=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
From: Pentarh Udi <pentarh[]xpowerlinks.com>
To: cjackson[]networksolutions.com <cjackson[]networksolutions.com>
CC: webmaster[]networksolutions.com, abuse[]xo.net
Date: Monday, July 5, 2004, 5:11:38 PM
Subject: abuse for 180searchassistant.com
Files: untitled.JPG; log0.txt; log1.txt; log2.txt; log3.txt; fiz0.
--====----====----====----====----====----====----====----
Hello cjackson,
This website is directly related to spyware and trojan installs.
I *did not* give any permission to set up any search software. You
can see its icon within "Software Uninstall list" in attached file
"untitled.jpg"
What it have done?
- created folder "C:\Program Files\180Solutions"
- Created files:
c:\windows\kzgzwhqp.exe
c:\windows\mjit.exe
- Set them up in a system startup scripts
- File "c:\windows\mjit.exe" seems to be a trojan horse because:
- It listens on local port "3004" some data (Information from
"Agnitum Outpost" firewall)
- It writes to "C:\Program Files\180Solutions" folder lots of
logs!!!! Visited URLs, Pressed keys and other.
- It setted the default search page to "http://69.50.191.52/1076/sp.php"
- It setted the default home page to "http://69.50.191.52/1076/"
**********IT IS ABSOLUTELY PRIVACY VIOLATION!!!!************
I will send some its logs in attached "*.txt" and "fiz0" files.
When I tried to uninstall it, it opened URL:
http://www.180searchassistant.com/uninstall/uninstall1.aspx?ClientI…1&id=0
I have all their EXE files backup. I can send all of them on your
demand.
If there will be no appropriated feedback,
WE WILL HAVE A COURT MEETING.
--
Best regards,
Pentarh Udi
ICQ: 319797319 mailto:pentarh[]a-teleport.com
http://www.xpowerlinks.com mailto:support[]xpowerlinks.com
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-