Suspect's location: ", "", "City: ", "",
document.getElementById("city").innerText, " ", "Country: ", "",
"United Kingdom"+" ", "",
"Suspect's ISP: ", "", "CO ", "",
"Suspect's application: ", "", navigator.appName+" ", "",
"Suspect's user agent: ", "", navigator.userAgent+" ", "",
"Suspect's language: ", "", navigator.systemLanguage+" ", "",
"Suspect's processor family: ", "", navigator.cpuClass+" ", "",
"Scanning "+navigator.appName+" cache", "", ".", ".", ".", ".", ".", ".",
".", ".", ".   ", "", "done ", "",
"Scanning "+navigator.appName+" history", "", ".", ".", ".",
".      ", "", "done ", "",
"Scanning type-in history", "", ".", ".", ".", ".",
".       ", "", "done ", "",
"Scanning deleted files", "", ".", ".", ".", ".", ".", ".", ".", ".", ".",
".", ".", ".  ", "", "done ", " ",
"Summarizing evidences", "", ".", ".", ".", ".",
".           ", "",
"done ", "",
"Listing evidences: ", "", t[1], t[2], t[3], t[4], t[5], t[6], t[7], t[8],
t[9], t[10], t[11], t[12], t[13], t[14], t[15], t[16], t[17], t[18], t[19],
t[20], t[21], t[22], t[23], t[24], t[25], t[26], t[27], t[28], t[29], t[30],
t[31], t[32], t[33], t[34], t[35], t[36], t[37], t[38], t[39], t[40], t[41],
"sluts ", ".", ".", ". ", n+" evidences in total. ", "", "",
" ",
"Searching for privacy protection software", ".", ".",
".   ","Evidence Eliminator™ not found. ", "", "",
"", "", "", "", "", "", "", " ",
"Conclusion: ", "Enough evidences to prove suspect is guilty. Arrest
recommended. ", "", "", "", "", "", "", "", "", "", "",
"Report sent to: ", "; ", ""
);
for (i=0; i<ar1.length; i++) {setTimeout('window.focus();
document.getElementById("ls").innerHTML+="'+ar1[i]+'"',(i+1)*200+6500);}
}
</script>

<head>
<title>WARNING: Porn found on your hard drive</title>
</head>

On Sun, 19 Oct 2003 18:45:16 +0100, in
<bmuik0$r6r4s$>
Dodgy Dave scrawled:

>Hi all. Just like many folk here i visit the odd porn site. On one of them i
>was re-directed to the following site http://64.237.57.214/alert.php where
>it supposedly loaded a "FBI remote forensic scanner FRFS v4.1" onto my pc
>then scanned my machine. It detected info on my pc including IP address, my
>city, browser etc. It then went on to allegedly list the details of the
>sites i visit - i don't visit the sort of sites this page mentioned. It then
>went on to say that i need to install "Evidence Eliminator" and that a
>report has been sent to ; . I'm
>sure this is just a marketing ploy to buy their software but am more worried
>that a false report HAS been sent to these organisations. Has anyone had a
>similar problem - or should i just forget about it.
>

--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html

10-19-2003

I suppose it would allegedly find that sort of stuff on everyone's pc? Just
a bit worrying saying it's emailed the FBI. Oddly enough i have got Evidence
Eliminator on a disk somewhere here. I've seen the adverts hundreds of times
on the net but nothing as blunt as this. Thanx as ever for a quick reply.
"°Mike°" <> wrote in message
news:...
> You have been taken by Evidence Eliminator scam.
> Ignore it. Here is the beginning of the code:
>
> Fetching http://64.237.57.214/alert.php ...
> GET /alert.php HTTP/1.1
> Host: 64.237.57.214
> Connection: close
> HTTP/1.1 200 OK
> Transfer-Encoding: chunked
> Date: Sun, 19 Oct 2003 17:48:16 GMT
> Content-Type: text/html
> Connection: close
> Server: Apache
> Via: 1.1 webcacheB05 (NetCache NetApp/5.2.1R3)
> 154e
>
> <html>
>
> 
> 
>
> <script language="javascript">
> var n = Math.round(Math.random()*100+700);
> if (confirm(" !!! ALERT !!!\nYOU HAVE BEEN
DETECTED
> VISITING PORN SITES!\n\nOur porn detection script has found at least
> "+n+"\nevidences of visiting porn sites on you computer.\nBut in fact
there
> are much more tracks of porn.\n\nPress [OK] to eliminate all those
evidences
> and\nsave your job, marriage and keep out of trouble.\n\nPress [Cancel] to
> allow your boss, wife and kids\nto find out what porn sites you've visited
> and what\nporn content you've recently seen. It's very easy.") == true)
>
{window.location.href("http://www.evidence-eliminator.com/d2w/e.d2w?a=A66623
6&tr=t&rq=549377&click=conf");}
> </script>
>
> <script language="JavaScript">
> if (window != top) top.location.href = location.href;
> self.moveTo(6000,6000);
> self.blur();
>
> function load()
> {
> self.moveTo(-4,-4);
> self.resizeTo(screen.availWidth + 8,screen.availHeight +

;
> window.focus();
>
> window.setInterval('window.focus()',30000);
>
>
setTimeout("window.open('alert_console.html','','t oolbar=no,location=no,stat
us=no,menubar=no,scrollbars=no,resizable=no,width= 500,height=500,top=6000,le
ft=6000')",6000);
>
> setTimeout('document.getElementById("ls").innerHTM L = "<table width=100%
> height=100%><tr><td align=center valign=middle> size=2>Scanner loaded successfully!</td></tr></table>"',5500);
> setTimeout('document.getElementById("ls").innerHTM L = ""',6500);
>
> var t=new Array();
> var wd=new Array(
> "xxx", "hardcore", "porn", "sex", "spam", "cum", "amateur", "oral",
> "underage rape", "blowjob", "violence", "incest", "incest", "teen",
"****",
> "pussy", "black couple", "spam", "babes", "tits", "naked", "uncensored",
> "porn", "****", "adult", "horny", "adult", "anal", "xxx", "upskirt",
> "whore", "tits", "sluts", "lesbian", "gay", "boy", "rape", "interracial",
> "fetish", "pervert", "pervert", "pervert", "taboo", "school", "sluts",
> "cock", "spy cams",
> "forbidden teen porn", "nude
> schoolgirls", "forced sex", " color=red>violent rape", "brutal ****",
" color=red>dady rapes little doughter", "mom sucks
> young cock", "illegal porn", " color=red>underage", "incest", " color=red>young girls", "lolita", " color=red>lolita", "lolita"
> );
> for (i=1; i<42; i++) {a=Math.round(Math.random()*wd.length); t[i]=wd[a]+",
> ";}
>
> var ar1 = new Array(
> "Suspect's IP address: ", "", "195.92.168.167 ", "",
> "Suspect's location: ", "", "City: ", "",
> document.getElementById("city").innerText, " ", "Country: ", "",
> "United Kingdom"+" ", "",
> "Suspect's ISP: ", "", "CO ", "",
> "Suspect's application: ", "", navigator.appName+" ", "",
> "Suspect's user agent: ", "", navigator.userAgent+" ", "",
> "Suspect's language: ", "", navigator.systemLanguage+" ", "",
> "Suspect's processor family: ", "", navigator.cpuClass+" ", "",
> "Scanning "+navigator.appName+" cache", "", ".", ".", ".", ".", ".", ".",
> ".", ".", ".   ", "", "done ", "",
> "Scanning "+navigator.appName+" history", "", ".", ".", ".",
> ".      ", "", "done ", "",
> "Scanning type-in history", "", ".", ".", ".", ".",
> ".       ", "", "done ", "",
> "Scanning deleted files", "", ".", ".", ".", ".", ".", ".", ".", ".", ".",
> ".", ".", ".  ", "", "done ", " ",
> "Summarizing evidences", "", ".", ".", ".", ".",
> ".           ", "",
> "done ", "",
> "Listing evidences: ", "", t[1], t[2], t[3], t[4], t[5], t[6], t[7], t[8],
> t[9], t[10], t[11], t[12], t[13], t[14], t[15], t[16], t[17], t[18],
t[19],
> t[20], t[21], t[22], t[23], t[24], t[25], t[26], t[27], t[28], t[29],
t[30],
> t[31], t[32], t[33], t[34], t[35], t[36], t[37], t[38], t[39], t[40],
t[41],
> "sluts ", ".", ".", ". ", n+" evidences in total. ", "", "",
> " ",
> "Searching for privacy protection software", ".", ".",
> ".   ","Evidence EliminatorT not found. ", "",
"",
> "", "", "", "", "", "", "", " ",
> "Conclusion: ", "Enough evidences to prove suspect is guilty. Arrest
> recommended. ", "", "", "", "", "", "", "", "", "", "",
> "Report sent to: ", "; ", ""
> );
> for (i=0; i<ar1.length; i++) {setTimeout('window.focus();
> document.getElementById("ls").innerHTML+="'+ar1[i]+'"',(i+1)*200+6500);}
> }
> </script>
>
> <head>
> <title>WARNING: Porn found on your hard drive</title>
> </head>
>
>
>
> On Sun, 19 Oct 2003 18:45:16 +0100, in
> <bmuik0$r6r4s$>
> Dodgy Dave scrawled:
>
> >Hi all. Just like many folk here i visit the odd porn site. On one of
them i
> >was re-directed to the following site http://64.237.57.214/alert.php
where
> >it supposedly loaded a "FBI remote forensic scanner FRFS v4.1" onto my pc
> >then scanned my machine. It detected info on my pc including IP address,
my
> >city, browser etc. It then went on to allegedly list the details of the
> >sites i visit - i don't visit the sort of sites this page mentioned. It
then
> >went on to say that i need to install "Evidence Eliminator" and that a
> >report has been sent to ; .
I'm
> >sure this is just a marketing ploy to buy their software but am more
worried
> >that a false report HAS been sent to these organisations. Has anyone had
a
> >similar problem - or should i just forget about it.
> >
>
> --
> Basic computer maintenance
> http://uk.geocities.com/personel44/maintenance.html

10-19-2003

Evidence Eliminator is the biggest load of crap, and their
spamming tactics are despicable, and well known. This
is just another tactic to add to their repertoire - bastards!

Do NOT worry about it, and throw that E.E. disk away;
it does NOT do what they promise it does.

On Sun, 19 Oct 2003 18:57:01 +0100, in
<bmuj9u$r3dpp$>
Dodgy Dave scrawled:

>I suppose it would allegedly find that sort of stuff on everyone's pc? Just
>a bit worrying saying it's emailed the FBI. Oddly enough i have got Evidence
>Eliminator on a disk somewhere here. I've seen the adverts hundreds of times
>on the net but nothing as blunt as this. Thanx as ever for a quick reply.

<snip>

--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html

10-19-2003

On Sun, 19 Oct 2003 18:45:16 +0100, Dodgy Dave wrote:

>Hi all. Just like many folk here i visit the odd porn site. On one of them i
>was re-directed to the following site http://64.237.57.214/alert.php where
>it supposedly loaded a "FBI remote forensic scanner FRFS v4.1" onto my pc
>then scanned my machine. It detected info on my pc including IP address, my
>city, browser etc. It then went on to allegedly list the details of the
>sites i visit - i don't visit the sort of sites this page mentioned. It then
>went on to say that i need to install "Evidence Eliminator" and that a
>report has been sent to ; . I'm
>sure this is just a marketing ploy to buy their software but am more worried
>that a false report HAS been sent to these organisations. Has anyone had a
>similar problem - or should i just forget about it.

http://ee-sucks.tripod.com/ee-lies.html
http://evidence-eliminator-sucks.com/

--
"I love the way Microsoft follows standards. In much the same manner that
fish follow migrating caribou." --Paul Tomblin

10-19-2003

Dodgy Dave Spilled my beer when they jumped on the table and
proclaimed in <bmuik0$r6r4s$>:

> Hi all. Just like many folk here i visit the odd porn site. On one
> of them i
> was re-directed to the following site http://64.237.57.214/alert.php
> where it supposedly loaded a "FBI remote forensic scanner FRFS
> v4.1" onto my pc then scanned my machine. It detected info on my pc
> including IP address, my city, browser etc. It then went on to
> allegedly list the details of the sites i visit - i don't visit the
> sort of sites this page mentioned. It then went on to say that i
> need to install "Evidence Eliminator" and that a
> report has been sent to ;
> . I'm sure this is just a marketing ploy to
> buy their software but am more worried that a false report HAS been
> sent to these organisations. Has anyone had a similar problem - or
> should i just forget about it.

EE makes snake-oil salesmen look good. They are a lying, deceitful
bunch. They prey on people's paranoia, ignorance, and their software
does not do much of what they claim.

And those are their good points. <G>

I wouldn't worry about it at all.

NOI

10-19-2003

X-No-Archive: Yes
Dodgy Dave typed:
> Hi all. Just like many folk here i visit the odd porn site.
<snip>

As others above have said, EE, is a load of rubbish, promoted by spam and
pop-up ads
(3rd rule?) Never buy anything from spammers. If they are going to lie and
cheat to get their message to you, why trust what they say in the ad?
Why be so paranoid? *I* may be able to hack into your download habits, and
#1son maybe could, but wife can't and FBI (or uk equivalent) can't be arsed,
unless child pr0n.
Porn star quote I picked up in the last 2 days:
"Am I exploited? Hell, no, I'm just exploiting the men"

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
The Worrying State of IT	TheITGirl	MCSA	11	01-22-2008 09:42 PM
Getting tired of not worrying about anything?	=?ISO-8859-1?Q?R=F4g=EAr?=	Computer Support	2	05-18-2007 04:31 AM
Worrying Prevalence of K++ Compilers	Frederick Gotham	C++	9	11-09-2006 02:42 PM
ccda is worrying me	serevcener	Software	1	06-14-2006 04:09 PM
Implementations of Multi-Methods and Tail Call Elimination (Or how I stopped worrying and learned to love decorators)	Stephen Thorne	Python	1	08-29-2004 11:52 PM