FFACEV disabling processes without permission?

[dasva]

This isn't a holier than though... hell it's used to make bots itself. It's trying to protect himself from what he precieves as a threat. Wether it actually is or not idk.

[NynJa]

Not to burst your bubble... Congratulations, you know how to use NeoTrace. But have you tried going to any of IPs listed?

The very first address with the largest number of hits looks like a proxy system... (EDIT: I'd go up with whatever you have for anti virus, etc)

About to load up a VM and take a peek around at some of these addresses.

Double EDIT: A bunch of these IPs are showing up on Project Honeypot as well.

ok so theyre proxies, im aware of that hence "I'm not saying theres 100% no foul play on the side of elite xi / wiz"...but he'd backdoor his users just to throw them through a proxy?

[zaps]

not uncommon.

A server being used as a proxy that just happens to have a lot of user's DDoSing 1 website (still has some legitimate traffic)

gets taken down slower then say:

A server that's only being used as a DDoSing Zombie.

[NynJa]

Care to explain y the extra computers just to throw em thru a proxy? Y not just use proxy?

[zaps]

He most likely doesn't own the the proxy's he's throwing people through. It would actually be harder for him to zombie the proxy server itself and just send a massive amount of traffic to the website he wants taken down. By sending his attacks through proxy servers, he gets to keep what machines he's using secret. He also gets to utilize free proxy services for his attacks.

Bottom line though. Its painfully obvious wiz is the one behind these attacks. Most of what i have been mentioning is speculation on how he could use that backdoor he created to have his users DDoS people he doesn't like.