The latest antivirus software and references. Highly Recommended!

  • Thread starter Thread starter postman
  • Start date Start date
Hi,
May we have some words of explanation why you banned those addresses ?
The same question applies to the link origin of this thread:
http://www.click-now.net
as well as to the contents of your second post (194.176.43.103;
207.44.158.64; 66.36.241.76). What's the danger those IP addresses represent
?

Thanks a lot.
 
Sorry, I still don't follow you !
I went to the site you provided.
There aren't any references to the IP addresses nor to the links you've
quarantined.

What do they correspond to ?
What are the dangers or annoyances they present ?

Thanks again
 
Gino said:
Sorry, I still don't follow you !
I went to the site you provided.
There aren't any references to the IP addresses nor to the links
you've quarantined.

These are new CWS varients. They are not on that site yet but it discusses
this hijacker.

The URL's mentioned either redirect or go directly to those IP addresses so
can't be blocked with a HOSTS file.
What do they correspond to ?

New CWS varients.
What are the dangers or annoyances they present ?

Did you read the reference page?
 
OK thanks. I was confused because I connected several times to
http://www.click-now.net
independently of the address hijacking.
Does this means that we shall consider this site as dangerous or is this
hijacking done with the purpose to get hits to the site ?
 
Gino said:
OK thanks. I was confused because I connected several times to
http://www.click-now.net
independently of the address hijacking.
Does this means that we shall consider this site as dangerous or is
this hijacking done with the purpose to get hits to the site ?

I would use the term "malicious" as they hijack your browser home page and
search engine preference to drive up their "pay-per-click" revenue. They
install software on your system that could compromise its security and
stability. The software disables the user from returning their browser
back to the settings they want. There are 1000 sites now that deliver these
hijacks or are associated with the hijackers.
 
That's perfectly clear now. Thanks

YoKenny said:
I would use the term "malicious" as they hijack your browser home page and
search engine preference to drive up their "pay-per-click" revenue. They
install software on your system that could compromise its security and
stability. The software disables the user from returning their browser
back to the settings they want. There are 1000 sites now that deliver these
hijacks or are associated with the hijackers.
 
YoKenny said:
Also feed into your firewall for blocking:

194.176.43.103
207.44.158.64
66.36.241.76

I'll be darned, but I can't figure out how to do this on XP Firewall.
 
Matthew said:
I'll be darned, but I can't figure out how to do this on XP Firewall.

You can't.

You need a software firewall like Kerio that you can customize with these
addreses. <g>

XP firewall is good for protecting against INBOUND invasions but will not
protect you from inadvertent Trojans OUTBOUND that want to install and
become spam relays.
 
YoKenny said:
Also feed into your firewall for blocking:

194.176.43.103
207.44.158.64
66.36.241.76
Man, you're crazy!! You have big problems! Paranoia is the name of
your disease.

I know the owners of coolwebsearch.com and click-now.net. They don't
hijack browsers! What's wrong with you?! Don't write bull*** here, if
you need informations about these sites i can give you informations
about all these sites:
www.click-now.net
click.adultsingles.com
www.toplist.cz
www.tabooart.net
w0.extreme-dm.com
flash2x.net
www.chinkii.com
but don't write stupid things!
 
postman said:
Man, you're crazy!! You have big problems! Paranoia is the name of
your disease.

I know the owners of coolwebsearch.com and click-now.net. They don't
hijack browsers! What's wrong with you?! Don't write bull*** here, if
you need informations about these sites i can give you informations
about all these sites:
www.click-now.net
click.adultsingles.com
www.toplist.cz
www.tabooart.net
w0.extreme-dm.com
flash2x.net
www.chinkii.com
but don't write stupid things!

Others might think o.w.; see e.g.,
http://www.spywareinfo.com/~merijn/cwschronicles.html

J
 
YoKenny said:
Bummer for you:

127.0.0.1 www.click-now.net
127.0.0.1 click.adultsingles.com
127.0.0.1 www.toplist.cz
127.0.0.1 www.tabooart.net
127.0.0.1 w0.extreme-dm.com
127.0.0.1 flash2x.net
127.0.0.1 www.chinkii.com

Now in my HOSTS file and archived in Google soon.
Man, you're crazy!! You have big problems! Paranoia is the name of
your disease.

I know the owners of coolwebsearch.com and click-now.net. They don't
hijack browsers! What's wrong with you?! Don't write bull*** here, if
you need informations about these sites i can give you informations
about all these sites:
www.click-now.net
click.adultsingles.com
www.toplist.cz
www.tabooart.net
w0.extreme-dm.com
flash2x.net
www.chinkii.com
but don't write stupid things!
 
postman said:
Man, you're crazy!! You have big problems! Paranoia is the name of
your disease.

I don't think it is called Paranoia and if it could be classed as a disease
then I am happy to have it.

You however have the "pay-for-click" mainia and want to scavenge money from
people's Internet surfing by exploiting Windows vunerabilities. The one of
the Windows vunerabilities "ByteVerify" used by CoolWebSearch has been fixed
by MS in one of its Critical Updates.
I know the owners of coolwebsearch.com and click-now.net. They don't
hijack browsers! What's wrong with you?! Don't write bull*** here, if
you need informations about these sites i can give you informations
about all these sites:
www.click-now.net
click.adultsingles.com
www.toplist.cz
www.tabooart.net
w0.extreme-dm.com
flash2x.net
www.chinkii.com
but don't write stupid things!

Thanks for the non-informations about these sites.

I will give information about these sites and how they hijack browsers:
http://www.merijn.org/cwschronicles.html
http://www.doxdesk.com/parasite/CoolWebSearch.html
http://computercops.biz/article2820.html
http://www.extremetech.com/article2/0,3973,1225099,00.asp
http://www.webroot.com/wb/news/spywarethreat/archive.php?threat=coolwebsearch

Just Google Groups for over 2,000 hits on CoolWebSearch hijacks.

I guess in your mind all of these people are stupid.
 
YoKenny said:
I don't think it is called Paranoia and if it could be classed as a
disease then I am happy to have it.

You however have the "pay-for-click" mainia and want to scavenge
money from people's Internet surfing by exploiting Windows
vunerabilities. The one of the Windows vunerabilities "ByteVerify"
used by CoolWebSearch has been fixed by MS in one of its Critical
Updates.

Typo:

I meant to say:

One of the Windows vunerabilities "ByteVerify" used by CoolWebSearch has
been fixed by MS in one of its Critical Updates.

By the way, Google Groups will include this dialog for more people to read
about CoolWebSearch hijacks.
 
YoKenny said:
Typo:

I meant to say:

One of the Windows vunerabilities "ByteVerify" used by CoolWebSearch has
been fixed by MS in one of its Critical Updates.

By the way, Google Groups will include this dialog for more people to read
about CoolWebSearch hijacks.

Do you know smth about Coolwebsearch? I don't think so!
They are running a pay-per-click program. You can see here:
http://coolwebsearch.com/affiliates
They had many affiliates from Russia and the browsers were hijacked by
these stupid affiliates. The reason is obvious: coolwebsearch is
paying for any ips that clicked 25 times!

If you believe everything you read, better not read!

We(me, you and owner of coolwebsearch) can talk on ICQ about this
subject, just let me know your ICQ no.
 
YoKenny said:
Bummer for you:

127.0.0.1 www.click-now.net
127.0.0.1 click.adultsingles.com
127.0.0.1 www.toplist.cz
127.0.0.1 www.tabooart.net
127.0.0.1 w0.extreme-dm.com
127.0.0.1 flash2x.net
127.0.0.1 www.chinkii.com

Now in my HOSTS file and archived in Google soon.

Do you know smth about Coolwebsearch? I don't think so!
They are running a pay-per-click program. You can see here:
http://coolwebsearch.com/affiliates
They had many affiliates from Russia and the browsers were hijacked by
these stupid affiliates. The reason is obvious: coolwebsearch is
paying for any ips that clicked 25 times!

If you believe everything you read, better not read!

We(me, you and owner of coolwebsearch) can talk on ICQ about this
subject, just let me know your ICQ no.
 
Back
Top