Terra Lycos Corporate Office

Calle Nicarague, 54
Barcelona, Spain
34-03.363.13.00

Whose Using These Stolen
Accounts and For What?


During the 5 year study this subject a remarkable number of email and internet web accounts were seized by persons unknown. As the person who set up these accounts primarily for academic research I have to ask who has stolen the passwords, what are the accounts being used for and why are the internet firms involved refusing to close these accounts? Are the accounts being used as cover by drug dealers; pornographers; terrorist; criminals; or who?


Corporate Headquarters
Executive Chairman:
Email
Terra Lycos
Calle Nicaragua, 54
Barcelona, Spain
Tel: 34-93.363.13.00

Central Offices:Terra Lycos
Paseo de la Castellana,
Suite 92
28046 Madrid, Spain
Tel: 34-91.452.39.00

Operating Headquarters
100 5th Ave
Waltham, MA 02451 U.S.A.
Tel: 781-370-2700
Fax: 781-370-2600


Miami
1201 Brickell Avenue,
Suite 700
Miami, FL 33131
Tel: 781-370-2700

New York
115 5th Ave,
2nd Floor
New York, NY 10003
Tel: 212-898-6600
Fax: 212-898-6699

San Francisco
660 Third Street,4th Floor
San Francisco, CA 94107
Tel: 415-276-8400
Fax: 415-276-8499



Tripod Lycos Placing
Spyware On Customers Computers?


Are you one of the thousand some odd law enforcement or emergency service professionals in Washington State who helped created the Emergency Management Directory only to learn as we see below that "terrorist at Lycos and tripod have been placing spy ware and virus on your computer system each time you visit the site?

Date: Fri, 30 Apr 2004 14:57:56 -0700 (PDT)
From: Bill Steele
Subject:Ok link to CREW?
To: Chris Certvolunteer
chrissaidthanks2004@lycos.com
Cc: Bob Freitag
Ed Mulligan

Chris -You don't need my permission to link to CREW.org but I am concerned that your web site takes a long time to load and places 6 diffrent spy ware tracking cookies on my computer when I go there. As it is currently configured CREW would NOT like to link to your web page. Whats up? If you want to provide a public service I suggest you get the adware cleaned up. If you are in a for profit mode you should say so straight up and still reject spyware from your sponsors. Concerned about privacy and truth in advertizing-

Bill William P. Steele
Director of Information Services
Pacific Northwest
Seismograph Network (PNSN)
UW Earth and Space Sciences
Box 351310
Seattle, WA 98195-1310
Phone: 206-685-5880


Spyware Companies

Who Put SpyWare
On Your Computer

These are firms whose banners; cookies, and spyware regularily appear on the computer screen and are prime canidates to investigate to receive a law enforcement officers bullet for installing unauthorized computer software on your computer.


Businesses With
No Sign of Ownership


Although these firms do business with Lycos or Tripod they have no visible means to identify themselves as to ownership; place of business; phone; or email:

http://www.theuseful.com
http://www.undertone.net
http://icc.intellisrv.net
http://sbase30.com
http://www.cheaptickets.com


A Little More Legitimate
Advertising Concerns


MyFamily.com, Inc.
email
Corporate Communications
(801) 705-7000

http://www.lastminutetravel.com
email

YourFreeDVDs.com
655 W. Evelyn Ave. Suite 2
Mountain View, CA 94041
PR@YourFreeDVDs.com

EBlocs.Com
Networking Dymanics Corporation
Email
101 North Garden Ave, Suite 200
Clearwater, Fl 33775
727-446-4511
ExitExchangeŽ Corporation
921 SW Washington Street Suite 228
Portland, OR 97205
Email




Question Computer Hacking

March, 2004

If We Hack Your Website
Do We Get Executed in Seattle?


Violations of Title 18 CRIMES occuring here in this area of North Carolina belong to the United States District Court Middle District of Carolina; your great fortune the Chairman Howard Coble just happens to reside right here in this part of North Carolina and might be able to address your question:

Date: Fri, 19 Mar 2004 08:36:25 -0800
From: TJ McDonald
TJ.McDonald@Seattle.Gov

Subject: Question?
Date: Sat, 13 Mar 2004
To: chrissaidthanks2004@lycos.com

I'll start with your site host (Tripod). It looks like they should get rid of the offending directory and establish how someone was able to create it.

TJ McDonald
Information Technology Coordinator
Seattle Emergency Management
(206) 233-5073



Denial of Service Attack

Suspect City of Roanoke, VA
Question of Computer Hacking
Roanoke,VA-July 2004

From: "The Lycos Mail Team"
mail_notice@support.terralycos.com
To: chrissaidthanks2004@lycos.com
Subject: Lycos Mail user notification
Date: 14 Jul 2004 11:38:56 -0000

Lycos Mail Users:

We apologize for the inconvenience of yesterday's unavailability of your Lycos Mail account. We experienced a DDOS (Distributed Denial of Service) attack, resulting in a server overload. Once identified, we worked immediately to resolve the issue by blocking the IP addresses that were sending our servers unusually high traffic.

We will continue to monitor traffic patterns in the effort to bring you the highest quality service possible. Thank you for your patience and again, we apologize for any inconvenience this may have caused.

We appreciate your continued support for our product,

The Lycos Mail Team



Question Computer Virus
Question of Computer Virus
Used Against HS Research-March, 2004

In a week the unknown party has generated 4 different messages attached to a computer virus into an email account which is involved in Home Land Security research and is therefore believed to be a threat to the people of the State of Washington the project serves.

Date: Sat, 13 Mar 2004
02:42:12 -0800
From: Administrator@
co.wahkiakum.wa.us

Subject:Symantec Mail Security
detected an unrepairable
virus in a message you sent
SYM:32113435313578195977
To: certvolunteer@lycos.com

Subject of the message: Re: Your bill Recipient of the message: Mark Linquist

Date: Tue, 16 Mar 2004 11:29:00 -0800
From: judy@ccpd.com add to address book
Subject:Here
To: certvolunteer@lycos.com


Please read the attached file.

Name: yours.pif
Size: 22016 byte(s)
Type: application/octet-stream


1. http://members.tripod.com/floridaem
certvolunteer@lycos.com
Type of: Voc Rehab
Subject: Emergency Management
Date 9-3-2003
Event:Website Block intemitten for about week
Place:Winston Salem,NC
Suspect:Unknown person using WinstonNet Lycos is trying to categorize the site as Adult Content and posting ads which make viewer believe their computer is infected with virus.<


2. http://members.tripod.com/questiontocongress
Type of: Legal Questions
Subject:Questions to US Congress & UN
Date: 12-5-2001 10AM
Website Block: intemitten for about week
Place: Winston Salem,NC
Suspect:Unknown person using WinstonNet


3. http://www.tripod.com
nemd@eudoramail.com
Type of:Tripod Main Page
Date: 12-13/14-2001
Event: Forsyth County Library the entire site for tripod appears blocked intermittently all over the library for 2 days.
Place: Winston Salem,NC
Suspect:Unknown persons using WinstonNet


4. http://www.tripod.com
Type of:Political
*** Title 42 USC 1986 Proceeding In Vindiation of Civil Rights
Subject:Question of restitution of Slavery
Date: 8-2003
Event: Internet site hacked
Place: Harrisburg, PA
Suspect:Pennsylvania State during solicition of slave or indentured servant.


5. http://members.lycos.co.uk/hairbook2002
Type of: Voc Training Program
For File and Picture Manipulation
Subject: Hairstyling
Date: Feburary, 2002
Event: Internet site hacked off internet
Place: Harrisonburg, Virginia
Suspect: Possibly Blue Ridge Community College Reported to Scotland Yard *** Possible international crime since computer server is located in United Kingdom


6. http://members.tripod.com/nemd3
Type of:Legal questions
Subject:Questions to US Congress & United Nations
Date Believed August 2001
Event: Hacked Off Internet
Place: Bellingham, WA
Suspect:State of Washington, State employment office.


7. https://www.angelfire.com/fl/nemd
Type of:Legal questions
Subject:Questions to US Congress & United Nations
Date: 1997
Event: Hacked Off the Internet
Place: Gainesville, Fl
Suspect:University of Florida


8. https://www.angelfire.com/id2/ssireform
Type of: Medical Records StorageM
Subject:Social Security Reform
Date: 8-20-01 /8-30/01
Event: Week long intermitten website block
Place: Gettysburg, PA
Suspect:Gettysburg College & Adams County


9. http://members.tripod.com/nemd
Type of: Voc Training Program For File and Picture Manipulation
Subject: Hairstyling
Date: 3:30 PM 5-21-01
Event: Destruction of Internet Site: I was replacing files while at North Dakota State University and the site was destroyied in less than 10 minutes.
Suspect: North Dakota State University


10. http://members.tripod.com/hairbook
11. http://members.tripod.com/hairbook2
hairbook@mailcity.com
Type of :Voc Training Program
For File and Picture Manipulation
Subject:Hairstyling
Date: June-July 2001
Event: Theft of Password followed by intermitten removal pictures over a period of years.
Place: Moorehead, Minnestoa
Suspect:Lutheran College; Moorhead State University
North Dakota State University

Date: Mon, 14 Aug 2006 15:02:44 -0400
From: "Lycos Support" support@support.lycos.com>
Subject: Re: Request close stolen website [5320-QWDC-6900]
[1270688e] Our Response
To: chrissaidthanks2002@yahoo.com

Dear chrissaidthanks2002@yahoo.com,

This is an automated message to advise you that a technician has responded to your question. You can view this response and track the progress of your inquiry online, or see the included reply below:

Online Response:
http://help.lycos.com/view.php?ticketref=5320-QWDC-6900&pass=89b3a30d

You can also reply to this e-mail.
Ticket Ref : 5320-QWDC-6900
Ticket Subject : Request close stolen website

Reply: I'll address this right away.

In order to verify that you are the creator of this account, or that the creator of the account has agreed to allow you to gain access to it, please provide me with as much of the following information as possible. If any of the information that you relay does not correspond with our database, I may be unable to delete the site.

Username and/or Angelfire or Tripod URL
E-mail address used to register account
Full name (first and last)
Birthdate
Zip code used at the time of registration
Approximate date & time of registration

If you have any questions, please feel free to contact me.

Sincerely, Jeremy
Lycos Network Abuse



Yahoo & Geocities

Yahoo! Inc.
701 First Avenue
Sunnyvale, California 94089
(408) 349-3300
Fax (408) 349-3301

Thefts Involving Yahoo
& Geocities Accounts


I have never received any communication from either Yahoo & Geocities as to why these accounts may have been seized or stopped although Geocities has received courtsey Brief from USDC proceedings that these accounts were stolen and apparently maintains them online as their responsibility:

1. http://www.geocities.com/wsproposal
Type of: Technical Question
Subject: Question for Winston Salem
Date: 8-21-2003 1;45 PM
Website Blocks problem closing site
Place: Winston Salem,NC
Suspect: WinstonNEt


2.http://www.geocities.com/certvolunter
Type of: Voc Training Program
Subject: Emergency Management
Date: August 2003
Website: Blocks at 3 locations for about a month
Place: Gettysburg, PA
Suspect: Webmaster Gettysburg College


3. http://www.geocities.com/certvolunter
Type of: Voc Training Program
Subject: Emergency Management
Date: April 4, 2003 4-10-2003
Website Blocks Bill Gates Computer Lab Public
Library and 2 hour block of all
geocities sites 4-10-2003 1-3 PM
Place: Winston Salem,NC
Suspect: WinstonNET


4. http://www.geocities.com/sallyresume
Type of: Health Issue
Subject: Testbed for examination
impact on health issues
Date: 5-21-2001
Event: Theft of password
Place: Roanoke,Virginia
Suspect: Public Library


5. http://www.geocities.com/thejesussanction
Type of: Bible Study
Subject: Testbed for examination of
theories on Bible study
Date: 5-21-2001
Event: Theft of password
Place: Believed in Roanoke Virginia
Suspect: Public Library

6.http://www.geocities.com/hairbook
hairbook@yahoo.com
Type of: Vocational Training Program
- study of image files
Subject: Study of Gif placement in website
Date: 1999-2001 8-3-2000
Event: Theft of password
Place: Nampa, Idaho
Suspect: Bosie State University
State of Idaho
Albertson College
NW Nazareen College,
Canyon County Sheriff Dept


Yahoo & Geocities

Yahoo! Inc.
701 First Avenue
Sunnyvale, California 94089
(408) 349-3300
Fax (408) 349-3301

Thefts Involving Yahoo
& Geocities Accounts


7.http://www.geocities.com/hairbook2
hairbook2@yahoo.com
Type of Vocational Training Program
Subject: Study of GIF placement in website
Date: 1999-2001 8-3-2000
Event: Website Blocks
Event: Theft of password
Place: Boise, Idaho
Suspect: Bosie State University
State of Idaho
Albertson College
NW Nazareen College,
Canyon County Sheriff Dept


8. http://www.geocities.com/ssireform
ssireform@yahoo.com
Type of: Medical Records
Subject: Legal Questions To Congress & UN
Date: 7-28-2001
Event:Website Blocks
Place: Nampa, Idaho
Suspect:NW Nazareen College


9. http://www.geocities.com/unhchr
Type of: Legal Questions
Subject: Questions to Congress& United Nations
Date: 2001(?)
Event: Website Blocks
Place: Nampa, Idaho
Suspect:Boise State University
State of Idaho
Albertson College
NW Nazareen College,
Canyon County Sheriff Dept


10. http://www.geocities.com/jewwalt
http://www.geocities.com/nemd
http://www.geocities.com/CollegePark/Center/2011
jewwalt@yahoo.com
nemd@yahoo.com
Type of: Emergency Management
Subject: Testbed for emergency management
Date: August, 1999
Event: Website Blocks
Place: Boise,Idaho
Suspect:Computer Lab Manager
Boise State University




Fortune City Com

New York Office
500 Seventh Ave.15th Floor
New York, NY 10018
212/706-3000
fax 212/706-3100



Natonal Broadcasting Company Internet

New York, New York

Thefts Involving
Assorted Internet Providers




ServerPro.com

aka Topcities
ServerPro Web Hosting
P.O. Box 4905
La Puente, CA 91747



1. http://members.fortunecity.com/hairbook
Type of Publication: Voc Training Program
Subject: Advance study of gifs and jpg files
Date: 2001
Event: Theft of password control
Place: Moorehead, Minnesota
Suspect: Lutheran College in
Moorehead, Minnestoa

Date: Fri, 11 Aug 2006 10:48:44 -0500
To: chrissaidthanks2002@yahoo.com
From: "FortuneCity"
Subject: Re: Fortunecity Support Email

Account deleted as requested.

Regards The FortuneCity Team

At 09:50 AM 8/11/2006 -0400, you wrote:

first_name: Chris

last_name: Walters

username: Hairbook

website: http://hairbook.fortunecity.com

description: Good Morning Fortune City: we had the password and email account to our account stolen about 3 years ago and reported it to the FBI computer crimes unit. Since I have no means of updating or correcting the account how hard would it be to delete the entire website?
Many Thanks Chris Walters


2. http://abovethelaw.0catch.com
Type of: Legal Questions
Subject: Issues addressed to Congress & United Nations
Date: 5-19-2003
Event: Website hacked off the internet
Place: Winston Salem,NC
Suspect: Unknown person @ WinstonNET


3. http://genocide.topcities.com/
Type of: Legal Questions
Subject: Issues addressed to Congress & United Nations
Date: Janurary 2-2002
Event: Website Block in preparation to hack site
off internet to obstruct Congress & UN
Place: Roanoke, VA
Suspect: City of Roanoke Library
Cyberpatrol SurfControl
100 Enterprise Way Suite A110
Scotts Valley, California 95066
Customer Service: (800)828-2608
Verification of Removal
Kenny Jou ServerPro.com
ServerPro Web Host
PO Box 4905
La Puente, CA 91747
abuse@serverpro.com


4.http://hairbook.topcities.com
Type of: Voc Rehab Study
Subject: Study of jpg files and gifs
Date: 2000
Event: Hacked off the internet
Place: Virginia
Suspect: Suspect but can't prove that this site was blacklisted by Cyberpatrol & City of Roanoke and it is believed that topcities simply dumps clients off their server on a periodic basis with no notice or complaint.


6.http://members.nbci.com/ssireform
Type of: Legal question
Subject: Issues addressed to Congress & United Nations
Date: 1-26-2001
Event: Website block
Place: Tucson, AZ
Suspect: University of Arizona is placing website blocks at main college library in preparation to hacking site off internet.

6. http://members.nbci.com/hairbook
Type of: Vocational Training
Subject: Study of File & Gif
Date: 1-26-2001
Event: Website Block
Place: Tucson,AZ
Suspect: University of Arizona


FastCounter by bCentral


7. http://www.fortunecity.com/nemd
Type of Publication: Voc Training Program
Subject: Emergency Management
Date: 1997
Event: Hacking of website
Place: Austin,TX
Suspect: "TIM" an employee of Fortunecity emailed me back and told me to stick it where the sun don't shine in response to questions on hacking.


8. http://www.impeach.homepage.com
Type of: Legal question
Subject: Legal questions to Congress
Date: 2000
Event: Website Block
Place: Boise, Idaho
Suspect: Entire state of Idaho


9. nemd2@hotmail.com
Type of: Email
Subject: Educational
Date: 1999-2001
Event: Mass reciept of porn believed to be as part of electronic warfare attack on email site controlling questions addressed to Congress
Place: Boise, ID
Suspect: Boise State University


10. cw911@hotmail.com
Type of: Email
Subject: Educational
Date: 1997
Event: Theft of email account Suspect states he is part of "conspiracy" and declined to explain actions in USDC, WDT
Place: San Antonio College
Suspect: Mr. Manuel Flores
San Antonio College FAC 209
1300 San Pedro,
San Antonio, TX 78212.
210 733-2751
Fax number (210)733-2579


United States District

Court Magistrate Hogan
@ Eugene, Oregon


Chris Walters      	)
Plaintiff Pro Se    	) 
       	               	)
               	        )
	vs.             )
                       	)
	John Doe	)
	Defendant
Civil Case 00-MC-604-HO
Magistrate  Michael Hogan


nemd2@yahoo.com
Type of: Email
Subject: Educational
Date: 6-8-2000
Event: Theft of Email account recovered with assist of US District Magistrate Horgan
Place: Medford, Oregon
Suspect:Rogue Valley Community College Jobs Council

These 2 guys were posting legal notices at Jobs Council in Medford, Oregon in 10-2002 threatening visitors with Federal criminal prosecution although neither is a law enforcement officer. When I objected they tried to hack files off my computer disc and then called around the community trying to obstruct my Voc Rehab projects:


Greg Frownfelter 		
GREGF@JobCouncil.org 		
673 Market Street 		
Medford, OR 97504 		
(541) 776-5100 

Larry Dennison	
573 Market Street, 
Medford, Oregon 97504 
(541-776-5100)