u/tess_mau

Hi, I once had a person from Bengladesh who managed to get me an account for cheap, does anyone here do it? DM if needed.

Thanks!

**System:** ASUS VivoBook M5506WA, Ryzen AI 9 365, Radeon 880M, 32 GB, Windows 11. Microsoft Defender only, no third-party AV.

**Symptoms**

Chrome closing silently at random intervals — no crash dialog, no "Aw Snap," nothing in the Windows Application event log. Each time it left ~41 orphaned chrome.exe processes running, so clicking the icon did nothing (new launches attached to the dead instance). `chrome://crashes` showed 50 reports, six of them within 10 seconds at 17:53 on 11 Aug 2026. Reliability Monitor showed application failures going back to 26 July. Timing was random, not correlated with any particular action.

**What was found (all 2026 unless noted)**

1. `%APPDATA%\6924df8.js` + copy in `%TEMP%`. Heavily obfuscated JS. Persistence via HKCU Run key `6924df8`, launched as `conhost.exe --headless "<user>\scoop\apps\deno\current\deno.exe" -A "<script>"`. Behavior: fingerprints host (hostname/user/OS/CPU), rotates through a list of C2 domains via a `/health` check, sends a hardcoded JWT in an Authorization header, downloads a payload, writes it to disk, executes it as a subprocess, loops forever. Also shells out to PowerShell to rewrite its own Run key.

2. `C:\ProgramData\jserver\` — `jstat.exe` (genuine, validly signed Java binary) alongside `jli.dll` at 36,475,392 bytes where the legitimate file is ~180 KB. Classic DLL sideloading. Persistence via HKLM Run key `jserver` using `cmd /c start` to suppress the window. Dated 5 Aug.

3. `C:\ProgramData\OpenJDM\` — identical file set to the above. Note the name: OpenJD**M**, not OpenJDK. Redundant copy. Dated 5 Aug.

4. `C:\ProgramData\ad5ihHJTae\` — randomly named folder containing a full embedded Python 3.13 runtime with `libssl-3.dll`, `libcrypto-3.dll`, `sqlite3.dll`. Created 9 Aug, but binary build date Oct 2024 (extracted from a bundle, not pip/scoop installed).

5. Two scheduled tasks at root path: `BlackKeysOnBlackKeyboardg` (Ready) and `JusticeMelodyBabaikaNanuchkag` (Running).

**Detection:** Defender full scan flagged nothing. These files sat on disk for at least six days. The loader ran through a legitimate Deno install and the sideloading used a validly signed binary, so there was little signature surface.

**Entry point:** unknown. Deno was already present via scoop and was used as the runtime rather than being dropped.

**Remediation performed:** killed running processes, unregistered both scheduled tasks, removed both Run keys, deleted all files/folders. Rebooted with networking disabled. Verified: `Test-Path` returns False on all four paths, no malicious startup entries, no malicious tasks at root. Machine has stayed offline since.

**Ruled out as benign:** a Chrome PWA registry entry for a banking site (publisher field showed a Chrome path), an Avast leftover registry key with no associated files or services, `C:\ProgramData\Whesvc` (ASUS performance telemetry logs), `C:\ProgramData\Propagation` (single 13-byte text file matching a NordVPN install timestamp).

**Questions**

1. Does this match a known family? The paired `jserver`/`OpenJDM` sideloading plus a Deno-based loader seems distinctive.

2. Is `Reset this PC → Remove everything → Cloud download` sufficient here, or is a clean install from external USB media warranted? No second computer available to build media easily.

3. Anything obvious I should still be checking? WMI subscriptions, services, browser extensions, anything else?

4. Any way to identify the entry vector retroactively at this point?

Credentials are being rotated from a separate device. Assuming everything in Chrome's password store and all session cookies are compromised.

Recently moved to CZ as EU person and looking to open bank account. I have my business abroad, already got Revolut account at my former country (FR) and I will be receiving USD into this new account.

Is there any bank you recommend for foreigners? Meaning that they got support in english, that has good online app, etc?

Thanks!

#question I have scraped a few linkedin urls based on specific google search, but my scraper doesn't always get the job role right.

I want to have only the following from each profile: name + surname + company + job role. For now I am using fullenrich to do that, but I don't necessarily need the email enrichment. Is there an app that can do that for cheaper than them?

https://preview.redd.it/o4wnfp9oseah1.png?width=760&format=png&auto=webp&s=d4854f6923166513a9e14b7ce6e7d9bdc481b610

Saw this while walking in the streets of a small town in Czech Republic. It is closed for now, so could not ask the owners about it. Thank you!

Currently in Hradec Kralove/Pardubice, and just started looking for flats to stay 1y+. But most of the agencies when I ask them about flats they tell me it's already gone or the landlords don't wanna deal w anyone who doesn't speak czech.

As of now, I could only visit one. Didn't like it so much, but she made me understand that it is hard to rent to foreigners coz the landlords are old boomers mostly, want zero stress so don't want people who doesn't speak the language "if there is any emergency" - even tho i tell them i got a local friend who is here and speaks cz if anything.

Is it because those are small towns? Is there more paperwork to do when renting to non locals?

Has any foreigner here managed to get housing without too much hassle outside Prague?

FYI I am FR, M36, caucasian ethnicity (if it matters)

---

PS: funny thing is their face when they ask me why the f I am moving here, in this town, when I was living in Spain previously

Hi! here. I went to Prague a few times to vvisit local friends amd now I would like to settle in Czech Republic. I know everyone says the winter is super harsh and depressing, but I really liked the atmosphere in general, the cultire and all. I am European (FR), Iwork remote, have been living in spain, france, greece, albania, mostly.

I'd like to live in a smaller less crowded less over touristic place than Prague, but still want it to find things to do, places to go out, still has a good nightlife or pubs, has coworking or office spaces to work from, good housing offers, not too far from the mountains in winter maybe, enjoyable nature around, etc.

Which city would you recommend?

A friend of mine is in Hravec but seems quite family town, and I have seen pics of Pilsn that looks kinda nice with lots of things to do and affordable. I have yet to visit outside of Prague.

FYI: I'm 36M

Diky!

Hola! Hace muchos años habia visto que tenían tours organizadoa para visitar la mina, pero nunca fuí. Y ya no encuentro información al respeto.

Saben si aún se puede viaitar como turista la mina de carbon de Cerrejón en La Guajira ? Trabajo en metcados de Energía/Electricidad y me encantaría vivir esa experiencia !

Gracias por su ayuda

I am living mostly between Latam+US and sometimes in Europe for summer.

Got my own company, working remote, very busy. Looking to meet like-mided people. I'm already part of NomadList and went to a few cool events here in South America, but wanna go beyond and meet even more people.

Happy to know about your experience and if you made cool encounters through dynamite circle.

Es algo que solo he oido en Bogotá, todo el tiempo todo el mundo diciendo "que pena" cualquier sea la situación.

Hasta un mesero dice "ay que pena", cuándo va a servir el plato a la mesa o preguntar lo que uno quiere pedir. Para eso es que uno va al restaurante...

Para cosas muy básicas, siempre todos andan diciendo "que pena", con una cara de triste o de sumiso.

De dónde viene esa costumbre, y porqué aún la usan tanto?

Estoy buscando partners para jugar en bogota y descubrir los clubs de la ciudad. Por ahora solo conozco La Cima, Guaymaral, Briceño.

🏌🏿

Hace 10 años me acuerdo que nunca la habia oido. Me pregunto como es que ahora todos decimos "veci"