Deb, This could possibly be the work of a virus. If you check out Symantec's web site http://www.symantec.com/search/ and do a search on hacker chat you will find a number of hits for viruses that create an IRC backdoor. These allow a hacker to control the IRC client on the infected computer as well as download and execute files on the infected computer. You may want to look at what type of anti-virus software she is using and check for an infected system. I haven't found any information about a joke program out there acting like this yet, but that doesn't mean it couldn't be that as well.
Have a Great Day! Michael J. Wolf -----Original Message----- From: The PuterBug <[EMAIL PROTECTED]>@SRS Sent: Thursday, July 25, 2002 4:00 PM To: [EMAIL PROTECTED] Subject: [wdvltalk] OT is this a true hacker? HI, My "day job" is at our local Police Department. I was just there and one of our Officers approached me with a computer question. He had taken a complaint from a female who was online, cable modem with a firewall (unknown which one at this time) and only one computer in the house so no wireless network in place. A window appeared in the upper right corner of her screen that said "chat" and apparently was quite a different kind of chat window than she had ever seen before. Message on this window changed to read something to the order of "I'm a hacker and I'm in your computer. Watch me turn your computer off." The screen went black, I forgot to ask if the computer itself truly turned off or if the screen just went to black as in hibernate or screen saver type mode. Then the message said "I can open your cd rom drive." Her cd rom drive proceeded to open. The message changed to other things, and I can't remember them all, one had to do with telling her to watch her printer and the printer printing out a message stating that this hacker coming to get her that night and that he'd be driving a green car. Nothing happened other than scaring the living you know what out of this woman, she is safe and sound at this time. At least nothing happened to her as of yet. Has anyone ever heard of something like this happening? It was suggested by another person that perhaps this was a virus, but it seems awfully involved to be a virus. At least from what I know of virus' which I admit isn't a tremendous lot. I personally thought that perhaps it was some joke program that someone had installed on her computer and some keystroke activated it and that she wasn't aware that this had been installed. I have no idea how many people live in the house that would have access to the computer or if she lives alone. I told the Officer to check the logs in the firewall program as there might be some kind of information there that could be used if in fact this was a true hacking activity. Can anyone shed any light on this? I know, it's far out and off the wall and probably something really stupid and not a hacking incident, but I told the Officer that I would ask around for input as he does have to investigate. Any input appreciated, thanks! Deb ____ * The WDVL Discussion List from WDVL.COM * ____ To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED] To change subscription settings to the wdvltalk digest version: http://wdvl.internet.com/WDVL/Forum/#sub ________________ http://www.wdvl.com _______________________ You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] To unsubscribe send a blank email to %%email.unsub%% begin 600 winmail.dat M>)\^(B$4`0:0"``$```````!``$``0>0!@`(````Y`0```````#H``$(@`<` M&````$E032Y-:6-R;W-O9G0@36%I;"Y.;W1E`#$(`06``P`.````T@<'`!D` M$``S`",`!`!C`0$@@`,`#@```-('!P`9`!``,@`@``0`7P$!"8`!`"$````S M0C`T-S,V-4)#04)$1C0T.#@S.#DP03)!038P,48X-@`L!P$$@`$`*0```%)% M.B!;=V1V;'1A;&M=($]4(&ES('1H:7,@82!T<G5E(&AA8VME<C\`UPT!#8`$ M``(````"``(``0.0!@`@#P``,0````,`"5D!````"P`0@`@@!@``````P``` M`````$8`````@H4````````#``"`""`&``````#`````````1@````!2A0`` M690!`!X``8`((`8``````,````````!&`````%2%```!````!0```#$P+C`` M````"P`"@`@@!@``````P````````$8`````!H4````````#``.`""`&```` M``#`````````1@`````!A0```````$``#H`((`8``````,````````!&```` M`&"%````"-;H*0````L`!(`((`8``````,````````!&``````.%```````` M"P`%@`@@!@``````P````````$8`````#H4````````#``:`""`&``````#` M````````1@`````0A0````````,`"(`((`8``````,````````!&`````!B% M`````````@$)$`$```"!"0``?0D``(<0``!,6D9U>MWSD@,`"@!R8W!G,3(U MXC(#0W1E>`5!`0,!]T\*@`*D`^,"`&-H"L!S\&5T,"`'$P*`#_,`4'\$5@A5 M![(1Q0Y1`P$0QS+W!@`&PQ'%,P1&$,D2VQ'3VPCO"?<[&+\.,#41P@Q@SF,` M4`L)`60S-A%0"Z;@($1E8BP*H@J$"H`45&@$`"`%H'5L9"@@<&\$$&D"8'D@ MH&)E('1H'^!W!;``:R!O9B!A('8`:7)U<RX@($E=(*!Y"&`>T"`08R!Q=4\% M0`:Q`'`.L&,G!"!W31V@(`"0#K`@:`)`<)`Z+R]W)"`N<R*%<BX%H&TO$2`* MP!#@+^4@L&X?(&1O(+$E-""`_P.@$/`B`!,A$.$%0"&2`_`Z;`,@9@N`'R`@ MP&YU[P;0$R$@D1Z@=`0@`A`%P/\@XP>1(``G<04`)4`[EMAIL PROTECTED]^$E20Q_`)O$E M\`6P(3'O'I`'D"KQ*`!O!^`@P";E_G0F``6@`C`#8`,@(`(K0GQC;`B0`C`F MHB`""X!F;P60#K`?("3Q<")`$R%A3R,"*`$PL27P=VX84&&_*&$EP0[`!9`P M82@A;`>1=R\O,#4A,5DAH0#`'[!WMR*A+7(84&\@<"=Q=R=B.'1Y<!_@()(" M,&DM]R#C(U`@D'0U0!C`(U`S4O<$("$0"X!G):,AU"F2`Y%K,X<D8',.L&TA M,B;1=JT)\"<%0`(0=2A2;A^P_S.!!;``P#<P)K$!H"(R(,`V:C7@'^!P`V`) MP&%M_R(C(`$X(0#0-S`X\2[`/?'K(``>L7D1,"P?P#ZS)W'_)?`'D#NR!X`Z M`BJ!'O([LM<?TR=Q,+4N'=I(.X$@L:Y'*K(=@#40(1W430W@4Q#P,/`@2B$P M5P;P9JL=VAW4+4@"3P409PN`AP=`!=`'D'-A9V5(`Y4=U$8#83HL(B!0,&(T M0G4Y`#PP4T"@9T##2T8DXCY`4U(%\!W4SP9@`C!*0@AP<V0U$$"`ODH?`!^P M#C!`@`'0,!3@K#0Z3O!*D$T>-6]*0!!W9'9L`9!L:T`_+L`ZX"$@4$(DXDSU M=6(6:B_!2D!;4$9=($]^5#B"0`,@P"W@"E`FU3_50\M)'<M-'[`B3@$]P;QB M(CB")W$(836Q8TBQOE`&\`W@'^`=D`JQ=`>`[P(P.R,U0`0@:B$0/L<EP.\= MU`(@-L-7PD\!(%B1$1#](+!P/B$`T"`0'R`'@"?1]R``(+$P)W$*4#K@/1%# MO/]44A\@`9`G$#TQ,!,+8CO1_P-A(+$OL`#`,M`V,28`6<+_`B`NP%M00(!8 M(`)@'^`$8K]1I5UE*#`8P#5`*`$H/!#\:VXQ<38Q1@$FH2KQ/L+[4X('<2DE MHV*A'[!;0C`F_QW4"X`?\V(P*@$WL2B08D'_9+$RT00@6U`W\"!2:/$+4?M8 MH$.[02?1)<`LPER0)4'[+_%H]75M(07`2&$CL![1?P2@*.43(03Q">$J1$D0 M:?U:U2(G4E=`);)<@3@1`C#?'Z%9PEY@(W(@P&0&D"^P^7("(&LH0B"1)U-L MI2I1[PN0'>,X4E_B93N0;Y%OXO\?T"F1:Z`A0$CE,P0>L6RE_Q#A./`O\2V! M*K%:U3?`!X!_0`$X\2V!(`(%L`2!(((B_$DG87(FY26R>])H\2&1=R<Q-"8= MU%<G<":!73%TYPAP?3T@@68N5T!*4V^U?R,@+O$"8";Q0(`[4"F19_QO=!W4 M+8$PL&L1(*`@`O\P)RE1,/"#D2$`'Z%_(B_Q_X!1>R&#=F^U6@.!<H*W@</_ M,*)H\1Z@*-%(H".!!;%OM?])$'9"-I,$8BP$,R0'@4D2WW55<(%[L6,1`Z!O M-K!]-OL?(&%29`40.Y"`@E^PC?S_/A)8H`F`>2-:Y8V!+`2+UN]XRH*0;W)Z M8W-`@'RCC2+_.\$8P`>`*,,@`5&E+)%`@/];0E_C)@`E\5UC#K`H`#CB_Y-# M8D)^LF]R/B!A`7QU(`+_F04=U)D#..(]=)'V.N`\\?]ZDC93'J([EMAIL PROTECTED]&" MMTDP_P5`DT0G<0,`;I*9A"=Q(!#^)Q\@']&.@CCCGK!OTU@@_2OR3I,AE[-M M$H6!6N63-?\#D03P"L"<A!_@+L"A,R&2_V5B-C0B,B"1>!0#<D"`.%5_21`O ML%JH-\`\$V9Y(3%!_P5`,M`PL)]QHGTM<F]R8G+_(7$1,$.]4^$\8%M"=C,@ M$+\+$2"">B@_N*+D..$_(4%[-B$PL7-+`$DP.N&@L7G_E96JXIC27$$S$R=Q M;C&BX;]3E5G"(,5`A$(!=H%M4^'<=V8?`!^A"X!V!O`[D/]:U8@"1+(@YJI( M84,V0SM0]Z7C()$@XR=EM3M0,<"=\/NUX4%C88*UE,)LP3>1&%#_662S9"R1 MA3%I86Z2L]M"`?^Q@WHQ/<N"M7`S>C&61@N`_YQ!*`"%DB;!G:0P527!P)/? M)Q`ZT0-@/?$_0G8JT5K5_T(!G_<X4EG!O$,X`YS*H+)_8%'#%SLG:>)PD"5` M:5%W_QW4`X$?L#:PC7!A\:4Q,V+_:1DJ4R!`'P+*LP#06*`$$?]ZQ7_(AA)U M6,S24^$84%M0_T.[.U`M@!\1(`);]2US(>/_I/,^0(BC(`)DISXF,+$^Y/^= M\&Z1'=0?T<3T<^4\FC[D_RI4'O,?T2H!;8'8PB@@/T&_M)F\EE1%../%\B-P M>4.[_D,#D:X%.%$\-"[`;I)WY?^Q(+HT0(`C<"+QVY`H\3V"_W/S@Y1DXK*& M'R$#8"N`'Y+_>B@JL;;2.N!N$(S1);*JX?<LY3CB"X!CRS$",$"$TM3_P:;3 M:;GTSD2#0@K`/`,IDO\+@#!1,*(@$4$RRJ0M@;<1_5Z"9RK1:[P\8^N37)$% MD,\',"_A0(!U$FMS184=U#<=D4;O'B5?\M$#,"<YPC5*4U=$5DP=@`0`=S)@ M'V$FL4Q0X6$T\[(N>$-/3?,4\M)/ID9@;S]H\5!&0(!-41\@[H`@15\`P`,1 M4`+X@BV`.E!&+?\]T`N`4,\=\KC1^Z/W\S3!_P7`6&#Z@?C#4$_Z[[C1]M'[ M>-2QL6($]#T2$2$_8L]'O_UF<R&Q\B#07$$]$3K[1#\CME%"F2-JL23C\[(O M1O,YT"BP+R,`4?(>!THA0/\CN5$V(4`'3@=%'=HTPC@2_3)@<G(%`%4?T'DS M`B<PL$_X\48$42!&L4!S$1`N_8*`=O9W/!`-!R8Q*%.!P;]E4#(@^(,UDB5` M.Y`M^8>`,38R-S<X3OWO!1WR?15@````'@!P``$````E````6W=D=FQT86QK M72!/5"!I<R!T:&ES(&$@=')U92!H86-K97(_``````(!<0`!````&P````'" M-!7-$24CB%A7<D[=O.M7!LD,))P``;3DX``#`"X```````L``@`!````'@!" M$`$````[````/$(R.$$W0S<P13<V.$0T,3%!.3<U,#`Q,#1"-C0Q,30P,#)$ M,T(Q-SE`=W-I;6%I;"YS<G,N9V]V/@```P#>/Y].```#`/T_Y`0``$``.0`@ ML[80'33"`0,`\3\)!```'@`Q0`$````-````34E#2$%%3"!73TQ&``````,` M&D``````'@`P0`$````-````34E#2$%%3"!73TQ&``````,`&4```````P`F M```````#`#8```````,`@!#_____`P"2$``````"`4<``0```#$```!C/553 M.V$](#MP/5=322U34E,[;#U74TE-04E,+3`R,#<R-3(P-3$S-5HM,C@Q-3`` M`````@'Y/P$```!,`````````-RG0,C`0A`:M+D(`"LOX8(!`````````"]/ M/5=322U34E,O3U4]5U-)+T-./5)%0TE0245.5%,O0TX]34E#2$%%3"!73TQ& M`!X`^#\!````#@```%=O;&8L($UI8VAA96P````>`#A``0````T```!-24-( M045,(%=/3$8``````@'[/P$```!,`````````-RG0,C`0A`:M+D(`"LOX8(! M`````````"]//5=322U34E,O3U4]5U-)+T-./5)%0TE0245.5%,O0TX]34E# M2$%%3"!73TQ&`!X`^C\!````#@```%=O;&8L($UI8VAA96P````>`#E``0`` M``T```!-24-(045,(%=/3$8`````0``',")"K1`=-,(!0``(,$:?Q>H<-,(! M'@`]``$````%````4D4Z(``````>`!T.`0```"4```!;=V1V;'1A;&M=($]4 M(&ES('1H:7,@82!T<G5E(&AA8VME<C\`````'@`U$`$````[````/$(R.$$W M0S<P13<V.$0T,3%!.3<U,#`Q,#1"-C0Q,30P,#%!-30T-S9`=W-I;6%I;"YS M<G,N9V]V/@``"P`I```````+`",```````,`!A#)OYI``P`'$`H+```#`!`0 M``````,`$1``````'@`($`$```!E````1$5"+%1(25-#3U5,1%!/4U-)0DQ9 M0D542$573U)+3T9!5DE255-)1EE/54-(14-+3U544UE-04Y414-35T5"4TE4 M14A45%`Z+R]75U=364U!3E1%0T-/32]314%20T@O04Y$1``````"`7\``0`` M`#L````\0C(X03=#-S!%-S8X1#0Q,4$Y-S4P,#$P-$(V-#$Q-#`P,4$U-#0W 6-D!W<VEM86EL+G-R<RYG;W8^``#%M`== ` end ____ � The WDVL Discussion List from WDVL.COM � ____ To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED] To change subscription settings to the wdvltalk digest version: http://wdvl.internet.com/WDVL/Forum/#sub ________________ http://www.wdvl.com _______________________ You are currently subscribed to wdvltalk as: [email protected] To unsubscribe send a blank email to [EMAIL PROTECTED]
