Anyone know stuff about Xming or X Windows Server?

[SkyNigger]

ffffff800ce01770 stream 0 0 0 ffffff800ce01838 0 0
ffffff800ce01838 stream 0 0 0 ffffff800ce01770 0 0
ffffff800ce01900 stream 0 0 0 ffffff800ce019c8 0 0
ffffff800ce019c8 stream 0 0 0 ffffff800ce01900 0 0
ffffff800ce01a90 stream 0 0 0 ffffff800ce01b58 0 0
ffffff800ce01b58 stream 0 0 0 ffffff800ce01a90 0 0
ffffff800ce01c20 stream 0 0 0 ffffff800ce01ce8 0 0
ffffff800ce01ce8 stream 0 0 0 ffffff800ce01c20 0 0
ffffff800ce01e78 stream 0 0 0 ffffff800ce01db0 0 0
ffffff800ce01db0 stream 0 0 0 ffffff800ce01e78 0 0
ffffff800cd62a30 stream 0 0 0 ffffff800c9cbd48 0 0
ffffff800c9cbd48 stream 0 0 0 ffffff800cd62a30 0 0
ffffff800cd62bc0 stream 0 0 0 ffffff800cd62af8 0 0
ffffff800cd62af8 stream 0 0 0 ffffff800cd62bc0 0 0
ffffff800ce02260 stream 0 0 ffffff800df5ef00 0 0 0 /var/folders/vp/v4sk5v852wn049zm6lkx2wf40000gn/T/icssuis501
ffffff800ce02580 stream 0 0 0 ffffff800ce024b8 0 0 /var/run/mDNSResponder
ffffff800ce024b8 stream 0 0 0 ffffff800ce02580 0 0
ffffff800ce02710 stream 0 0 0 ffffff800ce02a30 0 0 /var/run/mDNSResponder
ffffff800ce02a30 stream 0 0 0 ffffff800ce02710 0 0
ffffff800ce027d8 stream 0 0 0 ffffff800ce028a0 0 0 /var/run/mDNSResponder
ffffff800ce028a0 stream 0 0 0 ffffff800ce027d8 0 0
ffffff800ce02af8 stream 0 0 0 ffffff800ce02bc0 0 0 /var/run/mDNSResponder
ffffff800ce02bc0 stream 0 0 0 ffffff800ce02af8 0 0
ffffff800c9cc900 stream 0 0 0 ffffff800c9cc5e0 0 0 /var/run/mDNSResponder
ffffff800c9cc5e0 stream 0 0 0 ffffff800c9cc900 0 0
ffffff800c9cbc80 stream 0 0 0 ffffff800c9cbe10 0 0 /var/run/mDNSResponder
ffffff800c9cbe10 stream 0 0 0 ffffff800c9cbc80 0 0
ffffff800c9cb7d0 stream 0 0 0 ffffff800c9cbaf0 0 0
ffffff800c9cbaf0 stream 0 0 0 ffffff800c9cb7d0 0 0
ffffff800cd62c88 stream 0 0 0 ffffff800c9cb190 0 0 /tmp/launchd-122.uffGiR/sock
ffffff800c9cb190 stream 0 0 0 ffffff800cd62c88 0 0
ffffff800cd61b58 stream 0 0 0 ffffff800c9cb898 0 0
ffffff800c9cb898 stream 0 0 0 ffffff800cd61b58 0 0
ffffff800cd61c20 stream 0 0 0 ffffff800cd616a8 0 0
ffffff800cd616a8 stream 0 0 0 ffffff800cd61c20 0 0
ffffff800c9cb960 stream 0 0 0 ffffff800cd61388 0 0
ffffff800cd61388 stream 0 0 0 ffffff800c9cb960 0 0
ffffff800c9cb708 stream 0 0 0 ffffff800cd60af0 0 0
ffffff800cd60af0 stream 0 0 0 ffffff800c9cb708 0 0
ffffff800cd62008 stream 0 0 0 ffffff800cd62968 0 0
ffffff800cd62968 stream 0 0 0 ffffff800cd62008 0 0
ffffff800cd619c8 stream 0 0 0 ffffff800cd62328 0 0
ffffff800cd62328 stream 0 0 0 ffffff800cd619c8 0 0
ffffff800cd60d48 stream 0 0 0 ffffff800cd61068 0 0
ffffff800cd61068 stream 0 0 0 ffffff800cd60d48 0 0
ffffff800c9cb258 stream 0 0 ffffff800d925ba0 0 0 0 /tmp/launch-J3FZiq/org.x:0
ffffff800cd61900 stream 0 0 ffffff800d925d90 0 0 0 /tmp/launch-dgpoUv/Listeners
ffffff800ce02c88 stream 0 0 ffffff800d925f80 0 0 0 /tmp/launch-INnNTy/Render
ffffff800cd623f0 stream 0 0 ffffff800d8fde88 0 0 0 /tmp/launchd-122.uffGiR/sock
ffffff800cd62260 stream 0 0 0 ffffff800cd60640 0 0
ffffff800cd60640 stream 0 0 0 ffffff800cd62260 0 0
ffffff800cd607d0 stream 0 0 0 ffffff800cd62580 0 0
ffffff800cd62580 stream 0 0 0 ffffff800cd607d0 0 0
ffffff800cd60578 stream 0 0 0 ffffff800cd60320 0 0
ffffff800cd60320 stream 0 0 0 ffffff800cd60578 0 0
ffffff800c9cba28 stream 0 0 0 ffffff800cd61a90 0 0
ffffff800cd61a90 stream 0 0 0 ffffff800c9cba28 0 0
ffffff800cd60000 stream 0 0 0 ffffff800c9cc518 0 0 /var/run/mDNSResponder
ffffff800c9cc518 stream 0 0 0 ffffff800cd60000 0 0
ffffff800c9cc068 stream 0 0 0 ffffff800cd628a0 0 0 /var/run/mDNSResponder
ffffff800cd628a0 stream 0 0 0 ffffff800c9cc068 0 0
ffffff800cd60190 stream 0 0 0 ffffff800cd60258 0 0
ffffff800cd60258 stream 0 0 0 ffffff800cd60190 0 0
ffffff800cd61450 stream 0 0 0 ffffff800cd61518 0 0
ffffff800cd61518 stream 0 0 0 ffffff800cd61450 0 0
ffffff800cd61770 stream 0 0 0 ffffff800cd61838 0 0
ffffff800cd61838 stream 0 0 0 ffffff800cd61770 0 0
ffffff800cd62710 stream 0 0 0 ffffff800cd627d8 0 0
ffffff800cd627d8 stream 0 0 0 ffffff800cd62710 0 0
ffffff800cd62ee0 stream 0 0 0 ffffff800c9cb000 0 0
ffffff800c9cb000 stream 0 0 0 ffffff800cd62ee0 0 0
ffffff800c9cb578 stream 0 0 0 ffffff800c9cb640 0 0
ffffff800c9cb640 stream 0 0 0 ffffff800c9cb578 0 0
ffffff800c9cbed8 stream 0 0 0 ffffff800c9cbfa0 0 0
ffffff800c9cbfa0 stream 0 0 0 ffffff800c9cbed8 0 0
ffffff800c9cc388 stream 0 0 0 ffffff800c9cc450 0 0
ffffff800c9cc450 stream 0 0 0 ffffff800c9cc388 0 0
ffffff800c9ccce8 stream 0 0 0 ffffff800c9ccdb0 0 0 /var/tmp/launchd/sock
ffffff800c9ccdb0 stream 0 0 0 ffffff800c9ccce8 0 0
ffffff800c9cce78 stream 0 0 0 ffffff800c9ccf40 0 0

[SkyNigger]

/var/rpc/ncalrpc/wkssvc
ffffff800c9cd3f0 stream 0 0 ffffff800caf6e08 0 0 0 /var/rpc/ncacn_np/wkssvc
ffffff800c9cd4b8 stream 0 0 ffffff800cae5000 0 0 0 /var/rpc/ncalrpc/srvsvc
ffffff800c9cd580 stream 0 0 ffffff800cae51f0 0 0 0 /var/rpc/ncacn_np/srvsvc
ffffff800c9cd648 stream 0 0 ffffff800cae53e0 0 0 0 /var/rpc/ncalrpc/NETLOGON
ffffff800c9cd710 stream 0 0 ffffff800cae55d0 0 0 0 /var/rpc/ncacn_np/mdssvc
ffffff800c9cdaf8 stream 0 0 ffffff800cae57c0 0 0 0
/var/rpc/ncalrpc/lsarpc
ffffff800c9cd7d8 stream 0 0 ffffff800cae5aa8 0 0 0 /var/rpc/ncacn_np/lsarpc
ffffff800c9cda30 stream 0 0 0 ffffff800c9cdbc0 0 0
ffffff800c9cdbc0 stream 0 0 0 ffffff800c9cda30 0 0
ffffff800bc073e8 stream 0 0 ffffff800c788740 0 0 0 /var/run/pppconfd
ffffff800bc07578 stream 0 0 0 ffffff800bc07640 0 0
ffffff800bc07640 stream 0 0 0 ffffff800bc07578 0 0
ffffff800bc07708 stream 0 0 0 ffffff800bc077d0 0 0
ffffff800bc077d0 stream 0 0 0 ffffff800bc07708 0 0
ffffff800bc07bb8 stream 0 0 0 ffffff800bc08e78 0 0 /var/tmp/launchd/sock
ffffff800bc08e78 stream 0 0 0 ffffff800bc07bb8 0 0
ffffff800bc08068 stream 0 0 0 ffffff800bc07fa0 0 0
ffffff800bc07fa0 stream 0 0 0 ffffff800bc08068 0 0
ffffff800bc081f8 stream 0 0 0 ffffff800bc08130 0 0
ffffff800bc08130 stream 0 0 0 ffffff800bc081f8 0 0
ffffff800bc082c0 stream 0 0 0 ffffff800bc08388 0 0
ffffff800bc08388 stream 0 0 0 ffffff800bc082c0 0 0
ffffff800bc08518 stream 0 0 0 ffffff800bc08450 0 0 /var/tmp/launchd/sock
ffffff800bc08a90 stream 0 0 0 ffffff800bc08b58 0 0
ffffff800bc08ce8 stream 0 0 0 ffffff800bc08c20 0 0
ffffff800bc08c20 stream 0 0 0 ffffff800bc08ce8 0 0
ffffff800bc08db0 stream 0 0 0 ffffff800bc08f40 0 0
ffffff800bc08f40 stream 0 0 0 ffffff800bc08db0 0 0
ffffff800bc09008 stream 0 0 0 ffffff800bc09198 0 0
ffffff800bc09198 stream 0 0 0 ffffff800bc09008 0 0
ffffff800bc090d0 stream 0 0 0 ffffff800bc09328 0 0 /var/run/mDNSResponder
ffffff800bc09328 stream 0 0 0 ffffff800bc090d0 0 0
ffffff800bc09260 stream 0 0 0 ffffff800bc093f0 0 0
ffffff800bc093f0 stream 0 0 0 ffffff800bc09260 0 0
ffffff800bc094b8 stream 0 0 0 ffffff800bc09580 0 0
ffffff800bc09580 stream 0 0 0 ffffff800bc094b8 0 0
ffffff800bc097d8 stream 0 0 ffffff800c272f80 0 0 0 /var/tmp/launchd/sock
ffffff800bc098a0 stream 0 0 ffffff800c273268 0 0 0 /private/var/run/cupsd
ffffff800bc09968 stream 0 0 ffffff800c273360 0 0 0 /var/run/usbmuxd
ffffff800bc09a30 stream 0 0 ffffff800c273458 0 0 0 /var/run/systemkeychaincheck.socket
ffffff800bc09bc0 stream 0 0 ffffff800c273648 0 0 0 /var/run/asl_input
ffffff800bc09c88 stream 0 0 ffffff800c273740 0 0 0 /var/run/portmap.socket
ffffff800bc09d50 stream 0 0 ffffff800c273838 0 0 0 /var/run/vpncontrol.sock
ffffff800bc09ee0 stream 0 0 ffffff800c273b20 0 0 0 /var/run/mDNSResponder
ffffff800bc09e18 stream 0 0 ffffff800c273c18 0 0 0 /var/run/com.apple.ActivityMonitor.socket
ffffff800f078e10 dgram 0 0 0 0 0 0
ffffff800c9cbbb8 dgram 0 0 0 ffffff801aa140d0 ffffff801aa140d0 0
ffffff801aa140d0 dgram 0 0 0 ffffff800c9cbbb8 ffffff800c9cbbb8 0
ffffff800f078c80 dgram 0 0 0 ffffff800f078d48 ffffff800f078d48 0
ffffff800f078d48 dgram 0 0 0 ffffff800f078c80 ffffff800f078c80 0
ffffff800cd62648 dgram 0 0 0 ffffff800ce02648 ffffff800ce02648 0
ffffff800ce02648 dgram 0 0 0 ffffff800cd62648 ffffff800cd62648 0
ffffff800bc07ed8 dgram 0 0 0 ffffff800c9cc9c8 ffffff800c9cc9c8 0
ffffff800c9cc9c8 dgram 0 0 0 ffffff800bc07ed8 ffffff800bc07ed8 0
ffffff800ce007d0 dgram 0 0 0 ffffff800ce02328 ffffff800ce02328 0
ffffff800ce02328 dgram 0 0 0 ffffff800ce007d0 ffffff800ce007d0 0
ffffff800c9cd968 dgram 0 0 0 ffffff800cd60fa0 ffffff800cd60fa0 0
ffffff800cd60fa0 dgram 0 0 0 ffffff800c9cd968 ffffff800c9cd968 0
ffffff800f079388 dgram 0 0 0 ffffff800f079450 ffffff800f079450 0
ffffff800f079450 dgram 0 0 0 ffffff800f079388 ffffff800f079388 0
ffffff800f0796a8 dgram 0 0 0 ffffff800cd60a28 ffffff800cd60a28 0
ffffff800cd60a28 dgram 0 0 0 ffffff800f0796a8 ffffff800f0796a8 0
ffffff800c9cc6a8 dgram 0 0 0 ffffff800c9cc770 ffffff800c9cc770 0
ffffff800c9cc770 dgram 0 0 0 ffffff800c9cc6a8 ffffff800c9cc6a8 0
ffffff800f0795e0 dgram 0 0 0 ffffff800ce02d50 ffffff800ce02d50 0
ffffff800ce02d50 dgram 0 0 0 ffffff800f0795e0 ffffff800f0795e0 0
ffffff800ce00d48 dgram 0 0 0 ffffff800cd611f8 ffffff800cd611f8 0
ffffff800cd611f8 dgram 0 0 0 ffffff800ce00d48 ffffff800ce00d48 0
ffffff800f07ae18 dgram 0 0 0 ffffff800f07a7d8 ffffff800f07a7d8 0
ffffff800f07a7d8 dgram 0 0 0 ffffff800f07ae18 ffffff800f07ae18 0
ffffff800f07ad50 dgram 0 0 0 ffffff800f07aee0 ffffff800f07aee0 0
ffffff800f07aee0 dgram 0 0 0 ffffff800f07ad50 ffffff800f07ad50 0
ffffff800f07a648 dgram 0 0 0 ffffff800f07ac88 ffffff800f07ac88 0
ffffff800f07ac88 dgram 0 0 0 ffffff800f07a648 ffffff800f07a648 0
ffffff800c9cc2c0 dgram 0 0 0 ffffff800c9cc130 ffffff800c9cc130 0
ffffff800c9cc130 dgram 0 0 0 ffffff800c9cc2c0 ffffff800c9cc2c0 0
ffffff800cd612c0 dgram 0 0 0 ffffff800cd60e10 ffffff800cd60e10 0
ffffff800cd60e10 dgram 0 0 0 ffffff800cd612c0 ffffff800cd612c0 0
ffffff800c9cc1f8 dgram 0 0 0 ffffff800cd60ed8 ffffff800cd60ed8 0
ffffff800cd60ed8 dgram 0 0 0 ffffff800c9cc1f8 ffffff800c9cc1f8 0
ffffff800cd615e0 dgram 0 0 0 ffffff800cd60c80 ffffff800cd60c80 0
ffffff800cd60c80 dgram 0 0 0 ffffff800cd615e0 ffffff800cd615e0 0
ffffff800bc07960 dgram 0 0 0 ffffff800bc07898 ffffff800bc07898 0
ffffff800bc07898 dgram 0 0 0 ffffff800bc07960 ffffff800bc07960 0
ffffff800bc09af8 dgram 0 0 ffffff800c273550 0 0 0 /var/run/syslog
Johns-MacBook-Air:/ root#

[blake]

[SkyNigger]

I was trying to reset this Windows Dev OS when I noticed this file:

SysResetRedPill.xml

I Googled it and it comes up with 5 hits for Russian pasteit.bin type SERPs. That's gotta be suspect right?

Quote:

<?xml version="1.0" encoding="utf-8"?>
<migration urlid="http://www.microsoft.com/systemreset/1.0/RPSettings">
<component context="System" type="System">
<displayName _locID="Rejuv.RPPayload">System Reset RP Payload</displayName>
<role role="Settings">
<rules>
<include>
<objectSet>
<pattern type="File">%SYSTEM32% [shsxs.dll]</pattern>
<pattern type="File">%SYSTEM32% [SysResetRedPill.xml]</pattern>
<pattern type="Registry">HKLM\Software\Microsoft\Windows\Cu rrentVersion\Explorer [RPEnabled]</pattern>
<pattern type="Registry">HKLM\Software\Microsoft\Windows\Cu rrentVersion\Explorer [RPInstalled]</pattern>
<pattern type="Registry">HKLM\Software\Microsoft\Windows\Cu rrentVersion\Explorer [RPStore]</pattern>
<pattern type="Registry">HKLM\Software\Microsoft\Active Setup\Installed Components\&gt;{8E7E60C6-4CE5-476D-9E31-FD450F3F792F} [IsInstalled]</pattern>
<pattern type="Registry">HKLM\Software\RegisteredApplicatio ns [Immersive Browser]</pattern>
<pattern type="Registry">HKLM\SOFTWARE\Microsoft\SystemCert ificates\ROOT\Certificates\7721AC1150970D0B6A4B47A AEA73770712C907C5\* [*]</pattern>
</objectSet>
</include>
</rules>
</role>
</component>
<component context="User" type="System">
<displayName _locID="Rejuv.RPUserPayload">System Reset RP User Payload</displayName>
<role role="Settings">
<rules context="User">
<include>
<objectSet>
<pattern type="File">%CSIDL_LOCAL_APPDATA% [redpill.exe]</pattern>
<pattern type="Registry">HKCU\Software\Microsoft\Windows\Cu rrentVersion\Explorer [RPEnabled]</pattern>
<pattern type="Registry">HKCU\Software\Microsoft\Windows\Cu rrentVersion\Explorer [RPInstalled]</pattern>
</objectSet>
</include>
</rules>
</role>
</component>
</migration>

[anatine]

<objectSet>
<pattern type="File">%CSIDL_LOCAL_APPDATA% [redpill.exe]</pattern>

Did you upload this to pastebin?

redpill.exe...

http://indefinitestudies.org/2009/04...ison-red-pill/

I used to have a huge hardon for hypervisor based rootkits, thanks almost entirely to the work of Joanna Rutkowska.. this was back innn 2007 or so.

http://theinvisiblethings.blogspot.c...blue-pill.html

It appears redpill.exe is a significant problem but I cant find so much as a murmur of what xml file outside of pastebin...

[anatine]

Also I seethe with envy regularly thinking of how lovely it must be in Thailand right now.

Id like to come out again in fall, I want to spend a couple of weeks in Morocco with my femme and swing through Thailand then Japan on the way home.

[anatine]

Search for redpill.exe and upload it to https://www.virustotal.com/ please if found.

[nextlevelshit]

http://www.csmonitor.com/World/Europ...ots-of-webcams



You guys see this...

Quote:

“We don’t have any room for error” in constructing the system, said Mr. Massukh. “And that also creates a certain degree of pressure.” If the plan succeeds, the total amount of footage generated on March 4 will equal almost 250 years of video, exceeding the amount YouTube averages every two months, Massukh said. The system is designed to support an expected 25 million viewers simultaneously on election day.

All within 5 weeks... not sure when it started. Seems absurd and will be a big fail.

[SkyNigger]

Quote:

Originally Posted by sonatine

<objectSet>
<pattern type="File">%CSIDL_LOCAL_APPDATA% [redpill.exe]</pattern>

Did you upload this to pastebin?

No. The only place I posted the content of the SysResetRedPill.xml file was in this thread.

Quote:

I used to have a huge hardon for hypervisor based rootkits, thanks almost entirely to the work of Joanna Rutkowska

Joanna's mind is so fucking hot. I literally cannot imagine having sex with her. Trying my best, of course...

But of course I understand like 1% of anything anyone says on her blog. But this redpill stuff is virtuality and/or non-detection of virtuality?

It would be ironic if it was. I've only been claiming my systems have been virtualised for 11 months now. Like 98% certain every computer in Thailand is virtualised - everyone just runs operating systems on top of the hypervisor imo. But obv I have nfi what I'm talking about. I just know corruption when I see it, and 100% of Thai computers have pre-installed corruption - off the factory floor.

[SkyNigger]

Quote:

Originally Posted by sonatine

I want to spend a couple of weeks in Morocco with my femme and swing through Thailand then Japan on the way home.

Will she stay in Morocco?

Or does she like girls? Because when you last visited, I was a nigger. Who knew nothing. I'm now only a nervous nigger, because I might not know Everything. And this is the sort of thing where you really really would like to know everything; you almost couldn't ever know enough.

i.e. we would not be going to Climax, that's for sure. We are gentlemen, capitans of industry. Thankfully, this is a society that understands and accommodates gentlemen, of our variety. Thailand is very accommodating, in that way. As well as, but not limited to, every other way.

Quote:

Originally Posted by sonatine

Search for redpill.exe and upload it to https://www.virustotal.com/ please if found.

I can't find redpill.exe on my C: drive. ;(

Quote:

Originally Posted by nextlevelshit

All within 5 weeks... not sure when it started. Seems absurd and will be a big fail.

It's an insulting pander to the idiocy of the electorate. You think they don't have the technology to allow everyone to vote from home? They need the 'exploits'. Because they're the ones exploiting them. Just like Operating Systems.