Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

'Flatten and Rebuild' concerns

9 views
Skip to first unread message

~BD~

unread,
Sep 14, 2008, 8:26:43 AM9/14/08
to
Earlier this year I started a thread expressing concern about the MBR virus. I had many replies and
again thank everyone for their contributions.

The thread is still available on Google, here:-

http://groups.google.co.uk/group/microsoft.public.security.virus/browse_thread/thread/5779fa422ba9af96/ee5f99b403a1e451?hl=en&lnk=gst&q=I've+done+both+of+these+'silly+things'!+#ee5f99b403a1e451

The final post in that thread was from '-jen' . I noted with dismay that I failed to acknowledge
his/her advice and apologise now for my oversight!

This was the advice given:-

The OP's OS is XP. He should instead boot from the Recovery Console and

type: fixmbr.
Fixmbr Command Syntax:

fixmbr (device_name):

device_name = This is where you designate the exact drive location that
a master boot record will be written to. If no device is specified, the
master boot record will be written to the primary boot drive.
Fixmbr Command Examples:

fixmbr \Device\HardDisk0

In the above example, the master boot record is written to the drive
located at \Device\HardDisk0.

fixmbr:

In this example, the master boot record is written to the device that
your primary system is loaded onto. If you have a single installation of
Windows installed, which is normally the case, running the fixmbr
command in this way is usually the right way to go.
Fixmbr Command Availability:

The fixmbr command is only available from within the Recovery Console in
Windows 2000 and Windows XP.

-jen
*************************************

I've now asked for specific advice on the Malwarebytes forum, here:
http://www.malwarebytes.org/forums/index.php?showtopic=6302

If anyone reading here feels they can add to the discussion, I'd welcome their views. TIA

Dave

--


Paul Adare - MVP

unread,
Sep 14, 2008, 8:33:50 AM9/14/08
to
On Sun, 14 Sep 2008 13:26:43 +0100, ~BD~ wrote:

> I've now asked for specific advice on the Malwarebytes forum, here:
> http://www.malwarebytes.org/forums/index.php?showtopic=6302
>
> If anyone reading here feels they can add to the discussion, I'd welcome their views. TIA

Please stop referencing threads from external web forums here. If you want
to participate here, great, post your question here, please don't use this
group as a referral to outside forums.

--
Paul Adare
MVP - Identity Lifecycle Manager
http://www.identit.ca
Code: Virus lasting about three to five days, accompanied by sore throat,
runny nose and fever.

BoaterDave

unread,
Sep 14, 2008, 10:32:19 AM9/14/08
to
On 14 Sep, 13:33, Paul Adare - MVP <pkad...@gmail.com> wrote:
> On Sun, 14 Sep 2008 13:26:43 +0100, ~BD~ wrote:
> > I've now asked for specific advice on the Malwarebytes forum, here:
> >http://www.malwarebytes.org/forums/index.php?showtopic=6302
>
> > If anyone reading here feels they can add to the discussion, I'd welcome their views. TIA
>
> Please stop referencing threads from external web forums here. If you want
> to participate here, great, post your question here, please don't use this
> group as a referral to outside forums.
>
> --
> Paul Adare

I hear what you say, Mr Paul Adare, but you don't moderate the posts
here.

The Google thread *was* a Microsoft thread but has lapsed, no doubt
due to the 90 day retention rule, of which I'm sure you will be aware.
Rather than re-invent the wheel, I deemed it appropriate to refer back
to it.

Perhaps you should read it and then, based on your no-doubt superior
knowledge of computing and security matters, you might make a useful
contribution to the debate.

I mention the Malwarebytes forum because I have found the folk there
helpful and knowledgeable. They will answer questions on any subject.
When I first came to the MS Communities newsgroups I had thought that
they were run and staffed by Microsoft. Choosing which group to post
in proved to be very hit-and-miss; I'm quite sure many of those
posting their problems can never find the answers given! Perhaps
Microsoft ought to consider setting up a Web Forum which IS staffed by
its own people - or even by MVP's - they *could* then moderate it!

As you have said please, though, I will endeavour to comply with your
request! <smile>

Dave

--

What's in a Name?

unread,
Sep 14, 2008, 2:35:11 PM9/14/08
to
In <e2WPfUm...@TK2MSFTNGP05.phx.gbl>~BD~ aka
Boate...@nospam.invalid after much thought, came up with this jewel:

I have used the fixmbr on a dual boot w2k/linux setup-worked well to
restore the w2k bootup after removal of linux.
max
--
Virus Removal http://max.shplink.com/removal.html
Keep Clean http://max.shplink.com/keepingclean.html
Change nomail.afraid.org to gmail.com to reply by email.
nomail.afraid.org is for use in USENET-feel free to use it yourself.

BoaterDave

unread,
Sep 14, 2008, 5:58:40 PM9/14/08
to
On 14 Sep, 19:35, "What's in a Name?" <maxwach...@nomail.afraid.org>
wrote:
> In <e2WPfUmFJHA....@TK2MSFTNGP05.phx.gbl>~BD~ aka
> BoaterD...@nospam.invalid after much thought, came up with this jewel:
> Keep Cleanhttp://max.shplink.com/keepingclean.html

> Change nomail.afraid.org to gmail.com to reply by email.
> nomail.afraid.org is for use in USENET-feel free to use it yourself.- Hide quoted text -
>
> - Show quoted text -

That's good to know! Thanks, Max

Dave

--

~BD~

unread,
Sep 15, 2008, 10:45:16 AM9/15/08
to
From my pal in Austalia - Enjoy! :)


A Queensland farmer is overseeing his stock in remote territory when
suddenly a brand-new BMW advances out of a dust cloud towards him.
The driver, a young man in a designer suit, Gucci shoes, Ray Ban
sunglasses and YSL tie, leans out the window and asks the grazier,

*"If I tell you exactly how many cows and calves you have in your
herd, will you give me a Calf?"*

The farmer looks at the man, obviously a yuppie, then looks at his
peacefully grazing stock and calmly answers, *"Sure, why not?"*

The yuppie parks his car, whips out his Dell notebook computer,
connects it to his Cingular RAZR V3 cell phone, and surfs to a NASA
page on the Internet, where he calls up a GPS satellite navigation
system to get an exact fix on his location which he then feeds to
another NASA satellite that scans the area in an
ultra-high-resolution photo. The young man then opens the digital
photo in Adobe Photoshop and exports it to an image processing
facility in Hamburg, Germany.

Within seconds, he receives an email on his Palm Pilot that the image
has been processed and the data stored. He then accesses a MS-SQL
database through an ODBC connected Excel Spreadsheet with email on
his Blackberry and, after a few minutes, receives a response.
Finally, he prints out a full-colour, 150-page report on his hi-tech,
miniaturized HP LaserJet printer and finally turns to the cowboy and
says, *"You have exactly 1,586 cows and calves."*

*"That's right. Well, I guess you can take one of my calves,"* says
the grazier.

He watches the young man select one of the animals and looks on
amused as the young man stuffs it into the boot of his car.

Then the farmer says to the young man, *"Hey, if I can tell you
exactly what your business is, will you give me back my calf?"*

The young man thinks about it for a second and then says, *"Okay, why
not?"*

*"You work for the Australian Government,"* says the farmer.

*"Wow! That's correct,"* says the yuppie, *"but how did you guess
that?"*

*"No guessing required."* answered the farmer. *"You showed up here
even though nobody called you; you want to get paid for an answer I
already knew, to a question I never asked. You used all kinds of
expensive equipment that clearly somebody else paid for, You tried to
show me how much smarter than me you are; and you don't know a thing
about cows .. this is a flock of sheep. Now give me back my dog."*


Tom [Pepper] Willett

unread,
Sep 15, 2008, 10:56:35 AM9/15/08
to
Why post your drivel here? You trying to turn this into your personal chat
room?

"~BD~" <Boate...@nospam.invalid> wrote in message
news:u3hdkG0F...@TK2MSFTNGP04.phx.gbl...
: From my pal in Austalia - Enjoy! :)
:


Paul Adare - MVP

unread,
Sep 15, 2008, 11:05:19 AM9/15/08
to
On Mon, 15 Sep 2008 15:45:16 +0100, ~BD~ wrote:

> From my pal in Austalia - Enjoy! :)

This is not a social site. Please don't post this off-topic crap here.
Stick to the topic.
No wonder you've been banned from a number of web forums.

--
Paul Adare
MVP - Identity Lifecycle Manager
http://www.identit.ca

Profanity is the one language all programmers know best.

PA Bear [MS MVP]

unread,
Sep 15, 2008, 1:05:10 PM9/15/08
to
Paul Adare - MVP wrote:
> On Mon, 15 Sep 2008 15:45:16 +0100, ~BD~ wrote:
>
>> From my pal in Austalia - Enjoy! :)
>
> This is not a social site. Please don't post this off-topic crap here.
> Stick to the topic.
> No wonder you've been banned from a number of web forums.

And several ISPs.

~BD~

unread,
Sep 15, 2008, 4:56:17 PM9/15/08
to

"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:%23BUiDV1...@TK2MSFTNGP02.phx.gbl...

You know full well that that is NOT the truth, Robear Dyer.

*You* are now standing into danger - mark my words!

Dave


~BD~

unread,
Sep 15, 2008, 5:02:07 PM9/15/08
to

"Paul Adare - MVP" <pka...@gmail.com> wrote in message
news:1wtaxnj2hh3c5$.rab7oi72fqkl.dlg@40tude.net...

--

Readers - look at this page http://www.identit.ca/clm.html

Would you trust/believe ......... obey! ............. an executive of a company who has an
out-of-date web site?

In particular .............

The following dates have been booked for ILM 2007 Training:

a.. Mississauga, Ontario, Canada - November 13 - 16, 2007 - Click here to register!


Paul Adare - MVP

unread,
Sep 15, 2008, 5:08:50 PM9/15/08
to
On Mon, 15 Sep 2008 22:02:07 +0100, ~BD~ wrote:

> Would you trust/believe

Yawn.

Get over yourself.

--
Paul Adare
MVP - Identity Lifecycle Manager
http://www.identit.ca

In computer science, we stand on each other's feet. -- Brian Reid

David H. Lipman

unread,
Sep 15, 2008, 5:24:02 PM9/15/08
to
From: "~BD~" <Boate...@nospam.invalid>

| Readers - look at this page http://www.identit.ca/clm.html

| Would you trust/believe ......... obey! ............. an executive of a company who has
| an
| out-of-date web site?

| In particular .............

| The following dates have been booked for ILM 2007 Training:

| a.. Mississauga, Ontario, Canada - November 13 - 16, 2007 - Click here to register!


Please STOP you foolish rants!

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


BoaterDave

unread,
Sep 16, 2008, 2:08:44 AM9/16/08
to
On Sep 15, 3:56 pm, "Tom [Pepper] Willett"

<t...@youreadaisyifyoudo.com> wrote:
> Why post your drivel here?  You trying to turn this into your personal chat
> room?
>
> "~BD~" <BoaterD...@nospam.invalid> wrote in message

>
> news:u3hdkG0F...@TK2MSFTNGP04.phx.gbl...
> : From my pal in Austalia - Enjoy!  :)
> :

Mr Willett

What I am after is a response to my question.

The purpose of my post was two-fold:-

1. Highlight the thread in newsreaders

2. Provide some amusement for miseries like you!

Lighten up!

Dave

Tom [Pepper] Willett

unread,
Sep 16, 2008, 8:59:26 AM9/16/08
to
Go away, nut job.

"BoaterDave" <Boate...@hotmail.co.uk> wrote in message
news:8fc6f8b1-cf26-42a5...@p25g2000hsf.googlegroups.com...

Leonard Grey

unread,
Sep 16, 2008, 9:23:27 AM9/16/08
to
Can the powers that be please consider banning Boater Dave from this
newsgroup? He's certainly not the worst offender this newsgroup has
seen, but there comes a time when the best interests of the group have
to prevail. I believe he's had more than his share of chances to shape up.
---
Leonard Grey
Errare humanum est

Paul Adare - MVP

unread,
Sep 16, 2008, 9:29:24 AM9/16/08
to
On Tue, 16 Sep 2008 09:23:27 -0400, Leonard Grey wrote:

> Can the powers that be please consider banning Boater Dave from this
> newsgroup? He's certainly not the worst offender this newsgroup has
> seen, but there comes a time when the best interests of the group have
> to prevail. I believe he's had more than his share of chances to shape up.

Unfortunately, unlike web forums, there really isn't any way to ban
individual users via NNTP. We're stuck with him.

--
Paul Adare
MVP - Identity Lifecycle Manager
http://www.identit.ca

All computers run at the same speed... with the power off.

Peter Foldes

unread,
Sep 16, 2008, 9:51:34 AM9/16/08
to
Tom

With Dave the lights are on but nobody at home
--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"Tom [Pepper] Willett" <t...@youreadaisyifyoudo.com> wrote in message news:uwzDVw$FJHA...@TK2MSFTNGP02.phx.gbl...

Leythos

unread,
Sep 16, 2008, 10:01:59 AM9/16/08
to
In article <lvy7xk406ihi.12q7vvx3rj63p$.d...@40tude.net>,
pka...@gmail.com says...

> Unfortunately, unlike web forums, there really isn't any way to ban
> individual users via NNTP. We're stuck with him.
>

Actually, if he posts through the MS Usenet forum, either directly or
through the web, MS can cancel his posts on THEIR servers.

As for banning - if you can show a clear and direct violation of a
groups charter, many ISP's will warn and then disconnect the user for
additional violations.

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam9...@rrohio.com (remove 999 for proper email address)

PA Bear [MS MVP]

unread,
Sep 16, 2008, 11:21:34 AM9/16/08
to
Given enough complaints, his current ISP will probably drop him soon just
like the previous 5 or 6 he's used (including AOL).

Leonard Grey wrote:
> Can the powers that be please consider banning Boater Dave from this
> newsgroup? He's certainly not the worst offender this newsgroup has
> seen, but there comes a time when the best interests of the group have
> to prevail. I believe he's had more than his share of chances to shape up.

<snip>

Heather

unread,
Sep 16, 2008, 12:23:02 PM9/16/08
to
Why not either use your killfile to *block sender* or make up a Message
Rule with any or all of the names he uses. And then trust that no one
answering him repeats his drivel!!

"Leonard Grey" <l.g...@not.valid.net> wrote in message
news:eDo9n9$FJHA...@TK2MSFTNGP04.phx.gbl...

FromTheRafters

unread,
Sep 16, 2008, 2:17:11 PM9/16/08
to
You are posting to three groups - and yet refer to "this"
group. Therefore I have no choice but to ban him from
all three.

Dave, you are hereby banned from posting in "this"
newsgroup.

So speaks Pharaoh.
So, it is written.
So, it shall be done.

Other powers that be - feel free to chime in. :o)

"Leonard Grey" <l.g...@not.valid.net> wrote in message
news:eDo9n9$FJHA...@TK2MSFTNGP04.phx.gbl...

~BD~

unread,
Sep 16, 2008, 4:35:19 PM9/16/08
to

"FromTheRafters" <Err...@ne.rr.com> wrote in message
news:e3%23ociCG...@TK2MSFTNGP02.phx.gbl...

>
> Dave, you are hereby banned from posting in "this"
> newsgroup.

Awe, shucks! Thanks for telling me FTR! ;-)

Just wondering - did *you* smile when you reached "Now give me back my dog."?

As I'm now banned in "this" newsgroup, I'd better refrain from posting this post from another
thread:-

"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message

news:OG6YUCRF...@TK2MSFTNGP04.phx.gbl...

> That must be BD's fifth or sixth ISP in as many years. Wonder why he keeps switching...or having
> to switch? <w>

You are not often wrong Robear, but you are this time!

Ten years ago I subscribed to Freeserve. Freeserve were bought by Wanadoo.Wanadoo was bought by
Orange. I remained with them throughout the changes.

After the theft of my identity in 2005, I elected to take advantage of a Broadband package being
offered by AOL which included a Netgear router to enable wireless connection. I joined in early 2006
and I have been with AOL ever since (albeit that shortly after I became a subscriber, AOL UK was
hived off by parent group Time Warner )

Although still trading as AOL UK, the company has been bought by Carphone Warehouse and is the third
largest ISP in the UK.

So, that's really just *TWO* ISP's in ten years.

Earlier this year I took advantage of the newly available 3G Mobile Broadband technology so that I
can use my laptop for Internet connection when I am cruising the British Waterays on my narrowboat.
This *additional* ISP is called 'Three'.

HTH - it's the truth! See
http://www.malwarebytes.org/forums/index.php?showtopic=5656&st=20&gopid=27599&#entry27599

Dave

PS Could you provide me with a copy of the long thread I started at Aumha regarding Annexcafe?
Maybe it's gone forever!
---------------------------------------------

When I first ventured into the newsgroup area through the MS Communities server, I took all comments
from the likes of PA Bear 'on trust'. I am aware - now - that one cannot in any way be sure that a
post has actually been made by a specific individual unless one checks IP addresses; even then, one
cannot be sure.

*I* know that the 'identity' posting in this thread as PA Bear has lied. Others may think whatever
they like.

No longer do I trust the initials MVP - nor the supposed folk that abuse that status (if, indeed,
they do!). It could well be someone else masquerading as same.

FWIW

Dave

~BD~

unread,
Sep 17, 2008, 7:16:08 AM9/17/08
to

"Leonard Grey" <l.g...@not.valid.net> wrote in message news:eDo9n9$FJHA...@TK2MSFTNGP04.phx.gbl...
> Can the powers that be please consider banning Boater Dave from this newsgroup? He's certainly not
> the worst offender this newsgroup has seen, but there comes a time when the best interests of the
> group have to prevail. I believe he's had more than his share of chances to shape up.
> ---
> Leonard Grey
> Errare humanum est

You are, of course, entitled to a view Mr Grey but, as explained already, there are NO 'powers that
be'!

I believe that *you* are here in these groups to try to help and guide less experienced folk and for
that I thank you (also on behalf of the many that never return to say 'thank you'!). I may of course
be mistaken! <wink>

Now, perhaps you could help me to better understand Header information? When I first came 'here' I
had no knowledge of message 'Properties' at all. I'm still a little 'in the dark'. I've tended, like
I'm confident most visitors do, to accept the 'Nick' of someone posting to represent who they
really are - *especially* if a well know 'helper' is involved.

I've also learned that an IP address is attributable to each and every computer so I'm a little
confused when I compare the header information I show below. The poster seems to have two different
IP addresses 71.173.71.14 and also 24.115.13.114. Perhaps there is a very simple reason for this.
Perhaps you and/or others will comment so that I may better understand. Thank you.

******************************

Reply-To: "PA Bear [MS MVP]" <moc.liamg@PVMraeBAP>
From: "PA Bear [MS MVP]" <PABe...@gmail.com>
References: <C32A72E4-F29D-4F1F...@microsoft.com>
Subject: Re: my windows update will not turn on
Date: Mon, 18 Aug 2008 09:28:18 -0400
Lines: 66
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="UTF-8";
reply-type=original
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Message-ID: <ORJsVZTA...@TK2MSFTNGP03.phx.gbl>
Newsgroups: microsoft.public.security.homeusers
NNTP-Posting-Host: pool-71-173-71-14.ptldme.east.verizon.net 71.173.71.14
Path: TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
Xref: TK2MSFTNGP01.phx.gbl microsoft.public.security.homeusers:26729

Now another header:-

Reply-To: "PA Bear [MS MVP]" <moc.liamg@PVMraeBAP>
From: "PA Bear [MS MVP]" <PABe...@gmail.com>
References: <e2WPfUm...@TK2MSFTNGP05.phx.gbl> <xn0fv63uk...@news.motzarella.org>
<2b1e5eb5-877a-404a...@k30g2000hse.googlegroups.com>
<u3hdkG0F...@TK2MSFTNGP04.phx.gbl> <u#YNIN0FJ...@TK2MSFTNGP05.phx.gbl>
<8fc6f8b1-cf26-42a5...@p25g2000hsf.googlegroups.com>
<uwzDVw$FJHA...@TK2MSFTNGP02.phx.gbl> <eDo9n9$FJHA...@TK2MSFTNGP04.phx.gbl>
Subject: Re: Off Topic! Subject:: Farmer
Date: Tue, 16 Sep 2008 11:21:34 -0400
Lines: 10
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=response
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Message-ID: <O0CmuFBG...@TK2MSFTNGP06.phx.gbl>
Newsgroups:
microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.security.virus
NNTP-Posting-Host: 24.115.13.114.res-cmts.tvh.ptd.net 24.115.13.114
Path: TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
Xref: TK2MSFTNGP01.phx.gbl microsoft.public.security.homeusers:27077
microsoft.public.security.virus:82873 microsoft.public.security:103908


Paul Adare - MVP

unread,
Sep 17, 2008, 8:10:11 AM9/17/08
to
On Wed, 17 Sep 2008 12:16:08 +0100, ~BD~ wrote:

> I've also learned that an IP address is attributable to each and every computer so I'm a little
> confused when I compare the header information I show below. The poster seems to have two different
> IP addresses 71.173.71.14 and also 24.115.13.114. Perhaps there is a very simple reason for this.
> Perhaps you and/or others will comment so that I may better understand. Thank you.

This has nothing to do with the purpose of this news group. You're simply
attempting to cast aspersions on someone else and deflect the attention
from your behaviour here. If you want to learn more about NNTP header
information then there are better places to do so. This is not your private
tutorial group.

--
Paul Adare
MVP - Identity Lifecycle Manager
http://www.identit.ca

CPU: A juvenile way of telling your dog he missed the paper.

~BD~

unread,
Sep 17, 2008, 9:14:00 AM9/17/08
to

"Paul Adare - MVP" <pka...@gmail.com> wrote in message
news:ts9bjjqc41hq.1xm5rl4owsfvg$.dlg@40tude.net...

> On Wed, 17 Sep 2008 12:16:08 +0100, ~BD~ wrote:

> This has nothing to do with the purpose of this news group. You're simply
> attempting to cast aspersions on someone else and deflect the attention
> from your behaviour here. If you want to learn more about NNTP header
> information then there are better places to do so. This is not your private
> tutorial group.
>

To which group do you refer when you say "This is not your private tutorial group"?

That is, I understand, the prime purpose of all Microsoft groups - to provide help and advice for
everyone.

Most Google groups have a 'Mission Statement' shall we say - not so *these* groups which are listed
as 'a Usenet group'.

Paul Adare - MVP

unread,
Sep 17, 2008, 9:54:14 AM9/17/08
to
On Wed, 17 Sep 2008 14:14:00 +0100, ~BD~ wrote:

> To which group do you refer when you say "This is not your private tutorial group"?

All three that you insist on cross-posting to.


>
> That is, I understand, the prime purpose of all Microsoft groups - to provide help and advice for
> everyone.

Within the given topic for said group, something you seem incapable of
understanding.

--
Paul Adare
MVP - Identity Lifecycle Manager
http://www.identit.ca

Base 8 is just like base 10, if you are missing two fingers. -- Tom
Lehrer

Peter Foldes

unread,
Sep 17, 2008, 2:49:51 PM9/17/08
to
David

Do yourself and others a favor and stop posting this same crap whenever you start up with someone that you did not before.

This has been explained to you 100 times if not more.

You are playing head games with everyone or you are truly mentally sick

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"~BD~" <Boate...@nospam.invalid> wrote in message news:ugc9SbLG...@TK2MSFTNGP03.phx.gbl...

~BD~

unread,
Sep 17, 2008, 3:06:08 PM9/17/08
to
Peter, Hi! :)

It would be MUCH more helpful if you simply explained - to everyone here - why PABear has two
differing IP addresses.

If I've been told before, I must have forgotten; for that I apologise.

Over to you for the answer. TIA

Dave


"Peter Foldes" <ok...@hotmail.com> wrote in message news:u1yhlYPG...@TK2MSFTNGP05.phx.gbl...

Tom [Pepper] Willett

unread,
Sep 17, 2008, 3:16:39 PM9/17/08
to
WTF does it matter if he has two IP addresses? What business is it of
yours, and who cares, you flaming nut.

"~BD~" <Boate...@nospam.invalid> wrote in message

news:eYWQxhPG...@TK2MSFTNGP02.phx.gbl...
: Peter, Hi! :)

: >
: >
: >
: >
:
:


~BD~

unread,
Sep 17, 2008, 3:35:01 PM9/17/08
to
I'm sure you've heard of Good Cop/Bad Cop - perhaps one poster isn't really Robear Dyer at all!

If he's one and the same, why not simply say so? So easy really!

HTH

Dave

--
"Tom [Pepper] Willett" <t...@youreadaisyifyoudo.com> wrote in message
news:uVWhwnPG...@TK2MSFTNGP03.phx.gbl...

Paul Adare - MVP

unread,
Sep 17, 2008, 3:40:45 PM9/17/08
to
On Wed, 17 Sep 2008 20:35:01 +0100, ~BD~ wrote:

> If he's one and the same, why not simply say so? So easy really!

Why should he have to prove anything to someone like you in the first
place?

Here's a big hit from the clue stick. Some people have homes and jobs and
use news groups from both locations. Now get lost and drop this ridiculous
thread.

--
Paul Adare
MVP - Identity Lifecycle Manager
http://www.identit.ca

ROM: A RAM after a delicate operation.

Leythos

unread,
Sep 17, 2008, 3:53:01 PM9/17/08
to
In article <eYWQxhPG...@TK2MSFTNGP02.phx.gbl>,
Boate...@nospam.invalid says...

> It would be MUCH more helpful if you simply explained - to everyone here - why PABear has two
> differing IP addresses.
>

It's not relevant to anything. I can post from more than 60 IP addresses
in 5 countries - how does it have any relevance to the content of a
message?

~BD~

unread,
Sep 17, 2008, 4:05:50 PM9/17/08
to

"Paul Adare - MVP" <pka...@gmail.com> wrote in message
news:1pbf6our91xgg$.11lw6tubrvvul.dlg@40tude.net...

> On Wed, 17 Sep 2008 20:35:01 +0100, ~BD~ wrote:

Now drop this ridiculous thread.
>
> --

OK - Lets investigate another conundrum (for me anyway)

Your web site says "IdentIT Inc. specializes in strong security-related services and solutions, with
the majority of our practice focused on digital security, identity management and access
authorization, digital rights management, and secure remote access solutions."

Ref: http://www.identit.ca/

When I go to any other link *but one* on your site I am presented with this message now:- (I
apologise in advance if it isn't shown as intended)

You are not authorized to view this page
The Web server you are attempting to reach has a list of IP addresses that are not allowed to access
the Web site, and the IP address of your browsing computer is on this list.

--------------------------------------------------------------------------------

Please try the following:

a.. Contact the Web site administrator if you believe you should be able to view this directory or
page.
HTTP Error 403.6 - Forbidden: IP address of the client has been rejected.
Internet Information Services (IIS)

--------------------------------------------------------------------------------

Technical Information (for support personnel)

a.. Go to Microsoft Product Support Services and perform a title search for the words HTTP and
403.
b.. Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled
About Security, Limiting Access by IP Address, IP Address Access Restrictions, and About Custom
Error Messages.
************************************************************

The one other link that still works is the one referring to out-of-date information Viz:-
http://www.identit.ca/events.html

My intuition suggests that if you really are the whiz-kid you are supposed to be, you would have
blocked me from *every* web page. You haven't. Perhaps you'd kindly share the reason.

TIA

Dave

--


~BD~

unread,
Sep 17, 2008, 4:09:45 PM9/17/08
to

"Leythos" <vo...@nowhere.lan> wrote in message news:12216883...@news.usenet.com...

> In article <eYWQxhPG...@TK2MSFTNGP02.phx.gbl>,
> Boate...@nospam.invalid says...
>> It would be MUCH more helpful if you simply explained - to everyone here - why PABear has two
>> differing IP addresses.
>>
>
> I can post from more than 60 IP addresses
> in 5 countries - how does it have any relevance to the content of a
> message?
>
<snip>

Can you indeed?!!! Are you running a Botnet, Leythos?

Why only 5 countries btw? Which ones are they?

Just interested!

Dave


Leythos

unread,
Sep 17, 2008, 4:29:49 PM9/17/08
to
In article <OUYyTFQG...@TK2MSFTNGP04.phx.gbl>,
Boate...@nospam.invalid says...

Dave, you've just confirmed my beliefe that you're a troll, not a good
one, but just a simple troll. I won't answer any more questions/posts
from you unless I feel like playing with you.

Tom [Pepper] Willett

unread,
Sep 17, 2008, 4:25:32 PM9/17/08
to
<Plonk>

No More Nutjob.

"~BD~" <Boate...@nospam.invalid> wrote in message

news:eN3%235xPGJ...@TK2MSFTNGP02.phx.gbl...
: I'm sure you've heard of Good Cop/Bad Cop - perhaps one poster isn't

: > : >
: > :
: > :
: >
: >
: >
:
:


FromTheRafters

unread,
Sep 17, 2008, 4:52:34 PM9/17/08
to
> The one other link that still works is the one referring to out-of-date
> information Viz:- http://www.identit.ca/events.html
>
> My intuition suggests that if you really are the whiz-kid you are supposed
> to be, you would have blocked me from *every* web page. You haven't.
> Perhaps you'd kindly share the reason.

Because it bothers you so much?

Have you tried "refreshing" the locally cached page?
(it's not the *real* one anyway)

BD's draggin' a line ... what's runnin' these days MVPs?

What's in a Name?

unread,
Sep 17, 2008, 5:07:41 PM9/17/08
to
On Wed, 17 Sep 2008 16:25:32 -0400, Tom [Pepper] Willett
<t...@youreadaisyifyoudo.com> wrote:

> <Plonk>
>
> No More Nutjob.

Don't you just love those who announce their plonking? Isn't it much
eaiser just not clicking on certain messages that you don't want to read?

with all the different news clients and posting styles used in this thread
I felt that quoting the entire message was important to show how hard it
is to read now. Now, where should I put my responce? At the top? At the
bottom (where it should be)?

It can be difficult to tell if a poster is who they claim to be. Looking
at the headers is one way, but headers can be manipulated.

max
--
Virus Removal http://max.shplink.com/removal.html
Keep Clean http://max.shplink.com/keepingclean.html
Change nomail.afraid.org to gmail.com to reply by email.
nomail.afraid.org is setup for use in USENET by everyone

Tom [Pepper] Willett

unread,
Sep 17, 2008, 5:17:52 PM9/17/08
to
Bend over and put it there, net nanny.

What's in a Name?

unread,
Sep 17, 2008, 5:33:25 PM9/17/08
to
On Wed, 17 Sep 2008 17:17:52 -0400, Tom [Pepper] Willett, after consulting
Websters' dictionary, could only come up with this:

> Bend over and put it there, net nanny.

> snip 214 lines of wasted space <

What a professional responce, struck a nerve did we?

~BD~

unread,
Sep 17, 2008, 5:49:54 PM9/17/08
to

"What's in a Name?" <maxwa...@nomail.afraid.org> wrote in message news:op.uhm8y3c5cxu3pg@max...

> On Wed, 17 Sep 2008 16:25:32 -0400, Tom [Pepper] Willett <t...@youreadaisyifyoudo.com> wrote:
>
> Don't you just love those who announce their plonking? Isn't it much eaiser just not clicking on
> certain messages that you don't want to read?

I've never noticed Mr Willet give real help to anyone!
He doesn't need to be involved at all here.


> with all the different news clients and posting styles used in this thread I felt that quoting
> the entire message was important to show how hard it is to read now. Now, where should I put my
> responce? At the top? At the bottom (where it should be)?

<snip>

It doesn't really matter does it? <wink>

> It can be difficult to tell if a poster is who they claim to be. Looking at the headers is one
> way, but headers can be manipulated.


Indeed they can be, but I had no idea about that when first I ventured into a newsgroup! <sigh>

So ........... long thread, but still no answer to my query. FWIW, I don't think Mr Dyer can have
time to actually go to *work* - the last time I looked he had made 17,911 posts at Aumha.net and
Google Groops reports about 44,500 posts for PABear!

Amazing effort really.

Dave


~BD~

unread,
Sep 17, 2008, 6:52:02 PM9/17/08
to

"FromTheRafters" <Err...@ne.rr.com> wrote in message news:uXniXdQG...@TK2MSFTNGP03.phx.gbl...

>> The one other link that still works is the one referring to out-of-date information Viz:-
>> http://www.identit.ca/events.html
>>
>> My intuition suggests that if you really are the whiz-kid you are supposed to be, you would have
>> blocked me from *every* web page. You haven't. Perhaps you'd kindly share the reason.
>
> Because it bothers you so much?

It bothers me not one jot, FTR - it's a technicality and I'm simply interested in an explanation.

It's a hinky feeling really. I'm quite confident that most genuine business folk would be only too
pleased to be notified, politely, of an 'error' in any area of their business and would make every
effort to correct matters without delay. To totally ignore such information does not, to me, smack
of professionalism.

> Have you tried "refreshing" the locally cached page?
> (it's not the *real* one anyway)

I did - and tried AOL, IE7 and Google Chrome - all with the same result. However, I reset my IP and
tried again. Bingo! All links working again.

FWIW

Dave

PS > BD's draggin' a line ... what's runnin' these days MVPs?

Been quite successful today, eh? <wink>

>


~BD~

unread,
Sep 18, 2008, 7:41:16 AM9/18/08
to

"FromTheRafters" <Err...@ne.rr.com> wrote in message news:uXniXdQG...@TK2MSFTNGP03.phx.gbl...
>
> BD's draggin' a line ... what's runnin' these days MVPs?
>

Let's try this today. Drive-by attacks

Quote:
http://www.scmagazineus.com/Google-450000-websites-launching-drive-by-attacks/PrintArticle/34986/

A Google white paper analyzing web-based malware has reported that nearly a half-million URLs
contain malicious code.

The report, "The ghost in the browser: Analysis of web-based malware," says that Google researchers
analyzed the contents of several billion URLs and executed an in-depth analysis of approximately 4.5
million URLs.

The researchers discovered that about 450,000 URLs were successfully launching drive-by downloads of
malicious code. The study also uncovered 700,000 other pages that "seemed malicious," but "did not
meet the thresholds we had in place," said Niels Provos, one of the study's co-authors.

Malware found included trojans, adware and obfuscated binary code. The study, which analyzed a year
of queries using the search engine giant, pinpointed four mechanisms - poorly secured servers,
user-contributed content, advertising and third-party "widgets" - as the most prevalent methods for
injecting malicious code onto websites.

***************************************************

In these and other newsgroups, many helpers include 'links' either within their posted message or in
their signatures. It has already been established that no-one is responsible for checking links in
the "Microsoft" newsgroups - clicking on any one of them *might* take a viewer to an infected site
.......... and many might never know that they had been hit!

Just a thought.

Dave

--


BoaterDave

unread,
Sep 18, 2008, 8:43:40 AM9/18/08
to
On 18 Sep, 12:41, "~BD~" <BoaterD...@nospam.invalid> wrote:
> "FromTheRafters" <Erra...@ne.rr.com> wrote in messagenews:uXniXdQG...@TK2MSFTNGP03.phx.gbl...

>
> > BD's draggin' a line ... what's runnin' these days MVPs?
>
> Let's try this today.  Drive-byattacks
>
> Quote:http://www.scmagazineus.com/Google-450000-websites-launching-drive-by...

>
> A Google white paper analyzing web-based malware has reported that nearly a half-million URLs
> contain malicious code.
>
> The report, "The ghost in the browser: Analysis of web-based malware," says that Google researchers
> analyzed the contents of several billion URLs and executed an in-depth analysis of approximately 4.5
> million URLs.
>
> The researchers discovered that about 450,000 URLs were successfully launchingdrive-bydownloads of

> malicious code. The study also uncovered 700,000 other pages that "seemed malicious," but "did not
> meet the thresholds we had in place," said Niels Provos, one of the study's co-authors.
>
> Malware found included trojans, adware and obfuscated binary code. The study, which analyzed a year
> of queries using the search engine giant, pinpointed four mechanisms - poorly secured servers,
> user-contributed content, advertising and third-party "widgets" - as the most prevalent methods for
> injecting malicious code onto websites.
>
> ***************************************************
>
> In these and other newsgroups, many helpers include 'links' either within their posted message or in
> their signatures. It has already been established that no-one is responsible for checking links in
> the "Microsoft" newsgroups - clicking on any one of them *might* take a viewer to an infected site
> .......... and many might never know that they had been hit!
>
> Just a thought.
>
> Dave
>
> --

Oh! Btw - if you are sceptical, watch this video tutorial from
watchguard.com!

http://www.watchguard.com/education/video/play.asp?vid=dbd-cubecast

HTH

Dave

FromTheRafters

unread,
Sep 18, 2008, 8:45:24 AM9/18/08
to
> In these and other newsgroups, many helpers include 'links' either within
> their posted message or in their signatures. It has already been
> established that no-one is responsible for checking links in the
> "Microsoft" newsgroups - clicking on any one of them *might* take a viewer
> to an infected site .......... and many might never know that they had
> been hit!

Malware could be served up from an adserver too. Even
so-called *good* sites can get you.

You're just not safe doing anything these days.

You make a decision, you take your chances. The best you
can hope for is to make informed decisions and reduce the
chances of getting 'hit' by something.

Jumping around like a flea from forum to forum and group
to group dragging conversations around doesn't help you to
get a feel for whom to trust, so it is no small wonder that
you don't know how anyone can know whom to trust these
days in newsgroups.

I used to be able to send e-mail with a meta-refresh so that
I could force my uncle to the URL of my choice - since he
read his e-mail in OE with HTML rendering enabled. My
e-mail send would bring him to a website dedicated to using
every known trick in the book to crash his system. He didn't
have to do anything at all to get slammed - except to accept
the Microsoft default settings. All I had to do was use 'source
edit' in OE.


~BD~

unread,
Sep 18, 2008, 9:57:22 AM9/18/08
to

"FromTheRafters" <Err...@ne.rr.com> wrote in message
news:%2358x0xY...@TK2MSFTNGP04.phx.gbl...

>> In these and other newsgroups, many helpers include 'links' either within their posted message or
>> in their signatures. It has already been established that no-one is responsible for checking
>> links in the "Microsoft" newsgroups - clicking on any one of them *might* take a viewer to an
>> infected site .......... and many might never know that they had been hit!
>

It bothers me because it is the most vulnerable who come to the MS newsgroups for help - usually in
a panic from what I have seen. If they were then to be claimed as additions to a Botnet - without
ever knowing it - I think that would be reprehensible.

> Malware could be served up from an adserver too. Even
> so-called *good* sites can get you.

I know!


> You're just not safe doing anything these days.


I feel fairly safe when I'm boating! ;)


> You make a decision, you take your chances. The best you
> can hope for is to make informed decisions and reduce the
> chances of getting 'hit' by something.


Agreed - but thing really have changed in the last 5 years.


> Jumping around like a flea from forum to forum and group
> to group dragging conversations around doesn't help you to
> get a feel for whom to trust, so it is no small wonder that
> you don't know how anyone can know whom to trust these
> days in newsgroups.


It has been a deliberate strategy FTR. FWIW, I trust you!
I do not trust Peter Foldes ..... he once described the death of
my son as having being a "frustrating" event.


> I used to be able to send e-mail with a meta-refresh so that
> I could force my uncle to the URL of my choice - since he
> read his e-mail in OE with HTML rendering enabled. My
> e-mail send would bring him to a website dedicated to using
> every known trick in the book to crash his system. He didn't
> have to do anything at all to get slammed - except to accept
> the Microsoft default settings. All I had to do was use 'source
> edit' in OE.
>
>
>

I bet that scared him to death! I wouldn't have a clue how to do that (and no, I don't want to
learn!) If you *really* know what you are doing, pop over to Annexcafe.com - register - and ask the
posters on User2User some testing questions. The moderator - Roy C - is adamant that he needs no
more protection than a Hosts file!

Dave


David H. Lipman

unread,
Sep 18, 2008, 3:49:46 PM9/18/08
to
From: "~BD~" <Boate...@nospam.invalid>


Please STOP changing the subject of the thread !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


BurfordTJustice

unread,
Sep 18, 2008, 7:54:47 PM9/18/08
to
You are a pitiful old man who needs a life
and a brain.....now bugger off!!


"~BD~" <Boate...@nospam.invalid> wrote in message

news:uFhW4ZZG...@TK2MSFTNGP03.phx.gbl...

Jonas

unread,
Sep 18, 2008, 9:51:29 PM9/18/08
to
How do we know your link is safe ?

"BoaterDave" <Boate...@hotmail.co.uk> wrote in message news:144177c7-6cd1-4b6c...@d77g2000hsb.googlegroups.com...

~BD~

unread,
Sep 19, 2008, 4:21:42 AM9/19/08
to

"Jonas" <jn...@noemail.nit> wrote in message news:u2zR9of...@TK2MSFTNGP03.phx.gbl...

How do we know your link is safe ?

Do not click on the link. Highlight it - right click and 'copy' it.

Open Notepad. Right click and paste the link. It should look just as you might have expected (as
shown in this thread)

Paste the link into the address bar of your browser, or simply type it in, to go to the tutorial.

In answer to the question I suspect you *meant* to ask - I cannot vouch that there will be no
malware lurking at the URL which might infect your PC - but if you have a fully patched machine, a
good anti-virus programme and an anti-spyware facility, I'm as sure as anyone can be that you'll be
safe!

Please report back your impressions of the tutorial should you decide to watch it, Jonas.

HTH

Dave

Leythos

unread,
Sep 19, 2008, 6:26:01 PM9/19/08
to

"David H. Lipman" wrote:

> From: "~BD~" <Boate...@nospam.invalid>
>
>
> Please STOP changing the subject of the thread !


Can you tell Us Dave why your Tool is hosted on a foreign website with Lots
of ads and Adware on it?
Don't troll Us Dave. I'm your Leythos

The Real Truth MVP

unread,
Sep 19, 2008, 7:25:29 PM9/19/08
to
Because that foreign site is beyond the grasps of the USA's DMCA law, the
same law that took his site down permanently when it was hosted on a US
site. Taken down because he used stolen software and got caught. That's the
Real Truth. He also tried to blame it on me. Had I been involved with that
then I would have for damn sure let everybody know about it when it
happened.


--
Ignore any posts made by the Stalker Leythos, he's still in love with me.
He started stalking me after I spurned his advances towards me.
He said he would stop Stalking me If I stopped mentioning his name.
As you can see that does not work. He is a sick obsessive STALKER.

"Leythos" <Ley...@discussions.microsoft.com> wrote in message
news:451CD718-BFC8-461C...@microsoft.com...

Leythos

unread,
Sep 19, 2008, 7:40:17 PM9/19/08
to
In article <451CD718-BFC8-461C...@microsoft.com>,
Ley...@discussions.microsoft.com says...

>
>
> "David H. Lipman" wrote:
>
> > From: "~BD~" <Boate...@nospam.invalid>
> >
> >
> > Please STOP changing the subject of the thread !
>
>
> Can you tell Us Dave why your Tool is hosted on a foreign website with Lots
> of ads and Adware on it?
> Don't troll Us Dave. I'm your Leythos

More impersonations by PCBUTTS - stalking me isn't enough, he has to
start impersonating me again.

--
Leythos - spam9...@rrohio.com (remove 999 to email me)
Public Service Warning: Learn about PCButts before you trust:
http://www.velocityreviews.com/forums/t513604-author-of-removeit.html
http://www.google.com/search?hl=en&q=pcbutts1+thief

David H. Lipman

unread,
Sep 19, 2008, 7:56:30 PM9/19/08
to
From: "Leythos" <vo...@nowhere.lan>


>> Can you tell Us Dave why your Tool is hosted on a foreign website with Lots
>> of ads and Adware on it?
>> Don't troll Us Dave. I'm your Leythos

| More impersonations by PCBUTTS - stalking me isn't enough, he has to
| start impersonating me again.

Yeah, classic Butts tactics.

hysterical.gif

pcbutts1

unread,
Sep 19, 2008, 10:20:13 PM9/19/08
to
Once again your sickness has made you a fool for again deliberately posting
more lies about me.
For those who don't know how to read headers see this.
http://www.google.com/search?hl=en&rlz=1T4SUNA_enUS264US265&q=how+to+read+newsgroup+headers&btnG=Search


--
Cyberstalking is a crime. If you had one as bad as I did simply ignoring
them is not an option.


"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:%23I0pXNr...@TK2MSFTNGP02.phx.gbl...

Leythos

unread,
Sep 20, 2008, 8:23:00 AM9/20/08
to
In article <B88720B1-4A55-4702...@microsoft.com>,
n...@real.atall says...

> Once again your sickness has made you a fool for again deliberately posting
> more lies about me.
> For those who don't know how to read headers see this.

All they need to do is search for PCBUTTS1 and IMPERSONATE to see the
number of times you've impersonated me, david, others.... You have more
fake names that a drug dealer.

Jonas

unread,
Sep 20, 2008, 9:27:40 AM9/20/08
to
Interesting tut. A good host file will prevent a lot of damage.

"~BD~" <Boate...@nospam.invalid> wrote in message news:ODJE7CjG...@TK2MSFTNGP04.phx.gbl...

~BD~

unread,
Sep 20, 2008, 3:08:59 PM9/20/08
to

"Jonas" <jn...@noemail.nit> wrote in message news:%23mEDpSy...@TK2MSFTNGP06.phx.gbl...

Interesting tut. A good host file will prevent a lot of damage.

<snip>

I thought so too, Jonas! There are many others on that site.

Your comment regarding the Host file is noted and understood.

Mant thanks for posting back.

Dave

--


BurfordTJustice

unread,
Sep 20, 2008, 4:39:03 PM9/20/08
to
Why do you have so much porn on your computer?

"~BD~" <Boate...@nospam.invalid> wrote in message

news:evBoSR1G...@TK2MSFTNGP06.phx.gbl...

BoaterDave

unread,
Nov 6, 2008, 1:43:05 PM11/6/08
to
On Sep 15, 9:24 pm, "David H. Lipman" <DLipman~nosp...@Verizon.Net>
wrote:
> From: "~BD~" <BoaterD...@nospam.invalid>
>
> | Readers - look at this pagehttp://www.identit.ca/clm.html
>
> | Would you trust/believe ......... obey! ............. an executive of a company who has
> | an
> | out-of-date web site?
>
> | In particular .............
>
> | The following dates have been booked for ILM 2007 Training:
>
> |   a.. Mississauga, Ontario, Canada - November 13 - 16, 2007 - Click here to register!
>
> Please STOP you foolish rants!
>
> --
> Davehttp://www.claymania.com/removal-trojan-adware.html
> Multi-AV -http://www.pctipp.ch/downloads/dl/35905.asp

OK :)

~BD~

unread,
Nov 7, 2008, 1:25:27 PM11/7/08
to
Just a check - and to let you know that ~BD~ is an abreviation for
BoaterDave.

Dave

--


"BoaterDave" <Boate...@hotmail.co.uk> wrote in message

news:cf249d8b-792a-4ab9...@r36g2000prf.googlegroups.com...

PA Bear [MS MVP]

unread,
Nov 7, 2008, 2:24:57 PM11/7/08
to
<another plonk>

David H. Lipman

unread,
Nov 7, 2008, 4:45:48 PM11/7/08
to
From: "~BD~" <~BD~@nomail.afraid.com>

| Just a check - and to let you know that ~BD~ is an abreviation for
| BoaterDave.

| Dave

Just a note to let you know the troll ~BD~
NNTP-Posting-Host: host-92-2-64-106.as43234.net 92.2.64.106

is the same idiot troll as BoaterDave
NNTP-Posting-Host: 92.2.64.106

A rose by any other name... in this case still stinks!

PA Bear [MS MVP]

unread,
Nov 7, 2008, 9:52:17 PM11/7/08
to
David H. Lipman wrote:
> From: "~BD~" <~BD~@nomail.afraid.com>
>
>> Just a check - and to let you know that ~BD~ is an abreviation for
>> BoaterDave.
>
>> Dave
>
> Just a note to let you know the troll ~BD~
> NNTP-Posting-Host: host-92-2-64-106.as43234.net 92.2.64.106
>
> is the same idiot troll as BoaterDave
> NNTP-Posting-Host: 92.2.64.106
>
> A rose by any other name... in this case still stinks!

Carphone Warehouse Broadband Services AKA opaltelecom.co.uk
http://www.carphonewarehouse.com

Opal Telecommunications Plc
Manchester, UK
+44 161 222-2000

Source: ripe.net

~BD~

unread,
Nov 8, 2008, 1:02:06 PM11/8/08
to

"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:eG8WI5UQ...@TK2MSFTNGP06.phx.gbl...

>
> Carphone Warehouse Broadband Services AKA opaltelecom.co.uk
> http://www.carphonewarehouse.com
>
> Opal Telecommunications Plc
> Manchester, UK
> +44 161 222-2000
> Source: ripe.net

--

Absolutely right, Robear Dyer!

As you didn't appear to spot it, though - I'll tell you that my ISP is AOL
(UK) which is now owned by Carphone Warehouse

Indeed, it is only the second ISP I've had in the last 10 years - the other
was Freeserve/Wanadoo/Orange

HTH

Dave


Andrew Taylor

unread,
Nov 9, 2008, 6:59:49 PM11/9/08
to
"BoaterDave" <Boate...@hotmail.co.uk> wrote in message
news:cf249d8b-792a-4ab9...@r36g2000prf.googlegroups.com...
>
> | In particular .............
>
> | The following dates have been booked for ILM 2007 Training:
>
> | a.. Mississauga, Ontario, Canada - November 13 - 16, 2007 - Click here
> to register!
>
If I had known I could have attended ILM 2007 Training!

--
Andrew Taylor
Mississauga - Ontario
Canada
~


BoaterDave

unread,
Nov 10, 2008, 5:58:04 AM11/10/08
to
On Nov 9, 11:59 pm, "Andrew Taylor"
<andrewcrumpleh...@spamcopSUBVERSIVE.com> wrote:
> "BoaterDave" <BoaterD...@hotmail.co.uk> wrote in message

How strange is that, Andrew?

The date is also Ishie's birthday!

Amazing coincidences, eh? :)

Are you going to come on over to Jenn's BB at www.pqlr.org/bbs? I
believe that a few posters on Scorched Earth are becoming disgruntled
and heading that way too! I know you'd be made most welcome.

Andrew Taylor

unread,
Nov 13, 2008, 1:13:04 AM11/13/08
to
"BoaterDave" <Boate...@hotmail.co.uk> wrote in message
news:27985c6f-1603-4e08...@v13g2000pro.googlegroups.com...

How strange is that, Andrew?

The date is also Ishie's birthday!

Amazing coincidences, eh? :)

Are you going to come on over to Jenn's BB at www.pqlr.org/bbs? I
believe that a few posters on Scorched Earth are becoming disgruntled
and heading that way too! I know you'd be made most welcome.

Unlikely that a moderator from Annex would be allowed!


~BD~

unread,
Nov 13, 2008, 5:48:32 AM11/13/08
to

"Andrew Taylor" <andrewcr...@spamcopSUBVERSIVE.com> wrote in message
news:491bc576$1...@newsgate.x-privat.org...

> "BoaterDave" <Boate...@hotmail.co.uk> wrote in message
> news:27985c6f-1603-4e08...@v13g2000pro.googlegroups.com...
>
>
> Unlikely that a moderator from Annex would be allowed!
>

Why on earth should you think that, Andrew?

Most (but not all) are good Christian folk - try us and see!

Dave

PS I miss our friendly banter! How is the job going btw?


BoaterDave

unread,
Dec 30, 2008, 6:43:02 PM12/30/08
to

"PA Bear [MS MVP]" wrote:

> Paul Adare - MVP wrote:

> > No wonder you've been banned from a number of web forums.
>
> And several ISPs.

You know that isn't so, Robear Dyer - why say such things?

I trust that you will be truthful in 2009.

~BD~

unread,
Dec 31, 2008, 3:51:18 AM12/31/08
to


I noticed you were back and have posted a message for you in the 'test'
group.

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

Peter Foldes

unread,
Dec 31, 2008, 4:06:23 AM12/31/08
to
Are you now pretending to be me, Dave?

--
Peter


Peter Foldes

unread,
Dec 31, 2008, 6:00:52 AM12/31/08
to
These posts by me answering Boater Dave are not by me. I am using a W2K3 Enterprise
Server as shown in my posting properties ( 6.00.3790.3959) which cannot be
duplicated unless this imposter has the same along with the accompanying additions .
which I doubt that the poster can achieve.. I must apologize for this post but I
feel it must be known, Also to post by BD and not Boater Dave is also a imposter
post.
--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"BoaterDave" <Boate...@discussions.microsoft.com> wrote in message
news:3A888356-F52B-42CD...@microsoft.com...

PA Bear [MS MVP]

unread,
Dec 31, 2008, 1:30:36 PM12/31/08
to
cf.
http://groups.google.com/group/microsoft.public.security/msg/06d9f3a33847eed4?dmode=source

Posted via OE by none other than Boate...@hotmail.co.uk in violation of
the Hotmail EULA! (@Peter: Report this to Live ID admin, please.)

BD usually "hides" by posting via the web-interface (cf.
http://groups.google.com/group/microsoft.public.security/msg/3d1dfa19b43d0bc7?dmode=source)
so his post via OE may be the undoing of yet another of his email accounts
and ISPs.

PA Bear [MS MVP]

unread,
Dec 31, 2008, 1:30:56 PM12/31/08
to
[This thread is a *sewer*!]

Peter Foldes

unread,
Dec 31, 2008, 1:48:02 PM12/31/08
to
Trouble is, PABear, that BoaterDave, aka ~BD~, always tells the truth
and never actually /tries/ to hide!

He /knows/ that YOU have lied (hence 'Dyer the Liar') and he's quite
sure that I've not told the truth either.

Do you think that Microsoft will believe me now that I've been visted by
the Security services already?

--
Peter


"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message

news:udZMCY3a...@TK2MSFTNGP05.phx.gbl...

PA Bear [MS MVP]

unread,
Dec 31, 2008, 2:59:30 PM12/31/08
to
I did a competent and thorough investigation of BD's online history a few
years ago and discovered that he'd been banned by several ISPs (including
AOL), that several of his non-ISP email accounts had been discontinued, and
that he'd been banned by several forums and newsservers for abuse. This led
to BD being permanently banned from AumHa Forums and all of his multiple
user-accounts being Deleted.

Payback's a b**** and I think you oughta sic MI5 and MI6 on him.

Peter Foldes wrote:
> Trouble is, PABear, that BoaterDave, aka ~BD~, always tells the truth
> and never actually /tries/ to hide!
>
> He /knows/ that YOU have lied (hence 'Dyer the Liar') and he's quite
> sure that I've not told the truth either.
>
> Do you think that Microsoft will believe me now that I've been visted by
> the Security services already?
>
>

The Real Truth MVP

unread,
Dec 31, 2008, 5:21:18 PM12/31/08
to
That's a crock of Sh*t. How can you find out all of that when you can't even
get my name right and I hide behind nothing.


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/


"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message

news:ezOwVJ4a...@TK2MSFTNGP05.phx.gbl...

PA Bear [MS MVP]

unread,
Dec 31, 2008, 5:28:42 PM12/31/08
to
You mean JPL employee Christopher (not Christine) Butts?

cf. http://en.wikinews.org/wiki/NASA_van_rolls_off_California_mountain

Leonard Grey

unread,
Dec 31, 2008, 5:41:02 PM12/31/08
to
True - you can't hide from your own lies.

Which filthy comeback this time?
---
Leonard Grey
Errare humanum est

The Real Truth MVP wrote:

David H. Lipman

unread,
Dec 31, 2008, 7:22:51 PM12/31/08
to
From: "Leonard Grey" <l.g...@invalid.invalid>

| True - you can't hide from your own lies.

Like being a Blackman hiding behind the persona of a white blonde female.

The Real Truth MVP

unread,
Dec 31, 2008, 8:38:34 PM12/31/08
to
That's exactly what I mean. You just pick a name out of the blue and stick
with it.


"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message

news:eZmlUj5a...@TK2MSFTNGP05.phx.gbl...

~BD~

unread,
Dec 31, 2008, 8:52:15 PM12/31/08
to

"The Real Truth MVP" <n...@real.atall> wrote in message
news:gjgr8u$ch8$1...@news.motzarella.org...

> That's a crock of Sh*t. How can you find out all of that when you
> can't even get my name right and I hide behind nothing.
>
>
> --
> The Real Truth http://pcbutts1-therealtruth.blogspot.com/

You are 100% correct - a complete crock of sh*t as you put it!

Anyone worth his salt will know that I'm actually using AOL as my ISP
right now - surely *that* proves the statement totally false?

Then again, how can anyone be sure that the poster purporting to be PA
Bear in this thread is really Robear Dyer?

Dave


BoaterDave

unread,
Jan 1, 2009, 4:29:01 AM1/1/09
to
(This is a resurrection of a past query - to which no satisfactory reply was
received)

Can you help me to better understand Header information? When I first came
'here' I had no knowledge of message 'Properties' at all. I'm still a little
'in the dark'. I've tended, like I'm confident most visitors do, to accept
the 'Nick' of someone posting to represent who they really are -
*especially* if a well know 'helper' is involved.

I've also learned that an IP address is attributable to each and every
computer so I'm a little confused when I compare the header information I
show below. The poster seems to have two different IP addresses 71.173.71.14
and also 24.115.13.114. Perhaps there is a very simple reason for this.

I had hoped that someone would comment so that I might better understand.
Maybe simply say that one item was posted from home and the other from a
different computer at work.

However as 'PA Bear' has now blatantly lied about my history (I've never
been banned by any ISP) I now wonder if there is ...

a) someone masquerading as Robear Dyer or
b) something of the dark about him.

Comments welcomed (especially any from Peter Foldes - he *knows* it can be
done!)

Dave


> ******************************
>
> Reply-To: "PA Bear [MS MVP]" <moc.liamg@PVMraeBAP>
> From: "PA Bear [MS MVP]" <PABe...@gmail.com>
> References: <C32A72E4-F29D-4F1F...@microsoft.com>
> Subject: Re: my windows update will not turn on
> Date: Mon, 18 Aug 2008 09:28:18 -0400
> Lines: 66
> MIME-Version: 1.0
> Content-Type: text/plain;
> format=flowed;
> charset="UTF-8";
> reply-type=original
> Content-Transfer-Encoding: 8bit
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
> Message-ID: <ORJsVZTA...@TK2MSFTNGP03.phx.gbl>
> Newsgroups: microsoft.public.security.homeusers
> NNTP-Posting-Host: pool-71-173-71-14.ptldme.east.verizon.net 71.173.71.14
> Path: TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
> Xref: TK2MSFTNGP01.phx.gbl microsoft.public.security.homeusers:26729
>
> Now another header:-
>
> Reply-To: "PA Bear [MS MVP]" <moc.liamg@PVMraeBAP>
> From: "PA Bear [MS MVP]" <PABe...@gmail.com>
> References: <e2WPfUm...@TK2MSFTNGP05.phx.gbl> <xn0fv63uk...@news.motzarella.org>
> <2b1e5eb5-877a-404a...@k30g2000hse.googlegroups.com>
> <u3hdkG0F...@TK2MSFTNGP04.phx.gbl> <u#YNIN0FJ...@TK2MSFTNGP05.phx.gbl>
> <8fc6f8b1-cf26-42a5...@p25g2000hsf.googlegroups.com>
> <uwzDVw$FJHA...@TK2MSFTNGP02.phx.gbl> <eDo9n9$FJHA...@TK2MSFTNGP04.phx.gbl>
> Subject: Re: Off Topic! Subject:: Farmer
> Date: Tue, 16 Sep 2008 11:21:34 -0400
> Lines: 10
> MIME-Version: 1.0
> Content-Type: text/plain;
> format=flowed;
> charset="iso-8859-1";
> reply-type=response
> Content-Transfer-Encoding: 7bit
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
> Message-ID: <O0CmuFBG...@TK2MSFTNGP06.phx.gbl>
> Newsgroups:
> microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.security.virus
> NNTP-Posting-Host: 24.115.13.114.res-cmts.tvh.ptd.net 24.115.13.114
> Path: TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
> Xref: TK2MSFTNGP01.phx.gbl microsoft.public.security.homeusers:27077
> microsoft.public.security.virus:82873 microsoft.public.security:103908
>
>
>
>
>

BoaterDave

unread,
Jan 1, 2009, 4:45:00 AM1/1/09
to
I *thought* I'd said it before! <s>


> "PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
> news:OG6YUCRF...@TK2MSFTNGP04.phx.gbl...
>
> > That must be BD's fifth or sixth ISP in as many years. Wonder why he keeps switching...or having to switch? <w>

> You are not often wrong Robear, but you are this time!
>
> Ten years ago I subscribed to Freeserve. Freeserve were bought by Wanadoo.Wanadoo was >bought by Orange. I remained with them throughout the changes.
>
> After the theft of my identity in 2005, I elected to take advantage of a Broadband package being
> offered by AOL which included a Netgear router to enable wireless connection. I joined in early 2006
> and I have been with AOL ever since (albeit that shortly after I became a subscriber, AOL UK was
> hived off by parent group Time Warner )
>
> Although still trading as AOL UK, the company has been bought by Carphone Warehouse and is the > third largest ISP in the UK.
>
> So, that's really just *TWO* ISP's in ten years.
>
> Earlier this year I took advantage of the newly available 3G Mobile Broadband technology so that I
> can use my laptop for Internet connection when I am cruising the British Waterays on my >narrowboat. This *additional* ISP is called 'Three'.
>
> HTH - it's the truth! See
> http://www.malwarebytes.org/forums/index.php?showtopic=5656&st=20&gopid=27599&entry27599
>
> Dave

plus .......


> When I first ventured into the newsgroup area through the MS Communities server, I took all >comments from the likes of PA Bear 'on trust'. I am aware - now - that one cannot in any way be >sure that a post has actually been made by a specific individual unless one checks IP addresses; >even then, one cannot be sure.

> *I* know that the 'identity' posting in this thread as PA Bear has lied. Others may think whatever
> they like.
>
> No longer do I trust the initials MVP - nor the supposed folk that abuse that status (if, indeed,
> they do!). It could well be someone else masquerading as same.
>
> FWIW
>
> Dave

Charlie42

unread,
Jan 1, 2009, 8:32:44 AM1/1/09
to
"BoaterDave" <Boate...@discussions.microsoft.com> wrote:

> Can you help me to better understand Header information? When
> I first came 'here' I had no knowledge of message 'Properties' at
> all. I'm still a little 'in the dark'. I've tended, like I'm confident
> most
> visitors do, to accept the 'Nick' of someone posting to represent
> who they really are - *especially* if a well know 'helper' is
> involved.

Don't. Anybody can hide behind a nick on the Internet, in the MS newsgroups
you will find both tech specialists and utter computer illiterates. Since
you have been hanging around here for a while, you have obviously developed
a knowledge about this ng and its participants, but still: sound judgement,
and perhaps a few extra checks, are required.

In MS newsgroups the MVP title - awarded by MS - is a fairly strong signal
that somebody knows their subject. Of course, anybody can add these three
letters to their signature, but it will not pass unnoticed, so using
information provided by MVPs is relatively safe.

As for message headers, they are a piece of code attached to posts and
e-mails, where you can find information like a unique ID for the message,
thread indexing, text type/encoding, and perhaps most important: the message
subject, recipients, sender, priority and where it originated from (and yes,
this information may or may not be forged. Usually it is not).

> I've also learned that an IP address is attributable to each and
> every computer so I'm a little confused when I compare the header
> information I show below. The poster seems to have two different
> IP addresses 71.173.71.14 and also 24.115.13.114. Perhaps
> there is a very simple reason for this.

> I had hoped that someone would comment so that I might better
> understand. Maybe simply say that one item was posted from
> home and the other from a different computer at work.

Go with simple. Your suggested explanation is pretty likely correct. In the
case of the aforementioned IP addresses, they belong to different Internet
Service Providers in Kansas and Delaware, U.S. (but the computers in
question can be located elsewhere, probably not that far apart). You can
find this information yourself by doing a WHOIS search. The information may
not be of much use, though.

http://www.fr2.cyberabuse.org/whois/?page=whois_server

Charlie42

Shenan Stanley

unread,
Jan 1, 2009, 10:37:51 AM1/1/09
to
BoaterDave wrote:
> (This is a resurrection of a past query - to which no satisfactory
> reply was received)
>
> Can you help me to better understand Header information? When I
> first came 'here' I had no knowledge of message 'Properties' at
> all. I'm still a little 'in the dark'. I've tended, like I'm
> confident most visitors do, to accept the 'Nick' of someone posting
> to represent who they really are - *especially* if a well know
> 'helper' is involved.
>
> I've also learned that an IP address is attributable to each and
> every computer so I'm a little confused when I compare the header
> information I show below. The poster seems to have two different IP
> addresses 71.173.71.14 and also 24.115.13.114. Perhaps there is a
> very simple reason for this.
>
> I had hoped that someone would comment so that I might better
> understand. Maybe simply say that one item was posted from home and
> the other from a different computer at work.
>
> However as 'PA Bear' has now blatantly lied about my history (I've
> never been banned by any ISP) I now wonder if there is ...
>
> a) someone masquerading as Robear Dyer or
> b) something of the dark about him.
>
> Comments welcomed (especially any from Peter Foldes - he *knows* it
> can be done!)
>
> Dave
<snipped>

First - headers and how to read them:
http://www.google.com/search?q=how+to+read+email+headers

Such as the first link:
http://www.emailaddressmanager.com/tips/header.html
Or second link:
http://www.virtualchase.com/researchskills/quality_emailheader.html
Or fourth link:
http://mail.google.com/support/bin/answer.py?hl=en&answer=29436

Second, anyone can post from multiple IP addresses. Don't overthink. If
someone was to use a laptop - they could post from possibly dozens (or more)
different IP addresses throughout a normal day just by act of traveling and
using free internet access. If someone was a computer technician and did
not work from a single location - again - very plausible they would post
from various IPs. Even if they worked from a single locataion - it is
possible they could post from multiple IP addresses in a single day (perhaps
they have two or more different ISPs, perhaps they just released their
internet assigned IP and grabbed a new one or used a different computer and
they get multiple IPs from my ISP, etc.) Are there more complicated ways to
do it? Sure. Many times people travel and still post from the same IP
because they remote into a central machine and do their work over a more
secure connection that way - leaving all their data and such in the
secured/locked down physical location.

Third - you should know that anyone can be anyone, anywhere. It's just
easier to be anyone here than it is face-to-face. It takes little effort,
really. Someone changes their reply-to and posting name - they are now seen
as someone else at a casual glance. If the header exists and is accurate
(and actually goes back as far as the original poster - it may not depending
on the news server they used, etc) - then that is one way of determining
more accurately that a person is the same person they have always been;
however - as stated before - getting another IP address (even on the same
machine) is a fairly easy process these days - so that is no guarantee
either.

Most of this you already know in a manner of speaking - bacause we all know
you have several accounts you post from (you have said this yourself - or
*have you*? Could we ever be sure?) - even in these newsgroups. I have
seen you change names. No matter what, ~BD~ and BoaterDave are not the same
name - even if they are meant to be and are the same person behind the
curtain.

After all - I see three names for you here:
http://forums.techarena.in/security-home-users/1053152.htm
(BoaterDave, ~BD~ and imbeady2)
More complete and readily visibly:
http://groups.google.com/group/microsoft.public.security.homeusers/browse_frm/thread/efebb7d7b6fd496e/b10a8248f093fd99#b10a8248f093fd99

In that example alone - out of your (assumption on my part - although you
state it is you in there somewhere with all the names) 20+r so responses in
that conversation, I count at least seven different 'google groups profiles'
or addresses that would lead to seperate profile links:

One of the more active profiles (~BD~):
http://groups.google.com/groups/profile?enc_user=P1RbSBkAAACeRwrN9o3yIKWOxHcJI8TEOUZpQXQRnJjPBzguKo4L2w

Not quite as active - but still active profile (BoaterDave)
http://groups.google.com/groups/profile?enc_user=LEyReRgAAAB4ZB5JZSpjVat4-Szzukl-pHweoe0zHmXCv8ZX1vhwwQ

And the "imbeady2" 'nick' shows a different address each time - likely
because of how it was synchronized with the main post from a web forum.

If you were to check out the headers on just your own messages - the
"NNTP-Posting-Host:" changes several times. It's all dependent on how you
post, from where, etc.

Hope that helps explain a little better what is going on.

- Headers can give you more details about the path a message took and more.
- Headers can give you very little actual information about the person
sending the message *if* that person is capable (of some computer savvy
and/or just moving from place to place.)
- Therefore "nicks" (short for nickname) mean very little in an open
anonymous forum. Anyone can be anybody at surface level. If someone
chooses to take on the nick of someone who also uses multiple computers/IPS
(moves around a lot) - it can be even more difficult to tell (although if
one minute a post is leading back to Texas and the next - China... Well -
no - it could still be just savvy - because a simple explanation could be a
friend/business partner/business in one or the other and remote desktop.)

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


PA Bear [MS MVP]

unread,
Jan 1, 2009, 12:16:33 PM1/1/09
to
Yeah, right, Chris. Don't forget to take your meds, please.

The Real Truth MVP wrote:
> That's exactly what I mean. You just pick a name out of the blue and stick
> with it.
>

~BD~

unread,
Jan 1, 2009, 2:01:37 PM1/1/09
to
Hi Charlie - thanks for your response. My replies are in-line .....

"Charlie42" <Char...@spam.me.not> wrote in message
news:ePNntVBb...@TK2MSFTNGP03.phx.gbl...


> "BoaterDave" <Boate...@discussions.microsoft.com> wrote:
>
>> Can you help me to better understand Header information? When
>> I first came 'here' I had no knowledge of message 'Properties' at
>> all. I'm still a little 'in the dark'. I've tended, like I'm
>> confident most
>> visitors do, to accept the 'Nick' of someone posting to represent
>> who they really are - *especially* if a well know 'helper' is
>> involved.
>
> Don't. Anybody can hide behind a nick on the Internet, in the MS
> newsgroups you will find both tech specialists and utter computer
> illiterates. Since you have been hanging around here for a while, you
> have obviously developed a knowledge about this ng and its
> participants, but still: sound judgement, and perhaps a few extra
> checks, are required.


It's good to hear someone confirm this! :)


> In MS newsgroups the MVP title - awarded by MS - is a fairly strong
> signal that somebody knows their subject. Of course, anybody can add
> these three letters to their signature, but it will not pass
> unnoticed, so using information provided by MVPs is relatively safe.


That was my initial thinking, but since then I know - categorically and
without doubt - that a user of the 'PA Bear' 'nick' has lied about me
being banned by an ISP. I do recognise that only *I* can be certain of
this, but it IS the truth.


> As for message headers, they are a piece of code attached to posts and
> e-mails, where you can find information like a unique ID for the
> message, thread indexing, text type/encoding, and perhaps most
> important: the message subject, recipients, sender, priority and where
> it originated from (and yes, this information may or may not be
> forged. Usually it is not).


That is what I now understand. I'd wager that very few people coming to
the Microsoft newsgroups for help have any idea about such matters.


>> I've also learned that an IP address is attributable to each and
>> every computer so I'm a little confused when I compare the header
>> information I show below. The poster seems to have two different
>> IP addresses 71.173.71.14 and also 24.115.13.114. Perhaps
>> there is a very simple reason for this.
>
>> I had hoped that someone would comment so that I might better
>> understand. Maybe simply say that one item was posted from
>> home and the other from a different computer at work.
>
> Go with simple. Your suggested explanation is pretty likely correct.
> In the case of the aforementioned IP addresses, they belong to
> different Internet Service Providers in Kansas and Delaware, U.S. (but
> the computers in question can be located elsewhere, probably not that
> far apart). You can find this information yourself by doing a WHOIS
> search. The information may not be of much use, though.


Using the service at the link you provided
http://www.fr2.cyberabuse.org/whois/?page=whois_server (I'd not used
this one before) I found that one ISP was in Dodge City, Kansas and the
other in Palmerton, Pennsylvania (albeit Delaware Ave.!!)

DNSstuff says Danville, Pennsylvania and agrees with Dodge City, Kansas
http://member.dnsstuff.com/pages/tools.php?ptype=free

It takes time to answer posts and I'm confident that most 'helpers' are
great guys. My thanks to all of them, yourself included!

Dave

FromTheRafters

unread,
Jan 1, 2009, 2:06:45 PM1/1/09
to
inline

"BoaterDave" <Boate...@discussions.microsoft.com> wrote in message
news:02B46951-A983-4E15...@microsoft.com...

> (This is a resurrection of a past query - to which no satisfactory reply
> was
> received)
>
> Can you help me to better understand Header information?

http://www.cynthiaarmistead.com/headers/headers.shtml

> When I first came
> 'here' I had no knowledge of message 'Properties' at all. I'm still a
> little
> 'in the dark'. I've tended, like I'm confident most visitors do, to accept
> the 'Nick' of someone posting to represent who they really are -

Well...my momma didn't *really* name me FromTheRafters - sorry to
burst your bubble. :o)

I could use an assumed 'real sounding' name and back it up with website
registration to give it an authentic feel. Bottom line is that short of
digital
signatures there is no authentication in usenet posts.

> *especially* if a well know 'helper' is involved.

Secondhand trust issues pale in comparison to the inability to authenticate
either party.

> I've also learned that an IP address is attributable to each and every
> computer

Not all network devices are'computers'.

> so I'm a little confused when I compare the header information I
> show below. The poster seems to have two different IP addresses
> 71.173.71.14
> and also 24.115.13.114. Perhaps there is a very simple reason for this.

Perhaps.

> I had hoped that someone would comment so that I might better understand.
> Maybe simply say that one item was posted from home and the other from a
> different computer at work.

...or from one laptop using two different wireless access points.

[snip]


~BD~

unread,
Jan 1, 2009, 3:16:53 PM1/1/09
to
See below for my response:

"Shenan Stanley" <newsh...@gmail.com> wrote in message
news:Oee7xbCb...@TK2MSFTNGP03.phx.gbl...

Shenan

You have no idea how much I value your help and advice - especially as
you ignore others who say "do not feed the troll"! If any 'newbies' read
this thread they would learn much from your responses to me -
part-and-parcel of what I perceive to be the essence of what newsgroups
are meant to be for.

You have also appreciated that I've not actually tried to hide my
identity - I have, indeed, used all the 'nicks' that you mention above -
primarily so that I could try and track just how messages showed up in
Outlook Express when posted from 'outside' sources (Google Groups.
TechArena Community or Microsoft).

Thank you once again for all the help you give to so many folk. Have a
great 2009!

Dave


David H. Lipman

unread,
Jan 1, 2009, 4:15:09 PM1/1/09
to
From: "PA Bear [MS MVP]" <PABe...@gmail.com>

| Yeah, right, Chris. Don't forget to take your meds, please.

Maybe when he doesn't want to be a black male in a blonde female body he wants to known as
Patrick Christopher Butts.

Tom [Pepper] Willett

unread,
Jan 2, 2009, 9:09:29 AM1/2/09
to
Hoople Head.

"BoaterDave" <Boate...@discussions.microsoft.com> wrote in message
news:3A888356-F52B-42CD...@microsoft.com...
:
:

~BD~

unread,
Jan 2, 2009, 11:38:18 AM1/2/09
to

"FromTheRafters" <err...@nomail.afraid.org> wrote in message
news:%23A%23CYQEb...@TK2MSFTNGP05.phx.gbl...
> inline
Snip

>> Can you help me to better understand Header information?
>
> http://www.cynthiaarmistead.com/headers/headers.shtml

Thank you. I spent a while reading Cynthia's site!

>> I've tended, like I'm confident most visitors do, to accept the
>> 'Nick' of someone posting to represent who they really are

> Well...my momma didn't *really* name me FromTheRafters - sorry to
> burst your bubble. :o)

Hahaha! I enjoy your sense of humour, FTR

> I could use an assumed 'real sounding' name and back it up with
> website
> registration to give it an authentic feel. Bottom line is that short
> of digital signatures there is no authentication in usenet posts.

That I now understand. Hence my concern about IdentitIT Inc - it is the
*attitude* of bad guys which will be their undoing eventually. I've
never said that this particular organisation is bogus, but IMO the
attitude of those involved (posting here) leaves doubt in my mind.

>> *especially* if a well know 'helper' is involved.
>
> Secondhand trust issues pale in comparison to the inability to
> authenticate
> either party.

Agreed


>> I've also learned that an IP address is attributable to each and
>> every
>> computer
>
> Not all network devices are'computers'.

Agreed. My apologies for the generalisation!


>> so I'm a little confused when I compare the header information I
>> show below. The poster seems to have two different IP addresses
>> 71.173.71.14
>> and also 24.115.13.114. Perhaps there is a very simple reason for
>> this.
>
> Perhaps.
>
>> I had hoped that someone would comment so that I might better
>> understand.
>> Maybe simply say that one item was posted from home and the other
>> from a
>> different computer at work.
>
> ...or from one laptop using two different wireless access points.
>
> [snip]

It's that 'attitude' phenomenon again. PA Bear (aka Robear Dyer) is a
*highly* prolific poster both in the Microsoft Newsgroups and at Aumha.
It is difficult to imagine that someone so knowledgeable and helpful (on
the surface anyway) could be a 'bad guy' - but 'he' HAS lied about me
and my past. I remain suspicious of both 'him' and of Aumha! (see
http://www.aumha-oto.org/thelema.html )

Dave


FromTheRafters

unread,
Jan 2, 2009, 9:57:18 PM1/2/09
to
"~BD~" <Boate...@hotmail.co.uk> wrote in message
news:%23cb01hP...@TK2MSFTNGP06.phx.gbl...

>
> "FromTheRafters" <err...@nomail.afraid.org> wrote in message
> news:%23A%23CYQEb...@TK2MSFTNGP05.phx.gbl...
>> inline
> Snip
>
>>> Can you help me to better understand Header information?
>>
>> http://www.cynthiaarmistead.com/headers/headers.shtml
>
> Thank you. I spent a while reading Cynthia's site!

Many places on the net have these explanations, some stick with
e-mail and barely touch on newsgroups. You could read some
nntp rfc's to learn how the system is/was designed to work. A
person has to have good reading comprehension to make heads
or tails of the information though.

>>> I've tended, like I'm confident most visitors do, to accept the 'Nick'
>>> of someone posting to represent who they really are
>> Well...my momma didn't *really* name me FromTheRafters - sorry to
>> burst your bubble. :o)
>
> Hahaha! I enjoy your sense of humour, FTR

Let me apologize in advance for any jabs at you that may appear
in future or past posts. :oD

[snip]


James Matthews

unread,
Jan 6, 2009, 8:31:21 AM1/6/09
to

Thank You likewise
--

http://www.astorandblack.com/


"BoaterDave" <Boate...@discussions.microsoft.com> wrote in message

news:681FA41C-9053-4089...@microsoft.com...

~BD~

unread,
Jan 6, 2009, 12:58:53 PM1/6/09
to
:) YW You have a great year, James!

Never tell lies like the poster PA Bear (aka Robear Dyer) viz:-

0 new messages