Hello, I work as a Private Investigator.
Our agency received a case with an objective of hacking into your email, phone, cloud storage, network and collecting intelligence.
We work with hackers from China for tasks like that, and they are the best. As you can see, they did a good job. Your accounts and devices are compromised.
But we do have an ethical protocol in place.
After checking the background of the person who paid for the hacking and investigation on you, I have decided to come forward and offer you to buy the information about that person (name, contacts, emails and other proof).
You will also get a report on yourself (including a list of compromised accounts, devices, logs, screenshots, photos and documents).
Normally, we do not disclose sensitive information about our clients, but in this case we will be.Upon reviewing this case, I found that something illegal was planned against you.
The materials we have collected on you are very sensitive and can be easily used to blackmail you.
We usually address personal and corporate espionage cases, but this case is different.We have received a prepayment of 50% for your case from that person (total agreed upon cost was 12500 USD).
However, I will give you a discount (without any profit for the agency), if you decide to buy this information.
After we get the payment, I will get back to you. You have 2 business days to make the transfer. It will cost you 40% of the unpaid balance.We will process $2,500 payment through bitcoin. In case you have trouble with bitcoin, google how to fund it.
Send BTC to this wallet [REMOVED]It will be up to you what to do after you get the information. We will delete all files. The original client will get nothing and will never know about our deal.
Please keep in mind, because I need to pay Chinese contractors, and if you decline this offer, I will have to go to the original client and send all intel to cover the costs.
But at least you know that now and have a free heads up of what’s coming.
Archive for Articles
BTC Email Scam
SaferColleges Training
Employees in educational institutions are required to take the SaferColleges Training. Your courses will vary and here are samples below.
AFNA Motors
Are you planning on buying or leasing a vehicle along with parts and accessories? Here are a few thing that you should know.
Paycheck
A weeks paycheck should be able to cover your monthly payments on the vehicle. If not, put down a good deposit or buy a vehicle where the prices are affordable as you will still have to maintain and insure the vehicle and the cost to insure is often about the same as the vehicle payments but typically no more that 10 months of the year.
Dealership
Go with a dealership where you can get a loaner when you have to do repairs that will take more than few days. Keep in mind that AFNA Motors may want you to return the vehicle with the same amount of fuel or battery level to avoid a surcharge.
Spoofed: Where are you?
Employees should be on the lookout for a similar email that spoofs their bosses from Gmail.com
Where are you? Please let me know because there’s something I need you to do for me.
Regards
To keep everyone safe in your company and institution, you will want to request that the IT Department inject the following in all external emails.
CAUTION: This email originated outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.
Administrator Command Prompt
One of the coolest way to launch an Administrator Command Prompt is to use the following.
powershell Start-Process cmd -Verb runAs
Once you are done, it is recomended that you clear the history of the Run window to hide your activities. This can be done using the following
powershell "Remove-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU' -Name '*' -ErrorAction SilentlyContinue"
acp.bat
TITLE Administrator Command Prompt v1.0 by Stephan Pringle.
@ECHO OFF
COLOR 1F && CLS
ECHO ----------------------------------------
ECHO (A) Launches an Administrator Command prompt
ECHO (B) Flushes the history of the Run Window.
ECHO ----------------------------------------
ECHO.
ECHO Copyright (C) 2019 Sipylus. All rights reserved
PAUSE
powershell Start-Process cmd -Verb runAs
powershell "Remove-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU' -Name '*' -ErrorAction SilentlyContinue"
Generators
When building a website for a client, look out for the following generators in the saved pages as it will inform the client what software you are using to create their online presence.
<meta name=”generator” content=”Adobe GoLive 6“>
For those that create the websites themselves, below will let the competition and hackers know the technology that you used to bring the site features to life and exploits to target.
<meta name=”generator” content=”Wix.com Website Builder“/>
OneUpdater by VOMPT Limited
I got a call from a local library that uses Millenium ILS and Sierra ILS and they stated that they are unable to print reports again. The last time it happened, it was due to the Adware on the computer so I grabbed a copy of Malwarebytes and the Barracuda Malware Removal Tool and headed out the door.
Malwarebytes was already on the PC from my visit from 30 days ago so I did an update to the definitions and let it run. To my amazement, Malwarebytes found nothing so I went back to my screen capture of the Control Panel from my last visit to see what is added or removed and noticed that OneUpdater by VOMPT Limited and SSOption by Deep Repeat Use were installed to the computer the very next day after I provided a service call.
It seems that the students who got permission to work in the library were using the computer that is dedicated to library operations for streaming movies as the computers in the OPAC (online public access catalog) area are configured to restrict such activities by the Barracuda Web Filters.
If you found one or both installed on the computer, please note that you may have to remove them manually through the Control Panel uninstall function. Once that is done, continually updating Malwarebytes daily so that it can catch any hidden traces that may be left behind.
SSOption by Deep Repeat Use
I got a call from a local library that uses Millenium ILS and Sierra ILS and they stated that they are unable to print reports again. The last time it happened, it was due to the Adware on the computer so I grabbed a copy of Malwarebytes and the Barracuda Malware Removal Tool and headed out the door.
Malwarebytes was already on the PC from my visit from 30 days ago so I did an update to the definitions and let it run. To my amazement, Malwarebytes found nothing so I went back to my screen capture of the Control Panel from my last visit to see what is added or removed and noticed that OneUpdater by VOMPT Limited and SSOption by Deep Repeat Use were installed to the computer the very next day after I provided a service call.
It seems that the students who got permission to work in the library were using the computer that is dedicated to library operations for streaming movies as the computers in the OPAC (online public access catalog) area are configured to restrict such activities by the Barracuda Web Filters.
If you found one or both installed on the computer, please note that you may have to remove them manually through the Control Panel uninstall function. Once that is done, continually updating Malwarebytes daily so that it can catch any hidden traces that may be left behind.
Stereosaut Audio Equipment
I buy and sell most, if not all, my audio equipment through the Amazon.com website as my Amazon Business Prime account allows me as a buyer to have up to 90 days to pay for items or an instant 5% cashback. This gives my customers buying locally the chance to pay me monthly or if they are paying in advance, to get a rebate at the end of the next billing cycle.
Even though the prices on Amazon are great, I found a local shop to be lower with some sweet deals, especially on multiple items. If you are the type that likes to interact with the equipment before you buy, do yourself a favor and check out The Stereosaut Audio Equipment across the parking lot of the of Kelp’s Wild Waterways.
Video Connections
Here are some video connections that I have come across when building or supporting systems.
Ports
DMS-59 – Female
DP – Female
DVI-D – Female
DVI-I – Female
HDMI – Female
USB – Female
VGA – Female
Cable
DMS-59 – Male
DP – Male
DVI-D – Male
DVI-I – Male
HDMI – Male
USB – Male
VGA – Male
DMS-59
DMS-59 is often seen on video cards with AMD GPUs shipped by Dell and requires a Male-Female adapter cable and can split the image between a monitor and a secondary target such as a projector. When there is a “No Signal” issue, I have to check and see if it the video cable or the adapter itself as they often get damaged or loose due to the way they are made.
DP
DP will fasten to the source and target unlike HDMI will and does support audio and video. Be mindful that there are many audio support versions so do your research.
DVI
DVI comes in two flavors. DVI-D (digital signal only) and DVI-I (both analog and digital). When buying video cards, I make sure that it supports DVI-I so that I can use it with old equipment and is not limited to using a DVI-D cable only.
HDMI
HDMI carries both audio and video so most users choose to buy lard TVs and use it as a computer monitor for their work and play. Please note that HDMI cables do not fasten to the source or target and will become loose so if there is a display problem, check the connections first. For simplicity, if make the HDMI target a second display.
USB
USB has made connecting devices easily so there is no surprise that it would not be used in an attempt to carry audio and video signal. On an old laptop with a broken LCD, I have utilized a USB port to connect to an HDMI TV making the laptop useable until a replacement screen arrived.
VGA
VGA will not provide audio but there are lots of new and old monitors that support it. If getting an SFF video card, VGA may be missing so HDMI and DVI can be primary but will have pins on the board to connect and VGA output which will take up a second slot in the computer,
Issues with a Canon imageCLASS Printer
Over the years, I have seen numerous issues with a Canon imageCLASS Printer. Some are simple to troubleshoot while others are not. Let us go over what I have encountered.
Local Scanning
One issue that I see frequently is the end-user having trouble to scan with a Canon imageCLASS MF4450 that is hooked up to their workstation, so I wrote an article to cover it so that they and those searching the Internet can refer to it when needed.
Local Scanning
Now, for some reason, the end-users expect to be able to scan to their workstations from a Canon imageCLASS Printer the is set up in a networking environment. An Epson WorkForce is what they need or a Ricoh or HP which can scan to an email address.
Windows 10 Calculator
If you plan on using the Windows 10 Calculator, here are a few things to keep in mind.
Administrator Privileges
If your local or network account has been added to the Administrator group, the Windows 10 Calculator will not be available to you if the User Access Control is not on the “Never Notify” setting in the Control Panel. You will need to use an account without administrator privileges or place the UAC back on the default setting.
User Access Control
If the User Access Control is not on the default setting in the Control Panel, you may find out that the Windows 10 Calculator (along with the other windows 10 apps) will refuse to load. The setting could have been changed by someone who shares the system or by the Global Policy set by your job or educational institution. If the computer belongs to an educational institution, please note that the internal drive may be protected by software (SmartShield by Centurion Technologies) that erases all changes after a restart.
Activate Microsoft Office
One question that I am asked frequently by clients is my technique on how to activate Microsoft Office since Microsoft Office prompts them frequently to do so or when they move their drive to another Windows system or clone to a larger hard drive.
BEST Plus
According to CAL, version 2.0 of BEST Plus is an individually administered, face-to-face oral interview designed to assess the English language proficiency of adult English language learners in the United States. Here are some things that I have discovered during the use of the program and support.
Installing on Windows
When installing BEST Plus 2.0 on Windows 10, be sure that you are using the compatibility mode for Windows 8 to avoid issues during the install. If you forget to do so, you will be told by the BEST Plus installer that the msvcrt40.dll in the system32 folder can not be opened and to check that the disk is not full and that you have access to the destination directory. You can confirm what I am saying by checking the folder and seeing the msvcrt40.dll is not there. If you went online and downloaded one and took ownership, remove it and utilize my installation method.
Removal on Windows
When the program is installed, it does not show up in the Control Panel and therefore it is a bit harder to do a one-click removal. The CAL.org does not show any removal instructions as well so before you make the install, create restore points or clone your drives.
EFI Folder
After posting a video on instructional YouTube video, one question I anticipate to receive is, “Can I get a copy of your EFI Folder?” as that folder is important in operating a Hackintosh and HackBook.
So, what is the EFI Folder? It is a folder that is in the located in EFI System Partition (ESP) of the boot drive and aids in spoofing a device as an iMac or MacBook. Subfolders that you will see in the EFI Folder are APPLE, BOOT, CLOVER and will contain at least the files below.
APPLE
\EXTENSIONS
\FIRMWARE
\UPDATERS
BOOT
\BOOTX64.efi
CLOVER
\ACPI
\CLOVERX64.efi
\config.plist
Revert CoreStorage
After installing macOS High Sierra, you should revert CoreStorage on your hard drive and doing so is as simple as running a command in the Terminal.
diskutil cs revert /
When done, save your files and restart the system.
Mark a USB Flash Drive as Active
If you are trying to create a Bootable USB Windows Installer? They are very easy to make but depending on the USB Flash Drive in your possession, you may have trouble creating it so your best option is to utilize DISKPART from the Command Prompt. Unfortunately, while preparing the USB for the 25-minute upload of the uncompressed ISO image to your USB using DISKPART, you get a message telling you that you can not mark a USB Flash Drive as active and that is due to your USB drive being GPT instead of MBR.
Here is my method to create a Bootable USB Windows Installer.
01. Open the Command Prompt
02. Type DISKPART and press enter.
03. Type LIST DISK and wait for it to detect the USB.
04. Type SELECT DISK 1 (should match you USB) and press enter.
05. Type CLEAN and let it erase all the contents.
06. Type CREATE MBR and press enter.
07. Type CREATE PARTITION PRIMARY and press enter.
08. Type SELECT PART 1 and press enter.
09. Type FORMAT QUICK and press enter.
10. Type ACTIVE and press enter.
You can now use Windows Explorer (in Windows 8 and later) to see the contents of your ISO so that you can copy it to your USB Flash Drive. If you are using any versions of Windows 7 system, you will need to install additional software that can read the contents of an ISO file.
Trojans
Here are some Trojans that I have come across on the Windows Operating System while using Malwarebytes and is the reason why I started to use a Hackintosh and HackBook daily to reduce the risk of infection.
Dell Latitude E5440 HackBook
The Dell Latitude E5440 HackBook is a Hackintosh laptop that is capable of running Windows and macOS from one solid-state or hard disk drive. If you are considering making one on your own, know that it can be easy or difficult depending on your knowledge and access to websites across the globe.
Pre-installation
* Do not connect to the Internet during the install of macOS.
* Solid-state Drive or Hard Disk Drive should be 7mm.
Post Installation
* Temporarily keep the system from the Internet.
* Setup the keyboard once the install is complete.
* Disable GateKeeper to install apps easily.
* Revert CoreStorage partitions
* Enable TRIM Support for your installed SSDs.
* Turn off the auto features of the App Store
Remove the Formatter from an HP LaserJet P2015
Do you know how to remove the Formatter from an HP LaserJet P2015? I will show you how as you can make some money reselling the part as the HP LaserJet P2015 is still in use to this day or save the expense of hiring a technician to swap out the parts.
What You Will Need
* Belkin 55-Piece Computer Tool Kit
* Patience
00:00 – Formatter in the HP LaserJet P2015
00:15 – Removing Data Cable(s).
00:20 – Removing the Phillips Screw(s).
01:00 – Removing the Ribbon Cable(s).
01:45 – Removing the Formatter.
If you plan on selling the parts, immediately place it in a protective pouch along with a test print from the Operating System as the test print will show that it works and the date and time last checked so that you have proof to show your buyers.
Enable Pause in QuickTime for macOS
Wouldn’t it be cool if you could enable pause in QuickTime for macOS? Well, you can (before Catalina) and here is a demonstration.
macOS Mojave and Earlier
Once your recording starts, QuickTime for macOS may hide itself leaving only the stop button on the menu and its icon on the dock. You will want to click on the QuickTime for macOS icon on the dock and that will make it the focus on the menu when you can now click on the ‘Esc’ key on your keyboard to bring up the Screen Recording window. The Screen Recording will give you the option to pause when you press and hold the ‘Alt’ key on the keyboard.
macOS Catalina and Later
Sadly, macOS Catalina removes the option to press and hold the ‘Alt’ key on the keyboard to bring up the pause button so you need to pause between your actions so that you have sufficient lead to use the TRIM feature in post production. Also, copying the QuickTime for macOS app from Mojave or early will not work.
Virtulization
If the host is macOS Mojave or earlier and the guest is macOS Catalina, then record with the host with the client in fullscreen.
TP-Link TL-WN725N
The TP-Link TL-WN725N is perfect for a small factor Hackintosh or a HackBook that needs a wireless connection. If your device lacks an optical drive or if you misplaced your disc, you can go online for the Wireless-USB-Adapter-Clover since it is compatible.
Timer for QuickTime Recordings
You may have noticed but there isn’t a timer for QuickTime recordings and if you are trying to meet a minimum (ie. for YouTube), you may find out that sometimes, you come up short so here are some ways to keep track.
Dual Monitors
If you have multiple monitors, use one of your free Internet browsers and navigate to Google.com. There, you can use their timer (to limit) or stopwatch (for tracking) with ease.
Siri
If you do not want to use the Internet, Siri can help. Ask “her” to set a timer for you in which she will inform you that she can’t and instead notify (with a popup) you at the time your timer would end.
Smartphone
Your Android or iOS device has apps that will help. Keep in mind that if audio is recording as well, it may pick up audio from your device.
Index of /
Whenever you see Index of / as the title of a web page in Search Engines, it is an indication that the website listed is missing an index file and has also allowed directory listing in their .htaccess file located in the root of the site.
.htaccess file
Options +Indexes
# or #
IndexIgnore *
Towel
When I travel around, one item I like to have with me is a towel as it has many uses.
Protection
At times, I am given electronics to repair without advance notice so make sure that it does not get scratched on the way to the office for repairs, I carefully wrap it with the towel.
Draft
Sometimes, there is a cold draft that comes in from under doors and with a towel, I can have the air blocked off thus keeping the room to a comfortable temperature. Also, if I need to utilize a space heater, it will reach the set temperature faster and do less work as it is not fighting against the incoming air.
Light
As with the draft, light can enter through the crevices around the door and the towel can help reduce the intensity.
Odor
Keep odors from entering from the hallway outside your door by using a towel as a barrier.
Fake Microsoft Support
If you are trapped on a page below, here are a few tips on how to get out of it on Internet Explorer.
Fake Support Site
* lamination.icu
Desktop
On a desktop computer with Internet Explorer as the browser, you will need to disconnect the Ethernet cable from the back of the computer or the wall jack if the desktop computer is in a locked podium or the rear is difficult to reach. Once the Ethernet cable is disconnected from the desktop computer, the web page will not have a chance to refresh the content from the Internet (thus causing an HTTP 404 Error) and this will end your session to allow you to close the browser or tab with the rogue page.
Laptop
On a laptop computer with Internet Explorer as the browser and using a wireless connection, you will need to disable wireless using Control Panel or WiFi switch (if equipped) on the front or side of the laptop. With the laptop disconnected from the Access Point, the webpage will not have a chance to refresh the content from the Internet (thus causing an HTTP 404 Error) and this will end your session thus allowing you to close the browser or tab. If the laptop can access the Internet over an Ethernet cable, please disconnect the Ethernet cable from the laptop as well.
Prevention
To prevent this from happening again to you, look to alternate browsers and use these for surfing the Internet and save Internet Explorer for the Intranet programs at your company or for your online banking as alternate browsers have a feature to prevent a web page from creating dialog boxes over and over. For a list of free Internet browsers, check on your favorite Search Engine then download from their official site to prevent yourself from adding threats on your device. Keep in mind, you may need to use the an Administrator account since the install will affect all users.
0x6100004a
When someone has something important to print by the end of the day, they are greeted with a message showing 0x6100004a and since I am the printer guru, it then becomes my task to fix it. Normally, this takes about an hour (removing parts and cleaning them) to properly fix but it can be done in a quarter of the time to get the user to print their document then tweak overnight. Below are just a few ways you can see if the error is valid or a ghost issue and models showing the error message.
Affected Models
* HP OfficeJet 6830
* HP OfficeJet 6962
* HP OfficeJet 6958
* HP OfficeJet 6968 (in the video)
* HP OfficeJet 6975
HP OfficeJet 6968 – Before
HP OfficeJet 6968 – After
Reporting Delay from eBay Partner Network
If you are a member of the eBay Partner Network, be sure to keep informed on new developments.
Hi Member,
We are experiencing a delay posting earnings data to our reports; the most recent data posted is from Feb. 11.
We are working to implement a fix and will keep you updated as we know more. You can also check our status page here.
We value your partnership and will keep you updated as we work to fully resolve this delay.
Thank you,
The eBay Partner Network Team
A few hours later, this arrived.
Hi Member,
Last week we shared we had a delay posting earnings data to our reports. Today, we’re writing to let you know we issued a fix, and your reporting is now back to normal.
Thank you for your patience as we worked to fully resolve this issue.
The eBay Partner Network Team
EFI Mounter
EFI Mounter is a small utility that mounts an EFI partition on the selected hard drive or USB flash drive. This is a simple wrapper for the terminal diskutil +some buttons.
Mirror: https://www.insanelymac.com/forum/files/file/528-efi-mounter/ v1.2.3
