ToeCutter

Smart move economically speaking if you ask me.

The pesticide is just for colour

Shocking. How could you ever set up an ICT business here ? Seriously ?

Ah yes - I've already got process explorer - one of the best utilities in my toolbox I have to say - well done sysinternals

I;ve reported the virus to trendmicro and had a look around at how this virus propagates. Early indications would seem to point at unsecured MySQL installations.

On waking up and noticing the performance on my machine was poor I discovered this C:\WINDOWS\system32\spoolcll.exe running as a service "Event Monitor". You cant kill the process because it spawns another and the file is of course locked so you can't delete it.

The best way to "switch it off" is to go into the services control panel, and set the service to disabled, then reboot.

It listens on 3 TCP ports, one of which gets randomly re-assigned every so often, so filtering on ports may not help.

Its just another scummy remote admin virus by the look of things and tftp's files from the remote system.

I'm having a hack at it now, and will post more information as I find out more.

I'm a freelance programmer, and have been here about 8 months now. I'm thinking about ways to get a work permit, but not having 2 million to start a company and employ myself, I'm having to be a little more creative about the matter.

I've heard, through this forum actually, that the government are offering deals for people in my line of work that may be applicable to my situation.

What I plan to do is start a small school, maybe 8-10 people initially, for free. I would like to help my local community and maybe I can get a teaching style work permit for my efforts?

I know no more than the above scope and would be very interested in hearing from anyone who may be able to point out what I need to do to get the show on the road.

Regards,

Malcolm

Ah quality, so well done, its idiotic, its brilliant!!!

I'm a freelance programmer and my friend is a medic. If anybody is leaving from Samui to Phuket (my friend needs to get to the hospital there) and would consider giving us and maybe a few others transport please let me know. My contact details follow, please use them rather than replying to this post (thx).

If anyone knows of any voluntary computer related work anywhere else that I could be of better use in please let me know. I've also done a fair bit of systems and database admin if that helps.

I can speak only English and very poor Thai (sorry, i'm learning).

If you contact me and get no response, it's becuase I've already gone =)

Thank you

Malcolm Swaine

[email protected]

Maenam,

Ko-Samui,

Surat-Thani,

84330 Thailand.

+(66) 097 316 703

Hmm, things dont get any easier for any of us "Lifers" eh... What I would like to see in the next headline is "TAT stops all ***holes from entering the country, but has no problem is you're a bit poor like the rest of us and mean well". I won't hold my breath, anyway, I still think Thailands no. 1 regardless

== MISSING GIRL FOUND ==

Sorry for the time its taken me to reply - and thanks to everyone who posted to and read this thread. She has eventually been found, not the best for wear, but as you can imagine everyone is very relieved.

I apologise of it looks like this thread was just abandoned by the original author, but there's been a bit of a manhunt coordination going on.

Again, thanks to anyone who contributed/read this post. If I ever meet any of you, the Changs are on me (unless of course you want a Singha )

== THIS GIRL IS NO LONGER MISSING ==

Thank you everone for your posts, its nice to know there are people out there who care Moderators, please feel free to remove this thread if you want.

Missing Girl - short name lynn, real name rangtipp. Was studying in Bangkok after leaving Ko Samui, but has not been back to her accomodation for 4 days, even for a change of clothes. Telephone on answer permenantly, everyone very worried about her. Police have been notified. If you see her please let me know and I can contact her family.

Thanks for reading, Malcolm Swaine

[email protected]

What - was that it. Was that the topical storm that passed over Ko Samui lastnight?

That was just another normal rainshower with a bit of wind in the night!!!

I'm looking at topicalstormrisk.com now which shows the system still out in the Gulf of Thailand - think the pics may be from yesterday tho? Dont tell me that was the lull before the storm

I'm on Ko samui too - those 16 metre waves dont sound too good - think I may be taking myself, my laptop, and a couple of days worth of pringles into the mountains if anyone wants to join me I can hear it coming - oh no

Top stuff as always, just my kind of humor

if these rules are in effect, the only bars *legally* open after hours will be paying for the privilege and therefore will be tipping officials. If officials are involved, as well as a slice of the pie, surely that will exact a greater element of control over the bar scene?

I'm all for the "transfer of knowledge" bit. I reckon that's quite a smart idea. I was kind of planning on doing some voluntary teaching work anyway...

You can remove this account, but it is vital if you do asp.net development work on your machine.

By removing the account you may find your ASP.net projects will no longer function correctly.

It is possible to recreate the user by issuing the following command from the run dialog (changing the framework version number as appropriate)

%systemroot%\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe /i

Also...

Windows includes a feature that allows you to configure the computer to automatically logon to the network, bypassing the Winlogon dialog box.

Open the registry editor

Navigate to the key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"

Add a new string value named 'DefaultUserName' and set it to the username you wish to automatically logon as.

Add a new string value named 'DefaultPassword' and set this to the password for the user entered above.

Add a new string value named 'DefaultDomainName' and set this to the domain of the user. Ignore this value if the NT box is not participating in NT Domain security.

Add a new string value named 'AutoAdminLogon' and set it to either '1' to enable auto logon or '0' to disable it.

Exit and restart, Windows should not ask for a password and automatically show the desktop of the user.

Note: The password is stored in registry, which means anyone who has access to the machine has access to the password.

People like this need to be sorted out. It's everyone's responsibility to look out for these 'types', and do the right thing whether it be notifying the authorities or otherwise. As a foreign national the behaviour of all other foreign nationals has a direct impact on my day to day acceptance in the community. I'm sick to death of seeing people being treated like sh*t by these c*nts from countries with a better exchange rate. Its up to all of us to do our bit and weed out the few bad apples that bring shame on us all like this.