Re: [TSCM-L] {5099} USB key logger

From: <socal..._at_aol.com>
Date: Tue, 19 Oct 2010 18:11:00 -0400

>From - Sat Mar 02 00:57:23 2024
Received: by 10.216.241.70 with SMTP id f48mr54171wer.0.1287155120499;
        Fri, 15 Oct 2010 08:05:20 -0700 (PDT)
X-BeenThere: tscm-l2006_at_googlegroups.com
Received: by 10.216.213.1 with SMTP id z1ls1604067weo.1.p; Fri, 15 Oct 2010
 08:05:13 -0700 (PDT)
Received: by 10.216.82.17 with SMTP id n17mr48932wee.6.1287155113200;
        Fri, 15 Oct 2010 08:05:13 -0700 (PDT)
Received: by 10.227.28.68 with SMTP id l4mr50166wbc.4.1287152029478;
        Fri, 15 Oct 2010 07:13:49 -0700 (PDT)
Received: by 10.227.28.68 with SMTP id l4mr50165wbc.4.1287152029414;
        Fri, 15 Oct 2010 07:13:49 -0700 (PDT)
Return-Path: <Jason..._at_qcc.co.uk>
Received: from qccsrv13.qcc.local (188-220-57-67.zone11.bethere.co.uk [188.220.57.67])
        by gmr-mx.google.com with ESMTP id ep20si1424396wbb.7.2010.10.15.07.13.49;
        Fri, 15 Oct 2010 07:13:49 -0700 (PDT)
Received-SPF: neutral (google.com: 188.220.57.67 is neither permitted nor denied by best guess record for domain of Jason..._at_qcc.co.uk) client-ip=188.220.57.67;
Authentication-Results: gmr-mx.google.com; spf=neutral (google.com: 188.220.57.67 is neither permitted nor denied by best guess record for domain of Jason..._at_qcc.co.uk) smtp.mail=Jason..._at_qcc.co.uk
Received: from qccsrv13.qcc.local ([10.1.0.13]) by qccsrv13.qcc.local
 ([10.1.0.13]) with mapi; Fri, 15 Oct 2010 15:13:48 +0100
From: Jason Dibley <Jason..._at_qcc.co.uk>
To: "tscm-..._at_googlegroups.com" <tscm-..._at_googlegroups.com>
Date: Fri, 15 Oct 2010 15:13:46 +0100
Subject: USB key logger
Thread-Topic: USB key logger
Thread-Index: Actscy6ehSG1P3LeRtuhG1tDdBZliQ==
Message-ID: <43E1A65ED32E444C9DBE53F853C1E4784C61B50971_at_qccsrv13.qcc.local>
Accept-Language: en-US, en-GB
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
acceptlanguage: en-US, en-GB
Content-Type: multipart/mixed;
        boundary="_002_43E1A65ED32E444C9DBE53F853C1E4784C61B50971qccsrv13qcclo_"
MIME-Version: 1.0

--_002_43E1A65ED32E444C9DBE53F853C1E4784C61B50971qccsrv13qcclo_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Dear Group,

I have an incident running where we have found a USB key logger on a comput=
er. We have tried many of the different default three key combinations to o=
pen the device, but thus far all have failed. I suspect that the password h=
ad been changed from the default.

Do any list members have know of any other default pass combinations other =
than the ones below:

SBK
XVP
123
Vghostlog
SVL
VMP
KBS

Any suggestions would be appreciated, before we have to consider other meth=
ods to open it.

Kind Regards

Jason Dibley

Jason Miles Dibley Dip Eng (hons) MSyI CCO
Company TSCM Director
QCC Interscan Ltd.
Buchanan House,
24-30 Holborn,
London EC1N 2LX,
England.
Web: http://www.qcc.co.uk/

February 2009: QCC Interscan Ltd launches an informative new website. Pleas=
e visit our new site at www.qcc.co.uk<www.qcc.co.uk%20> , for the true fact=
s about information theft and how to mitigate it.

February 2010: Searchlight QCC Launches the worlds first reliable GSM eaves=
dropping detection system.






--_002_43E1A65ED32E444C9DBE53F853C1E4784C61B50971qccsrv13qcclo_
Content-Type: image/jpeg; name="Picture (Device Independent Bitmap) 1.jpg"
Content-Description: Picture (Device Independent Bitmap) 1.jpg
Content-Disposition: attachment;
        filename="Picture (Device Independent Bitmap) 1.jpg";
        creation-date="Fri, 15 Oct 2010 15:13:47 GMT";
        modification-date="Fri, 15 Oct 2010 15:13:47 GMT"
Content-Transfer-Encoding: base64
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--_002_43E1A65ED32E444C9DBE53F853C1E4784C61B50971qccsrv13qcclo_--
Received on Sat Mar 02 2024 - 00:57:23 CST

This archive was generated by hypermail 2.3.0 : Sat Mar 02 2024 - 01:11:45 CST