 BubbaGIT-R-DONEPremium,MVM
join:2002-08-19
St. Andrews
 ·DIRECTV
 ·Pickwick Cablevi..
·Comcast
2 edits | Coolwebsearch blocking sites...including DSLR From Tom Coyote's Web site:
Rare Circumstance
said by Tom Coyote:
This is to inform that there is a version of CWS going around that will block your access to anti-spyware sites.
The current (partial) list of sites blocked by this latest malicious hosts file is:
forums.spywareinfo.com
www.spywareinfo.com
www.merijn.org
merijn.org
spywareinfo.com
www.computercops.biz
computercops.biz
dslreports.com
www.dslreports.com
www.lavasoftsupport.com
lavasoftsupport.com
forums.net-integration.net
www.tomcoyote.org
tomcoyote.org
www.wilderssecurity.com
wilderssecurity.com
www.lavasoftusa.com
lavasoftusa.com
security.kolla.de
www.security.kolla.de
www.lavasoft.de
lavasoft.de
--
"It's 5 o'clock somewhere" *Team Z* Member |
|
| Re: New Coolwebsearch blocking certain sites now that is very messed up
--
The Ital£ian Hi†man™ |
|
 EGeezerSummertimePremium
join:2002-08-04
Midwest
kudos:7 | reply to Bubba
Thanks Bubba!
I got the Hosts File Reader from Tom's site "just in case". It will be handy in case one gets whacked with CWS crapware...
EG
--
A bad day is better than no day at all |
|
 robtooR.J.T.Premium
join:2003-10-13
United Kingd | From »www.merijn.org/downloads.html ...
quote:
If you are unable to download any of the files here and are redirected to a porn page, search page or just denied access to the file, try these alternate links that should always work:
HijackThis direct download: »216.180.233.153/~merijn/files/HijackThis.exe
CWShredder direct download: »216.180.233.153/~merijn/files/CWShredder.exe
Might come in handy one of these days! |
|
 dpPremium,MVM
join:2000-12-08
Greensburg, PA
kudos:7 | said by robtoo:
From »www.merijn.org/downloads.html ...
quote:
If you are unable to download any of the files here and are redirected to a porn page, search page or just denied access to the file, try these alternate links that should always work:
HijackThis direct download: »216.180.233.153/~merijn/files/HijackThis.exe
CWShredder direct download: »216.180.233.153/~merijn/files/CWShredder.exe
Might come in handy one of these days!
Both of those programs do come in handy, quite frequently. They have helped many and all the hard work that Merijn puts into these programs is very much appreciated.
Thanks for the Heads-Up Bubba.
--
Write your questions down on the back of a $20 dollar bill and send them to me |
|
 John2gQui Tacet ConsentitPremium
join:2001-08-10
England | reply to Bubba
Re: Coolwebsearch blocking sites...including DSLR Thanks for the info Bubba  |
|
 seqretsPremium
join:2001-05-03
Nederland, TX
1 edit | reply to Bubba
quote:
there is a version of CWS going around that will block your access to anti-spyware sites.
As if installing spyware and hijacking someones browser isn't bad enough, this is a malicious act! Would be nice to see someone needs to file a class action lawsuit on them!
On a side note, I see that they missed broadbandreports.com! LOL
--
I think my computer is hijacked. What should I do? |
|
| reply to Bubba
I think that they need the favour returned.
Add these sites to your firewall rules:
64.246.33.179
66.250.57.26-66.250.57.28
66.111.55.108
66.98.142.163
66.250.107.0-66.250.107.255 This may be a bit aggressive but I have seen many CWS sites live there
66.77.72.19-66.77.72.33
63.215.149.59
81.211.105.0-81.211.105.255
69.50.184.53
66.250.74.150 |
|
 hpguruCurb Your DogmaPremium
join:2002-04-12 | reply to Bubba
I hope this won't be interpretted as self-promotion but the hosts file I publish blocks several thousand CWS hostnames and we continuously add more as they are found. Get the download link from the Security Updates thread.
--
Blue mountains after rainfall - much bluer. |
|
 Name GamePremium
join:2002-07-07
North Myrtle Beach, SC
kudos:6 | said by hpguru:
I hope this won't be interpretted as self-promotion but the hosts file I publish blocks several thousand CWS hostnames and we continuously add more as they are found. Get the download link from the Security Updates thread.
Self-promotion for all that hard work you do is an understatment  it is recognized and appreciated.
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kidshttp://www.missingkids.com/ |
|
hpguruCurb Your DogmaPremium
join:2002-04-12 | Btw does anyone have a copy of the hosts file CWS is planting?
--
Blue mountains after rainfall - much bluer. |
|
Name GamePremium
join:2002-07-07
North Myrtle Beach, SC
kudos:6
1 edit | reply to Bubba
BTW HP...what can you tell us about this stuff and Jay Allen..is there similar out there ???
MT-Blacklist Version 1.0
#
# See »www.jayallen.org/projects/mt-blacklist
# for more information about stopping comment and
# Trackback spam with Movable Type.
#
# Adult Networks Services Listing
# Wizbang MT Blacklist
# See »wizbangblog.com/mtblacklist/mtblacklist.php
# Based on IE-SPYAD Copyright (c) 2000-2003 Eric L. Howes
»wizbangblog.com/mtblacklist/mtblacklist.txt
»www.jayallen.org/
2004: MT-Blacklist 2.0
This is part of a series of resolutions for 2004 that I am posting as individual entries.
After releasing the last version of MT-Blacklist, I decided I needed to take a rest, and rest I did. Then, I started working on the peer-to-peer aspects of v2.0 and got quickly bogged down by some serious usability and technical hurdles. Suffice it to say, there will be an MT-Blacklist 2.0 and it will rock. I just need to figure out a way around these hurdles. And all that takes is time.
Posted on January 07, 2004 12:49 CET
»www.jayallen.org/journey/2004/01···ent-3862
»www.jayallen.org/glass/
--
Gladiator Security Forum »www.gladiator-antivirus.com/
Missing Kids
»www.missingkids.com/ |
|
hpguruCurb Your DogmaPremium
join:2002-04-12 | I'm not familiar with it but then I never took an interest in blogging. You might try the Stopping Spam forum though.
--
Blue mountains after rainfall - much bluer. |
|
 poiwv
join:2002-06-07
Belington, WV | reply to Bubba
66.250.107.0-66.250.107.255
That block seems to be populated with porn and CWS affiliates.....I would like to see the whole thing blocked at the rootserver level.
I have checked over 100 of the IPs in that range and if there was something using that IP it was either an affiliate or a porn site (probably also tied to CWS some way).
--
Advertising may be described as the science of arresting the human intelligence long enough to get money from it. |
|
 mrchrisOut and aroundPremium
join:2002-10-01
North Babylon, NY | reply to Bubba
Hope a new CWShredder version detects this crap
Someone really needs to shut down these asshats, along with Gator/Claria and other bigname adware/spyware companies. |
|
 Doctor FourMy other vehicle is a TARDISPremium
join:2000-09-05
Dallas, TX | reply to CalamityKen
Thanks for the addresses. I just added them to Sygate's
rules. |
|
 LoPhatPhuudPremium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:23
·Comcast
| reply to Bubba
Here is a little 'gem' that reads your host file and allows you to edit it or reset it to WIndows default. Great tool for situations like this.
»members.shaw.ca/techcd/VB_Projec···ader.exe
--
"If you pick up a starving dog and make him prosperous, he will not bite you. This is the principal difference between a dog and a man."----- Mark Twain |
|
| 
Host's safe. |
|
|
|
|
