First things first, DONT BE SO FOOLISH TO BREAK RULES AND POST UNHIDDEN!!!!
Secondly, look at the packages being installed right at the beginning.
- mutt - a mail server??? (geeee, I wonder what that is for....)
- dos2unix - to modify windows text to unix text (no xtream codes or xtream ui has windows text in it!!!!)
- i can keep going from within the installation script too.
Thirdly, the installation packages include multiple email scripts and imagery for "lost passwords" unrelated to xtreamui. My oh my! I wonder......
Lastly, the op has been here for several months and used in excess of 100 ip address. >>> proxies. some of these same proxies have already been identified, filtered, and blocked by xtreamui's IPS systems (coming soon to a server near you). Furthermore, the op has gone through several lengths to mask himself but failed.
In summary, and in my opinion, he is now running out of sources to continue his attacks at xtreamui. Because of this, why not trick some people to use a malicious package for some extra bandwidth and strengthen his botnet. Granted, it has only been slightly over 12 hrs and i do have to sleep and work. So full analysis hasn't been completed yet. It is too ironic that this user mysteriously came out of the woodwork with a modified installation, sharing identical proxies, originating from the same ASN's as the one attacking xtreamui. Especially since that's the same way the attacker appeared. They showed up trying to advertise without going through proper channels and procedures, got butt hurt, and retaliated.
Now most of you know that I *try* to be neutral in all matters, but this one is wearing me thin in terms of patience as there has been an excess of you all flooding me and the other admins in those realms with simple questions instead of just reading upwards or looking at the announcements or the pinned messages or just asking your peers in those places. Stop it! We are all busy., you aren't entitled, and there is this thing called time zones.
I will follow up with more info. I have the packages and will upload the images from them. Believe me if you want, your choice. Until it is fully analyzed by me and other non biased parties, NO MORE RE-POSTING!!!!!
- If I find you sharing it >>>> ban
- Re-posting >>>>> ban
- Sending in messages >>>>> ban
- If you don't like it >>>>>>> kick rocks.