Phantom Phone - Teh Forum

From:	koswix	26 Nov 2014 09:43
To:	ALL	1 of 43

41284.1

Every so often the Network page in Windows 8.1 shows a Sony Xperia phone connected.

We don't have any Sony phones, and it's not connected to the router. Da fuck?

https://www.dropbox.com/s/7hwsaeltcimrg0v/Screenshot%202014-11-26%2009.39.50.png?dl=0


 ▪                    
             ┌────┐    ┌────┐                      
          │    │    │    │ ▪                    
          │    └────┘    │                      
          │   ──┐  ┌──   │ ▪                    
   ┌──────┤    ▪    ▪    │                      
  ┌┘      │              │ ▪                    
┌─┤       └──┐  │  │  ┌──┘                      
│ │          │ ││  ││ │   ┌─┐                   
│ │          └─┼┤  └┴─┴───┘ │                   
│ │           ─┘│           │                   
│ │   ┌──────┐  └┬──────────┘                   
  │   │      │   │                              
  │   │      │   │                              
  └───┘      └───┘

If Feds call you and say something bad on me, it may prove what I said are truth, they are afraid of it.

0/0

Reply Quote

More

From:	ANT_THOMAS	26 Nov 2014 09:51
To:	koswix	2 of 43

41284.2 In reply to 41284.1
Sure it's not a Bluetooth device? Try an arp scan if you want to see what devices are on the network. ┌─────┐ │ │ │ ┌─┐ │ │ │ │ │ │ └─┘ │ │ │ │ ┌─┐ │ │ │ │ │ │ │ │ │ └─┘ └─┘

0/0

Reply Quote

More

From:	koswix	26 Nov 2014 10:02
To:	ANT_THOMAS	3 of 43

41284.3 In reply to 41284.2

Bluetooth is off. Running an arp scan now, but looks like it's disappeared.

Is it the feds? are they say bad on me?


 ▪                    
             ┌────┐    ┌────┐                      
          │    │    │    │ ▪                    
          │    └────┘    │                      
          │   ──┐  ┌──   │ ▪                    
   ┌──────┤    ▪    ▪    │                      
  ┌┘      │              │ ▪                    
┌─┤       └──┐  │  │  ┌──┘                      
│ │          │ ││  ││ │   ┌─┐                   
│ │          └─┼┤  └┴─┴───┘ │                   
│ │           ─┘│           │                   
│ │   ┌──────┐  └┬──────────┘                   
  │   │      │   │                              
  │   │      │   │                              
  └───┘      └───┘

If Feds call you and say something bad on me, it may prove what I said are truth, they are afraid of it.

0/0

Reply Quote

More

From:	99% of gargoyles look like (MR_BASTARD)	26 Nov 2014 10:29
To:	koswix	4 of 43

41284.4 In reply to 41284.3
If you're not wearing your tin-foil hat, now would be a good time to start. bastard by name bastard by nature

0/0

Reply Quote

More

From:	koswix	26 Nov 2014 13:28
To:	99% of gargoyles look like (MR_BASTARD)	5 of 43

41284.5 In reply to 41284.4

Of course I'm wearing my tinfoil hat, how else would I be getting wifi reception?


 ▪                    
             ┌────┐    ┌────┐                      
          │    │    │    │ ▪                    
          │    └────┘    │                      
          │   ──┐  ┌──   │ ▪                    
   ┌──────┤    ▪    ▪    │                      
  ┌┘      │              │ ▪                    
┌─┤       └──┐  │  │  ┌──┘                      
│ │          │ ││  ││ │   ┌─┐                   
│ │          └─┼┤  └┴─┴───┘ │                   
│ │           ─┘│           │                   
│ │   ┌──────┐  └┬──────────┘                   
  │   │      │   │                              
  │   │      │   │                              
  └───┘      └───┘

If Feds call you and say something bad on me, it may prove what I said are truth, they are afraid of it.

0/0

Reply Quote

More

From:	Peter (BOUGHTONP)	26 Nov 2014 15:21
To:	koswix	6 of 43

41284.6 In reply to 41284.1
Why would it say "Manufacturer's website unavailable" for someone the size of Sony? :/ I'd double-check you've got decent and up-to-date anti-malware running. `3.1415P265E589T932E846R64338`

0/0

Reply Quote

More

From:	william (WILLIAMA)	26 Nov 2014 17:19
To:	koswix	7 of 43

41284.7 In reply to 41284.1
What 8.1 screen is it appearing on? It isn't just an entry in File Explorer under the Network Heading is it? Your screenprint shows an unknown device in the table on the broadband setup page. Can you account for that entry? Not sure whether you were indicating that it did or it didn't relate to the Sony entry. Windows may have tried to install some phone, or even some other device, at some point in the past via upnp and just be showing you what it identified as a network device. never trust a man in a blue trench coat, never drive a car when you're dead

0/0

Reply Quote

More

From:	patch	26 Nov 2014 18:07
To:	koswix	8 of 43

41284.8 In reply to 41284.1
Just block its MAC address in your router and wait for the complaints.

+2/2

Reply Quote

More

From:	koswix	26 Nov 2014 19:11
To:	Peter (BOUGHTONP)	9 of 43

41284.9 In reply to 41284.6

It's been cropping up since day one of the install so doubtful it's malware in that sense.


 ▪                    
             ┌────┐    ┌────┐                      
          │    │    │    │ ▪                    
          │    └────┘    │                      
          │   ──┐  ┌──   │ ▪                    
   ┌──────┤    ▪    ▪    │                      
  ┌┘      │              │ ▪                    
┌─┤       └──┐  │  │  ┌──┘                      
│ │          │ ││  ││ │   ┌─┐                   
│ │          └─┼┤  └┴─┴───┘ │                   
│ │           ─┘│           │                   
│ │   ┌──────┐  └┬──────────┘                   
  │   │      │   │                              
  │   │      │   │                              
  └───┘      └───┘

If Feds call you and say something bad on me, it may prove what I said are truth, they are afraid of it.

0/0

Reply Quote

More

From:	koswix	26 Nov 2014 19:17
To:	william (WILLIAMA)	10 of 43

41284.10 In reply to 41284.7

All the router entries are valid. The 'unknown' is my phone. Sometimes it shows up as unknown, somtimes as kosPhone. My network setup is /awful/ and leads to some annoying problems like that.


 ▪                    
             ┌────┐    ┌────┐                      
          │    │    │    │ ▪                    
          │    └────┘    │                      
          │   ──┐  ┌──   │ ▪                    
   ┌──────┤    ▪    ▪    │                      
  ┌┘      │              │ ▪                    
┌─┤       └──┐  │  │  ┌──┘                      
│ │          │ ││  ││ │   ┌─┐                   
│ │          └─┼┤  └┴─┴───┘ │                   
│ │           ─┘│           │                   
│ │   ┌──────┐  └┬──────────┘                   
  │   │      │   │                              
  │   │      │   │                              
  └───┘      └───┘

If Feds call you and say something bad on me, it may prove what I said are truth, they are afraid of it.

0/0

Reply Quote

More

From:	koswix	26 Nov 2014 19:18
To:	patch	11 of 43

41284.11 In reply to 41284.8
Good idea! I'll do that now. Only issue is that I have a Sky broadband booster thing, and anything connected to that is presented to the router under the booster's MAC address (which is /really/ annoying, as I want to reserve an IP for my rasperby pi but it connects via the booster (as it's about 6 inches away from it) so I can't :@ ) ▪ ┌────┐ ┌────┐ │ │ │ │ ▪ │ └────┘ │ │ ──┐ ┌── │ ▪ ┌──────┤ ▪ ▪ │ ┌┘ │ │ ▪ ┌─┤ └──┐ │ │ ┌──┘ │ │ │ ││ ││ │ ┌─┐ │ │ └─┼┤ └┴─┴───┘ │ │ │ ─┘│ │ │ │ ┌──────┐ └┬──────────┘ │ │ │ │ │ │ │ │ └───┘ └───┘ If Feds call you and say something bad on me, it may prove what I said are truth, they are afraid of it.

0/0

Reply Quote

More

From:	99% of gargoyles look like (MR_BASTARD)	26 Nov 2014 21:32
To:	koswix	12 of 43

41284.12 In reply to 41284.10
You don't have some dodgy DHCP/DNS setup, do you? bastard by name bastard by nature

0/0

Reply Quote

More

From:	koswix	26 Nov 2014 21:45
To:	99% of gargoyles look like (MR_BASTARD)	13 of 43

41284.13 In reply to 41284.12

Probably, it's all Sky gear running the show :S


 ▪                    
             ┌────┐    ┌────┐                      
          │    │    │    │ ▪                    
          │    └────┘    │                      
          │   ──┐  ┌──   │ ▪                    
   ┌──────┤    ▪    ▪    │                      
  ┌┘      │              │ ▪                    
┌─┤       └──┐  │  │  ┌──┘                      
│ │          │ ││  ││ │   ┌─┐                   
│ │          └─┼┤  └┴─┴───┘ │                   
│ │           ─┘│           │                   
│ │   ┌──────┐  └┬──────────┘                   
  │   │      │   │                              
  │   │      │   │                              
  └───┘      └───┘

If Feds call you and say something bad on me, it may prove what I said are truth, they are afraid of it.

0/0

Reply Quote

More

From:	Peter (BOUGHTONP)	26 Nov 2014 21:59
To:	koswix	14 of 43

41284.14 In reply to 41284.9
It's been cropping up since the moment your computer was at its most vulnerable...? It's probably not malicious, but it's also sufficiently odd that it makes sense to do a check up and make sure, no? `3.1415P265E589T932E846R64338`

0/0

Reply Quote

More

From:	koswix	26 Nov 2014 22:29
To:	Peter (BOUGHTONP)	15 of 43

41284.15 In reply to 41284.14

I ran a full scan a few weeks ago and it found nothing. And took many, many hours.


 ▪                    
             ┌────┐    ┌────┐                      
          │    │    │    │ ▪                    
          │    └────┘    │                      
          │   ──┐  ┌──   │ ▪                    
   ┌──────┤    ▪    ▪    │                      
  ┌┘      │              │ ▪                    
┌─┤       └──┐  │  │  ┌──┘                      
│ │          │ ││  ││ │   ┌─┐                   
│ │          └─┼┤  └┴─┴───┘ │                   
│ │           ─┘│           │                   
│ │   ┌──────┐  └┬──────────┘                   
  │   │      │   │                              
  │   │      │   │                              
  └───┘      └───┘

If Feds call you and say something bad on me, it may prove what I said are truth, they are afraid of it.

0/0

Reply Quote

More

From:	Peter (BOUGHTONP)	26 Nov 2014 22:51
To:	koswix	16 of 43

41284.16 In reply to 41284.15
Then you're probably fine. (So long as it's decent software with updated definitions.) p.s. Most people have this condition called "sleeping" - it's a rather annoying occurrence, but it does at least provide a useful period during which non-interactive tasks that take many hours can be scheduled. `3.1415P265E589T932E846R64338`

0/0

Reply Quote

More

From:	koswix	26 Nov 2014 23:15
To:	Peter (BOUGHTONP)	17 of 43

41284.17 In reply to 41284.16

Yeah, it took me three nights to run a full scan. The first two nights the laptop decided it'd had enough and shut down :C


 ▪                    
             ┌────┐    ┌────┐                      
          │    │    │    │ ▪                    
          │    └────┘    │                      
          │   ──┐  ┌──   │ ▪                    
   ┌──────┤    ▪    ▪    │                      
  ┌┘      │              │ ▪                    
┌─┤       └──┐  │  │  ┌──┘                      
│ │          │ ││  ││ │   ┌─┐                   
│ │          └─┼┤  └┴─┴───┘ │                   
│ │           ─┘│           │                   
│ │   ┌──────┐  └┬──────────┘                   
  │   │      │   │                              
  │   │      │   │                              
  └───┘      └───┘

If Feds call you and say something bad on me, it may prove what I said are truth, they are afraid of it.

0/0

Reply Quote

More

From:	Peter (BOUGHTONP)	27 Nov 2014 00:14
To:	koswix	18 of 43

41284.18 In reply to 41284.17
That sucks. :/ Next time don't bother running it the first two nights and just wait until the third one. :> `3.1415P265E589T932E846R64338`

+2/2

Reply Quote

More

From:	Ken (SHIELDSIT)	27 Nov 2014 14:38
To:	koswix	19 of 43

41284.19 In reply to 41284.3
As long as they bring donut! ------------------------------------------------------------------------ If you don't like donut, then leave it alone. Nobody force you to eat it.

0/0

Reply Quote

More

From:	CHYRON (DSMITHHFX)	28 Nov 2014 15:23
To:	Peter (BOUGHTONP)	20 of 43

41284.20 In reply to 41284.6
Weren't they quite recently hacked? ---- "Ninety percent of Americans use the Internet. The other ten percent use the banjo."

0/0

Reply Quote

More