BubbaGIT-R-DONE MVM join:2002-08-19 St. Andrews 2 edits
2 recommendations |
Bubba
MVM
2004-Jan-15 6:54 pm
Coolwebsearch blocking sites...including DSLRFrom Tom Coyote's Web site: Rare Circumstancesaid by Tom Coyote: This is to inform that there is a version of CWS going around that will block your access to anti-spyware sites.
The current (partial) list of sites blocked by this latest malicious hosts file is:
forums.spywareinfo.com www.spywareinfo.com www.merijn.org merijn.org spywareinfo.com www.computercops.biz computercops.biz dslreports.com www.dslreports.com www.lavasoftsupport.com lavasoftsupport.com forums.net-integration.net www.tomcoyote.org tomcoyote.org www.wilderssecurity.com wilderssecurity.com www.lavasoftusa.com lavasoftusa.com security.kolla.de www.security.kolla.de www.lavasoft.de lavasoft.de
|
|
EvilByDesireI Am My Own God Premium Member join:2002-09-03 Grotto |
Re: New Coolwebsearch blocking certain sitesnow that is very messed up |
|
EGeezer Premium Member join:2002-08-04 Midwest |
to Bubba
Thanks Bubba!
I got the Hosts File Reader from Tom's site "just in case". It will be handy in case one gets whacked with CWS crapware...
EG |
|
robtooR.J.T. Premium Member join:2003-10-13 United Kingd |
robtoo
Premium Member
2004-Jan-15 8:30 pm
From » www.merijn.org/downloads.html ... quote: If you are unable to download any of the files here and are redirected to a porn page, search page or just denied access to the file, try these alternate links that should always work:
HijackThis direct download: »216.180.233.153/~merijn/ ··· This.exe
CWShredder direct download: »216.180.233.153/~merijn/ ··· dder.exe
Might come in handy one of these days! |
|
dp MVM join:2000-12-08 Greensburg, PA |
dp
MVM
2004-Jan-16 6:20 am
said by robtoo: From »www.merijn.org/downloads.html ...quote: If you are unable to download any of the files here and are redirected to a porn page, search page or just denied access to the file, try these alternate links that should always work:
HijackThis direct download: »216.180.233.153/~merijn/ ··· This.exe
CWShredder direct download: »216.180.233.153/~merijn/ ··· dder.exe
Might come in handy one of these days!
Both of those programs do come in handy, quite frequently. They have helped many and all the hard work that Merijn puts into these programs is very much appreciated. Thanks for the Heads-Up Bubba. |
|
John2gQui Tacet Consentit Premium Member join:2001-08-10 England |
to Bubba
Re: Coolwebsearch blocking sites...including DSLRThanks for the info Bubba |
|
seqrets Premium Member join:2001-05-03 Nederland, TX 1 edit |
to Bubba
quote: there is a version of CWS going around that will block your access to anti-spyware sites.
As if installing spyware and hijacking someones browser isn't bad enough, this is a malicious act! Would be nice to see someone needs to file a class action lawsuit on them! On a side note, I see that they missed broadbandreports.com! LOL |
|
|
to Bubba
I think that they need the favour returned.
Add these sites to your firewall rules:
64.246.33.179 66.250.57.26-66.250.57.28 66.111.55.108 66.98.142.163 66.250.107.0-66.250.107.255 This may be a bit aggressive but I have seen many CWS sites live there 66.77.72.19-66.77.72.33 63.215.149.59 81.211.105.0-81.211.105.255 69.50.184.53 66.250.74.150 |
|
hpguruCurb Your Dogma Premium Member join:2002-04-12 |
to Bubba
I hope this won't be interpretted as self-promotion but the hosts file I publish blocks several thousand CWS hostnames and we continuously add more as they are found. Get the download link from the Security Updates thread. |
|
Name Game Premium Member join:2002-07-07 Grand Rapids, MI |
Name Game
Premium Member
2004-Jan-16 10:25 am
said by hpguru: I hope this won't be interpretted as self-promotion but the hosts file I publish blocks several thousand CWS hostnames and we continuously add more as they are found. Get the download link from the Security Updates thread.
Self-promotion for all that hard work you do is an understatment it is recognized and appreciated. |
|
hpguruCurb Your Dogma Premium Member join:2002-04-12 |
hpguru
Premium Member
2004-Jan-16 10:30 am
Btw does anyone have a copy of the hosts file CWS is planting? |
|
Name Game Premium Member join:2002-07-07 Grand Rapids, MI 1 edit |
to Bubba
BTW HP...what can you tell us about this stuff and Jay Allen..is there similar out there ??? MT-Blacklist Version 1.0 # # See » www.jayallen.org/project ··· lacklist# for more information about stopping comment and # Trackback spam with Movable Type. # # Adult Networks Services Listing # Wizbang MT Blacklist # See » wizbangblog.com/mtblackl ··· list.php# Based on IE-SPYAD Copyright (c) 2000-2003 Eric L. Howes » wizbangblog.com/mtblackl ··· list.txt» www.jayallen.org/2004: MT-Blacklist 2.0 This is part of a series of resolutions for 2004 that I am posting as individual entries. After releasing the last version of MT-Blacklist, I decided I needed to take a rest, and rest I did. Then, I started working on the peer-to-peer aspects of v2.0 and got quickly bogged down by some serious usability and technical hurdles. Suffice it to say, there will be an MT-Blacklist 2.0 and it will rock. I just need to figure out a way around these hurdles. And all that takes is time. Posted on January 07, 2004 12:49 CET » www.jayallen.org/journey ··· ent-3862» www.jayallen.org/glass/ |
|
hpguruCurb Your Dogma Premium Member join:2002-04-12 |
hpguru
Premium Member
2004-Jan-16 10:42 am
I'm not familiar with it but then I never took an interest in blogging. You might try the Stopping Spam forum though. |
|
poiwv join:2002-06-07 Belington, WV |
to Bubba
66.250.107.0-66.250.107.255
That block seems to be populated with porn and CWS affiliates.....I would like to see the whole thing blocked at the rootserver level.
I have checked over 100 of the IPs in that range and if there was something using that IP it was either an affiliate or a porn site (probably also tied to CWS some way). |
|
GlaiceBrutal Video Vault Premium Member join:2002-10-01 North Babylon, NY |
to Bubba
Hope a new CWShredder version detects this crap Someone really needs to shut down these asshats, along with Gator/Claria and other bigname adware/spyware companies. |
|
Doctor FourMy other vehicle is a TARDIS Premium Member join:2000-09-05 Dallas, TX |
to CalamityKen
Thanks for the addresses. I just added them to Sygate's rules. |
|
|
to Bubba
Here is a little 'gem' that reads your host file and allows you to edit it or reset it to WIndows default. Great tool for situations like this. » members.shaw.ca/techcd/V ··· ader.exe |
|
|
Host's safe. |
don't forget Spyware Blaster's host safe . |
|