Thats me out of the NP section for a while

[Psycho]

Admin have set my NP to -500 because somebody hacked a members account and sent me NP as a donation.

I think this is nasty as i had my hard earned NP removed and my score set to -500 and i done jack wrong.

Anywho.

I have to try earn 500 NP$ back just to get back to 0, Not going to sell anything, Whats the point, RJ will probably set me back to 500 again. :td:

 

[jeter4982]

Even if Psycho is a victim as he says, that is standard procedure for any business. If you get stolen merchandise, even if you bought it with a bill of sale and are completely innocent, the merchandise is confiscated. NP did exactly that and returned it to the rightful owner. Whether it's fair or not does not come into play. We were in the flea market business back in my younger days, and I saw this scenario a few times. People bought an item for 100's only to find out the next day that it was stolen when the police came looking for it. They didn't go to jail (because they bought it without knowing), but they lost the merchandise and the money. The lesson here is to make sure that the NP$ you get for something you didn't know are legit and if they aren't, to return it, not spend it in the next 5 minutes, which makes it sound suspicious indeed.

I completely agree. Even if Pyscho were to spend the NP $, 6 minutes after he got them sounds pretty fishy. I would wait a day at least, if at all, that I spent them. Sorry to say, but the evidence is pretty convincing against you Pyscho.

Tom

 

[websoft]

Thanks NP.
Thanks guys.
I'm not really sure why all these are happening, but things are getting really very fishy around here. especially when the other members are pointing out like "asking how to use proxies" and etc etc. Why would Psycho not return me the NP$ but instead bought a domain SIX MINUTES Later. This is going very WeIrD.
But i trust that the admins will get to the bottom of this matter.

By right people WOULD ( not saying that they must ) say a thank you or something like that. but spending it six minutes later? its going very fishy.
another thing to add that might point back to psycho was that:
i was hacked on MSN a day before.I recovered my password around sometime later. i then logged in to NP. then i saw Kyle log out from MSN abruptly. wasnt expecting anything yet. then i logged out of NP or rather closed the window. then a few minutes later, kyle came back. i logged back in to NP a few minutes later and found: MY NP$ MISSING!

a few days back, kyle hit me up on MSN and asked me to lend him a total of 6.20 to buy flash chat. i lent it to him, he gave me 315NP$, which obviously does not tally to 6.20 USD. he had promised to give me full access to seotoolz.com and 80 NP$ more. when he got some more. SO i waited one day... two days... and so i decided to BUG him. he got rather fed up and threatened to get RJ to ban me. Then he blocked me on MSN.
Then i wrote an apology to him via PM. He unblocked me. and yea. Until two days back before my NP$ went missing, he had not returned 80NP$ and given me access to seotoolz. now, i dont really expect him to return me the 80NP$ cause his got minus dont know how much.

Dont know if that case is related... But just an addon

 

[RJ]

On closer examination of the logs I can say beyond a reasonable doubt that it was indeed Psycho that logged into websoft's account and sent himself the NP$.

The theft occurred at 7:26 PM. As you can see from this thread posted 20 minutes before the theft, the motive was clearly there.

Four minutes before the theft, Psycho was viewing websoft's profile and then logs no futher activity until after the theft. During that time the thief logs in using Firefox browser and an anonymous proxy server found at proxylist.us. The thief logs in as websoft, goes straight to the NP$ store, sends all NP$ to Psycho.

A minute later, Psycho is back on NamePros and once again views websoft's profile.
At this point the thief logs out of NamePros and then views Psycho's profile.

Five minutes later, Psycho posts a thread seeing a NP$ registration. As Scott mentioned, Psycho was asking about proxy servers found on proxylist.us the same day as the theft.

Draw your own conculsions.

 

[True_Snake]

On closer examination of the logs I can say beyond a reasonable doubt that it was indeed Psycho that logged into websoft's account and sent himself the NP$.

The theft occurred at 7:26 PM. As you can see from this thread posted 20 minutes before the theft, the motive was clearly there.

Four minutes before the theft, Psycho was viewing websoft's profile and then logs no futher activity until after the theft. During that time the theif logs in using Firefox browser and an anonymous proxy server found at proxylist.us. The thief logs in as websoft, goes straight to the NP$ store, sends all NP$ to Psycho.

A minute later, Psycho is back on NamePros and once again views websoft's profile.
At this point the thief logs out of NamePros and then views Psycho's profile.

Five minutes later, Psycho posts a thread seeing a NP$ registration. As Scott mentioned, Psycho was asking about proxy servers found on proxylist.us the same day as the theft.

Draw your own conculsions.

:tri:

Good job -RJ-!

Thats alot of evidence, and therefore the situation is QUITE clear.


True_Snake

 

[jstep]

Excellent investigating,knew their was more to it

 

[websoft]

yucks, thanks RJ
i can guess RJ...
One good thing is i never use proxies. they are IRRITATING! why? cause it keeps refreshing, you cant login to your own admin CP in vbulletin or IPB, suddenly you are logged out, and etc etc.
The only time my IP changes is when the ISP changes it. (Dynamic IP), but that will still have the same first two blocks or something like that, and when i'm in school. But if theres going to be a sudden change in logs which only appears ONCE, then its very fishy.

I have another feeling, about why kyle started this thread. he wanted to clear his name, or rather, to make people think that he isnt the hacker, but the tables are turned around and points back with further evidence, to him. which is probably why he isnt replying to this thread. if he DOES reply, it means he is trying to unjustify this point, but if he continues not to post, he is probably trying to use the tactic, reverse psychology, in short, PSYCHO, which indeeds fits his name prim and proper.

What gave him away, he is too quick, too desparate, too unthinking.
But one thing i still dont figure, WHY ME? because of the incident i explained earlier? if not, why steal?

EDIT: btw, what do you intend to do to him?

 

[LeeRyder]

i got dibs on psychos ribbons when he is banned!

lol, i knew i didnt like this guy for a reason. Glad it worked out the best for you websoft.

 

[websoft]

yea thanks. alot for you guys support.

 

[RJ]

websoft, the only missing details here are how Psycho came to find out your password. You said to me that you experienced hack attempts shortly after you added him to your MSN Messenger list. Can you provide any idea to how your password was garnered from this, so other NamePros members can avoid this type of occurence?

I have another feeling, about why kyle started this thread. he wanted to clear his name, or rather, to make people think that he isnt the hacker,

I reasonably explained the situation to him privately before all this, and why the NP$ was being deducted from his account and why it would show a negative balance. He could have left it at that. He still has the domain registered from the stolen NP$. (In fact a forum has already been developed on it.)

I am the one out the 497 NP$ since his account is showing a negative balance since the websoft transaction was reversed, and it was only after his accusations against us in this thread (that we were taking additional NP$ beyond what were stolen) that caused me to investigate futher. After log checking and assembling a timeline and other supporting details, I'm convinced we caught our thief now.

 

[LeeRyder]

you saying we should do a dns attack on "his" forum? *cough*hint hint*cough*

 

[RJ]

you saying we should do a dns attack on "his" forum? *cough*hint hint*cough*

No, I would never think that's a good idea. Starting a forum from stolen money will bring enough bad karma on its own. :-0

Honestly, I considered Psycho a cool enough dude before this. Maybe there's hope for him elsewhere.

 

[websoft]

yea he 'seemed' to be a nice guy.
oh woops. havent answered the first question rj asked.
BTW, my name's Lincoln. Or Dimension, whichever you prefer.

First thing, do NOT for any reason, add anybody to your MSN Contacts. Make sure you know who he is. THats protection number one.

Protection level two: Dont install modifications on your computer. I installed MSGPlus which gave me the stupid auto accept files.

Protection level 3: Dont accept / download files from ANYBODY unless he called you up and explained and anything to that matter.

Protection level 4: SCAN YOUR COMPUTER AND THE FILES YOU DOWNLOAD!
very big mistake on some of the levels

 

[alegend]

So is he banned from namepros?

 

[RJ]

yea he 'seemed' to be a nice guy.
oh woops. havent answered the first question rj asked.
BTW, my name's Lincoln. Or Dimension, whichever you prefer.

First thing, do NOT for any reason, add anybody to your MSN Contacts. Make sure you know who he is. THats protection number one.

Protection level two: Dont install modifications on your computer. I installed MSGPlus which gave me the stupid auto accept files.

Protection level 3: Dont accept / download files from ANYBODY unless he called you up and explained and anything to that matter.

Protection level 4: SCAN YOUR COMPUTER AND THE FILES YOU DOWNLOAD!
very big mistake on some of the levels

He sent you a file that you ran on your computer? A trojan?

 

[Veolus]

I knew it all along.. Psycho did hack Websoft :D

 

[websoft]

im not sure, but i did get trojans. wait i do a screenie

 

[Petter]

Psycho is now banned from Namepros!? That's the second aussie user I have seen getting banned from here! :lol:

 

[websoft]

dam. attachment feture is down.
sorry guys

 

[Petter]

Upload it to imageshack.us then

 

[websoft]

ill see.