TotemCash under DDOS attack + make $2000 helping us
 

our servers have been under attack the last 5 hours, a mix of ddos and syn flood. our techs, hosting company and security specialists are working on it.

as always we'll compensate all affiliates for the downtime based on their average sales per day.

we've reason to believe a guy named "Captain Cook" is behind this and I'll be happy to epass $2000 to whoever can link posts under this nick (lookup for Captain Cook + virtuagirl, there are many on megaupload) with a fully identity and address.

let the game begin ;)

rex

go get him, Rex!

Sweet jesus, it's the zombie of the guy that discovered australia :|

rofl

...

that sucks, hope to find the idiot

Only 2k....:1orglaugh

He is more likely named after one of the meth cooks in the tv series breaking bad.

damn that sucks, I hope you catch him.


Spanx!
Jack

Lol do you really think how he left his full identity anywhere on internet?

Nothing that an IP + warrant can't change.

well, he's been acting with two other guys who were stupid enough to connect a few times to our servers without enough proxies, reply to emails or even make purchases. so maybe he's mister perfect, but i doubt it ;)

$2,000? Do you want Captain Cook dead or alive?

Well i could get a ip from him,but not sure would that help anything.

It's not me! I barely know how to use FTP...

i think you need to start looking at this "teen cat" fellow

Best of luck with catching the retard Rex:thumbsup

Rex I think i found the guy

http://floatawaynews.files.wordpress...capncrunch.jpg

Just kidding! I hope you find the guy :)

last time i tracked him everything was leading to canada

looks like hes given out a bunch of cracks for virtugirl, that hacks the windows registry to allow you to have it for free.

saw a bunch of them on piratebay.

http://www.google.com/search?hl=en&s...uagirl&spell=1

Someone's out for you...

LOL it appears a crack for VirtuaGirl contains a trojan specifically designed to DOS attack, YOU! LOL... although you're probably not laughing...

The real question you need to answer is whether this trojan is preset or it's drawing instructions from a remote box...

The only way to do that is download the trojan and reverse engineer it. Get a clean os install, disable all unnecessary services... Download Wireshark, shut down all other programs... install the trojan and monitor the packets coming across the wire. Record the IP and port...

That will most likely lead you to a compromised box somewhere... so... you can try hacking in yourself or get the hosting company to put you in contact with the owner of the box...

Once you're in you'll need to take a look at all services and see what is listening on the port the trojan is communicating with... Then take a look at that script that's listening and determine if it also listens for an admin... or if there's another service running on a separate port that listens for an admin.

If there is you'll need to setup some monitoring so whenever that port is accessed you record the IP address...

From there it'll be a series of hops back to the hacker (if he's even half way decent) and you'll have to gain access to the box or get the host to give you the logged IPs... of course... if the box is already compromised it's likely there's no logging for specific IPs...

So there ya go, have fun with that one... $2k isn't much for all the work that's involved... read, weeks... and even then it's highly unlikely you'll actually catch the guy.

Frustrating as hell isn't it?

thanks for a (not very optimistic) but great post. right now we're working at dodging/filtering the attack hopping we can move faster than him. $2k is just to find tracks he might have left elswere in the past, the two other guys involved seemed unlikely too till they made a few small mistakes. that's for the trojan info, that's real big help.

I've dealt with many many hack attempts in the past and taken them as far as I could go... EVERY time, for me, it was a compromised box and I couldn't get the owner to respond fast enough to actually make use of the box :(

You'd think people who had their box(es) compromised would be a little more helpful considering you just notified them that their shit is hacked, lol.

I wish you the best of luck though, I feel your pain!

installed the trojan and working on tracking what it is doing. thanks on great advice / help again, it's rare enough on gfy to be mentioned.

anyone wants to find that captain cook?

There is something so ironically fucking hilarious about you installing a crack that has a trojan to your OWN software, hahhahah.

I mean, I feel for ya but shit, you've gotta admire the irony here :1orglaugh

VirtuaGirlHD:Обсуждение - Страница 20 - Компьютерный форум ......
Через неделю у всех будет полная колекция моделей VGHD для проги FTSM! ... Релиз от Captaincook,yhowlucky-FTSM. a0501 do not work. Меню пользователя aski66 ...

I took out the link because I would get banned for posting to another forum

If you want the link to it hit me up on ICQ

he most prob watching this and will have his revenge back on me ..lol

If its a helpful, non adult related forum, I believe its fair game as the rule is to not detract actual users for this industry to another like board within 'our' industry...

Captain_Cook at 2010-07-11 19:25 CET:
This is the new full program with new update----Captain\'s VgHD 1.0.4.65 +Updade (794) a662-b090-c042 2010-07-09 -----mega*upload /?d=PAYJVFYZ-----Tanks to Ftsm & Mr-X-----Captain


http://thepiratebay.org/user/Captain_Cook/

its on this list http://www.virtualstripper.info/a0501+vghd

looks like torrent tracker or some kind of SE, and i see banners with ref. codes, so...

Couldn't it be a canadian L1 proxy?
not so useful track.

BestXXXPorn has given a ton of great advices.

Dam Ray I just found another forum with tones of your stuff on its and it the full versions

hit me up if you guys are interested in a failover solution for when you are getting DDOS'd we guarantee your sites will not go down.


Best of luck finding the idiot.

most hacked packs online don't work because they're balcklisted in our software

Good... :1orglaugh:1orglaugh Congrats to the Ruskies.

They are too busy working with all those file-sharing sites like sexyshare.net to care. :2 cents:

Must be DDoS season, I've had to put some IIS traps in place to stop these fuckers.

Good luck.

http://thepiratebay.org/torrent/5640...35__2010-06-11

he is very active on the piratebay hes been posting on there today

I have his email addy if you want it along with other info on him

rex hit me up on ICQ its in my profile