Central Intelligence Agency
Foreign Terrorist Groups
Topic #21 Question of Foreign
Terrorist Groups
This file reviews apparent subversive activities involving foreign nationals who are
in various public institutions and believed engaged in activities to obstruct research
related to emergency management or Homeland Security
Mr. Vasilios A. Aivaliotis
Head of Public Services
basila@universe.uiwtx.edu
210/829-6054
UIW Maybee Library
4301 Broadway,
San Antonio, Texas 78209
210-829-6005
Topic #22 Incident On Campus Of Incarnate Word
1. Saturday, Janurary 29th, 2005 Librarian reports a foreign national of possible middle eastern decent
had disassembled part of a campus phone and tried to connect it to a library computer possibly to make
a long distance phone call.
2. The librarian reported this to campus security who reportedly chased the
man and his 2 friends who were trying to break into cars on campus to a waiting vehicle.
3. The car was later reported stolen out of Houston. 3 computer reported hacked were removed for examination. The
following events were noted during 2004-2005.
4. Although the Library Staff was observant enough to notice these folks they may have missed
another group which appears to be of Chinese or Korean orgin.
5. These problems and others reported below were largely resolved by requiring persons using the Library to produce
identification.
Most of the computer hacking here in San Antonio,Texas involves the resident liberal Democratic Party;
or very ultra conservative Republican oriented groups seeking a blow job for their respective political
positions.
Officer James Sides
San Antonio Police Department
214 W. NUEVA
San Antonio, TX 78207
210-207-7484
Topic #23 Police Report
Filed SAPD
RE: Thanks for reply & solution found
Date: Fri, 17 Dec 2004 09:31:38 -0600
From: "James Sides"
jsides@sanantonio.gov
To: "Chris Walters"
chrissaidthanks2002@yahoo.com
I am glad a solution was found. If you are in need of further
assistance please do not hesitate to contact me. I will forward this
email to our Computer Crimes Detectives so that they have something on
file if future problems occur.
James
Officer James Sides
San Antonio Police Department
214 W. NUEVA
San Antonio, TX 78207
210-207-7484
Topic #23 Police Report Filed SAPD
Department of Homeland Security
Federal Bureau Of Investigations
Topic #24 Minor Attacks On Homeland Security Research
FBI Complaint I0412081107125312-8-2004 about
11AM ongoing minor email hacking at chrissaidthanks2002@yahoo.com apparently aimed at interception of email
to emergency managementresearch project. The majority of the problem observed at San Antonio Public Library
involve email transmissions which are interrupted in transit to security programs.
San Antonio Public Library
Email
600 Soledad
San Antonio, TX 78205
PH (210) 207-2500
Norton Antivirus
Audit Zip Disc
1-5/6-2005
Topic #25 Norton Antivirus Finds Extra Filed-Audit On Disc
While making several CR-Rom it was noted that the file manager indicated 3041 files and the Norton antivirus program found the disc has 3044 files or 3 files more than are supposed to exist. An extensive of Audit zip disc 1/6/2005 finds that file manager show each disc has 3136 files while North Anti Virus has 3035 files. A discrepency of 1 file. The computer lab manager at University of Incarnate Word explained that files could be hidden or system files such as thumbs.db.
Department of Homeland Security
Federal Bureau Of Investigations
Topic #26 Minor Attacks On Homeland Security Research
FBI Complaint I04110415578487 ongoing minor
email hacking at chrissaidthanks2002@yahoo.com apparently aimed at interception of email to emergency management
research project. San Antonio Public Library
involve email transmissions which are interrupted in transit to security programs.
San Antonio Public Library
Email
600 Soledad
San Antonio, TX 78205
PH (210) 207-2500
chrissaidthanks2002@yahoo.com
Phishing Event
23:01 PM
1-6-2005
Topic #27 Phishing Event @ chrissaidthanks2002@yahoo.com
Phishing means another party is using my email name online to transmit messages.
Received this email from bogus account when I checked my emil a University of
Incarnate Word. Problem was I don't know the sender or intended recipient of
the email. Mail demon indicates Graham Hale is bogus internet address. Transcript of message below:
From: "Graham Hale"
Connztcqf@centras.lt
To: chrisjohn_75932@yahoo.com
Subject: just in
Date: Wed, 05 Jan 2005 23:01:00 -0500
chrissaidthanks2002@yahoo.com
Phishing Event
10:36 AM
1-5-2005
chrissaidthanks2002@yahoo.com
Phishing Event
10:36 AM
1-5-2005
Topic #28 Phishing Event @ chrissaidthanks2002@yahoo.com
Phishing means another party is using my email name online to transmit messages.
Mail demon returned an email 1-5-2005 when I checked my email at University
of Incarnate Word. Problem was I don't know the sender or intended recipient of
the email.
US Secret Service
Homepage
Topic #28 Your Homepage &
The Secret Service
Hello Sam:
It has been a honor to act as your computer instructor over the last 5 months
and you have excelled in your learning of html and other internet processes. As
most learning processes are trial and error this lesson for your benefit is on the
subject of the US Secret Service.
The US Secret Service is assigned to protect
the President and generally various members of the executive branch of the government. Persons who publish information
which appears threatening; slanderous; or abusive are often the subject of wide ranging federal investigations. Even
very experienced professional journalist with paid legal staff have occassionally stepped over the line and been sanctioned
for what they honestly believed to be accurate information about public officals.
Some of your publication has in the past had some remarks which might be considered slanderous or abusive and I as your
"computer instuctor" can only suggest if you want to publish something inflamatory you have an attorney or someone proof
read it. My motives here are entirely selfish as I am old and fat and sedate and do not wish to be picked up in the
middle of the night and have my fingernails pulled out because I helped your computer instruction. I have taught you
about everything you need and resign as your computer instructor.
Reopening Your Website
Your password is the same as before except the last digit is now the number 2. I can be sure you have completed
your last computer lesson when you reopen this site and resume your work
Norton Antivirus
Audit Zip Disc
1-5/6-2005
Topic #30 Norton Antivirus
Finds Virus Computer Lib110-08
Norton Anti Virus found "trojan horse" at Incarnate Word University Computer Library 110-08
at 1-12-2004 9:27:13 AM in file on C Drive in C:\Documents\Settings\Administration marked exitpoplight(1).htm Norton reports virus
cleaned (quarantined)
US Secret Service
Homepage
Hello Sam:
It has been a honor to act as your computer instructor over the last 5 months and you have excelled in your learning of html and other internet processes. As most learning processes are trial and error this lesson for your benefit is on the subject of the US Secret Service.
The US Secret Service is assigned to protect the President and generally various members of the executive branch of the government. Persons who publish information which appears threatening; slanderous; or abusive are often the subject of wide ranging federal investigations. Even very experienced professional journalist with paid legal staff have occassionally stepped over the line and been sanctioned for what they honestly believed to be accurate information about public officals.
Some of your publication has in the past had some remarks which might be considered slanderous or abusive and I as your "computer instuctor" can only suggest if you want to publish something inflamatory you have an attorney or someone proof read it. My motives here are entirely selfish as I am old and fat and sedate and do not wish to be picked up in the middle of the night and have my fingernails pulled out because I helped your computer instruction. I have taught you about everything you need and resign as your computer instructor.
Your password is the same as before except the last digit is now the number 2. I can be sure you have completed your last computer lesson when you reopen this site and resume your work
Norton Antivirus
Audit Zip Disc
1-5/6-2005
Topic #30 Norton Antivirus Finds Virus Computer Lib110-08
Norton Anti Virus found "trojan horse" at Incarnate Word University Computer Library 110-08 at 1-12-2004 9:27:13 AM in file on C Drive in C:\Documents\Settings\Administration marked exitpoplight(1).htm Norton reports virus cleaned (quarantined)
University of Incarnate Word
4301 Broadway,
San Antonio, Texas 78209
210-829-6005
Topic #31 Question of Spyware @ University of Incarnate Word 10-2004
Date: Thu, 28 Oct 2004 11:52:39 -0700 (PDT)
From: "Chris Walters"
chrissaidthanks2002@yahoo.com
Subject: Noted Some Spyware on
Your Library Computer
To: wilson@universe.uiwtx.edu
Addressed Too:
Stephen E. Wilson, Ph.D.
Chief Information Officer
Office Location: AD3
(210) 829-3866
Hello Dr. Stephen E Wilson
I have been doing some minor research and word
processing in your campus library and noted what
seems to be downloaded software which is full of
spy ads and spyware which was discussed briefly today
with a Librarian.
Some of the browsers have downloaded games such as
Poker from I believe something called Bonzo or
Bonzi Buddy.
Several of my computer instructors have
explained that these programs are loaded with spyware
and spyads which can actually absorb so much bandwidth
as to bring and system to a crawl. My computer
instructors have some type of software which prevents
both installation of spyware and blocks pop up ads.
I appreciate the use of the library for research and
thought your staff might find the information useful.
Chris Walters
Internet Fraud Center
Federal Bureau Of Investigations
Topic #32 Website Block of United Nations Website
We have a week long website block of the United Nations main website
http://www.un.org at the Univeristy of the Incarnate Word
which apparently was lifted 10-28-2004
University of Incarnate Word
4301 Broadway,
San Antonio, Texas 78209
210-829-6005
Topic #33 Problem Virus UICW?
From: "Dr. Steve Wilson"
wilson@universe.uiwtx.edu
To: certvolunteer@lycos.com
Subject: RE: Noted Some Spyware on Your Library Computer
Date: Thu, 28 Oct 2004 13:52:53 -0500
Hi Chris:
I do appreciate your sharp eyes and for letting me know. I will have
my staff do a review of these computers ASAP and bring them back into
spec.
Cheers,
Dr. Steve Wilson
University of Incarnate Word
4301 Broadway,
San Antonio, Texas 78209
210-829-6005
Topic #34 SAMM Client Plays Porn At Incarnate Word -Report 5
Date: Sun, 30 Jan 2005 09:06:42 -0800 (PST) From: "Chris Walters" chrissaidthanks2002@yahoo.com Subject: Pornographer visiting library To: chrissaidthanks2002@yahoo.com
Addressed Too:Stephen E. Wilson, Ph.D. wilson@universe.uiwtx.edu Chief Information Officer Office Location: AD3 (210) 829-3866
Hello Dr. Stephen E Wilson:
Wanted to drop you a heads up on a Chris David lordacheron666@gmail.com whose visiting the Library. When Chris visits the library he is spending his time viewing explicit pornography from his email. Eventually the students will notice this and it will cause a problem.
Chris Davis lives at the SAMM Shelter and probally comes to the Library because he was run off the campus of Lady of The Lake.
I appreciate the use of your facilities as a visiting researcher and hope you don't mind the heads up.
Chris Walters Author
Date: Mon, 31 Jan 2005 12:23:45 -0600 (CST) From: "Basil Aivaliotis" basila@universe.uiwtx.edu To: "Chris Walters" chrissaidthanks2002@yahoo.com Subject:Pornographer visiting library
Mr. Chris,
I appreciate very much you let me know about the incident. We will take action immediately!
Basil
