Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

Webhelper Updated Sites List 5/26/2004 3:13PM EDT

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spyware/Adware in the News
View previous topic :: View next topic  
Author Message
webhelper
SWW Expert


Joined: 11 Apr 2004
Last Visit: 16 Jul 2011
Posts: 1090

PostPosted: Thu May 27, 2004 11:19 am    Post subject: Webhelper Updated Sites List 5/26/2004 3:13PM EDT Reply with quote

Special Thanks To our Radio as he discovered yet another scameware site that the creator is turning out his clone copies of Noadware.

This update includes more IP addresses and new sites for the NetPal favoriteman along with the direct advertising clients of the Transponder Gangs OfferOptimizer.com ad services.

All information listed below, I have documentation to back up all claims.
***********************************************

Transponder Sites and IP Addresses
63.99.224.18 mail.thinkingmedia.net
63.99.224.19 Amazingmerchants.com
63.99.224.20 thinkingmedia.net
63.99.224.21 Direct-Revenue.com
63.99.224.34 mail.clickalchemy.com
63.99.224.37 stop-popup-ads-now.com
63.99.224.37 clickalchemy.com
63.99.224.47 cleangetaway.biz
63.99.224.47 mypanicbutton.com
63.99.224.57 Twain-tech.com
63.99.224.57 mx-targeting.com
63.99.209.59 Ipinsight.com
63.99.224.62 mail.msview.cc
63.99.224.65 msview.cc
63.99.224.65 www.freephone.cc
63.240.11.56 disk11.com
64.66.168.38 EC16.com
64.191.159.9 mail.hostpool.net
64.191.159.9 mail.direct-revenue.com
64.191.159.120 xadx.offeroptimizer.com
64.191.159.120 xads.offeroptimizer.com
64.191.159.123 ximages.offeroptimizer.com
64.191.159.125 reports.offeroptimizer.com
64.191.159.132 c.abetterinternet.com
64.191.159.133 s.abetterinternet.com
64.191.159.133 update.stop-popup-ads-now.com
64.202.165.92 mail.mypctuneup.com
64.41.114.15 tps108.org
64.41.111.75 truedata.org
65.61.130.193 server.ipinsight.net
65.255.32.5 www.offeroptimizer.biz
65.255.32.5 top10sites.com
65.255.32.5 skinhead.com
65.255.32.5 letssearch.com
65.255.32.8 Quicklaunch.com
65.255.32.70 offeroptimizer.biz
65.255.32.70 mail.www.offeroptimizer.biz
65.255.32.70 mail.offeroptimizer.biz
66.113.176.180 Bestoffers.bz
66.113.176.180 mail.bestoffers.bz
66.216.73.161 sentrymon.ipinsight.net
66.199.187.168 munky.com
66.199.187.168 NameAdministration.com
66.199.187.168 15X.NET
66.199.187.168 pantyland.com
66.199.187.168 steelwool.com
66.199.187.175 adblock.linkz.com
66.199.187.175 smartcasual.com
66.199.187.175 linkz.com
66.199.187.175 hostpool.com
66.199.187.175 adblock.com
66.199.187.175 nameadmininc.com
66.216.73.160 belt.abetterinternet.com/bi/servlet/Belt?StubName=Belt
66.216.73.160 stubmon.ipinsight.net
66.216.86.121 download.ipinsight.net
69.20.5.14 cr.stop-popup-ads-now.com
69.20.5.14 mail.stop-popup-ads-now.com
69.20.5.39 69.20.5.39/download/cabs/BI5101/
69.20.5.39 69.20.5.39/download/cabs/BILATEST/
69.28.158.21 static.abetterinternet.com
69.28.158.21 xlime.offeroptimizer.com
69.90.32.70 Get.freephone.cc
69.90.32.140 download.abetterinternet.com
69.90.32.140 download2.abetterinternet.com
69.90.32.141 thinstall.abetterinternet.com
69.28.146.21 xlime.offeroptimizer.com
207.217.96.41 sohodigital.net
207.246.105.39 test.disk11.com
207.246.105.49 Celticfestival.org
207.246.124.10 vx2.cc
207.246.124.61 z1.vx2.cc
207.246.124.90 internal.vx2.cc
207.246.124.101 ads.vx2.cc
207.246.124.105 download.vx2.cc
207.246.124.113 checkin.clickalchemy.com
207.246.124.113 ctl.twain-tech.com
207.246.124.113 transctl.vx2.cc
207.246.124.116 www.offeroptimizer.com
207.246.124.116 cliks.org
207.246.124.120 xads.offeroptimizer.com
207.246.124.120 xadso.offeroptimizer.com
207.246.124.130 mail.tps108.org
207.217.96.43 sohodigital.net
216.110.36.129 ipinsight.net
216.110.36.129 mypctuneup.com
216.187.118.218 OPTINEMAILSERVICES.Com
216.187.118.221 Hostpool.net
216.254.144.14 n69.com
216.254.144.15 bc777.com
216.254.144.15 N69.com
216.254.144.41 DigitalRooster.com
216.254.144.41 WebDream.com


Transponder Gangs Affiliates and Partners

powweb.com:66.152.97.130
foobar.com:66.152.98.18
ipowerweb.com:216.69.226.50
wincognito.com:69.2.200.232
flashtalk.com:216.93.179.220

Scam Ads - Direct clients of OfferOptimizer.com
yourdvdplayer.com:208.48.182.44
expertsavings.com:208.48.182.44

Traffix Gang Sites
AAVALUE.COM 64.5.217.241
atlasautomotivegroup.com 64.5.217.241
atlascreditgroup.com 64.5.217.241
atlasincomebuilder.com 64.5.217.241
clearflow.com 64.5.217.223
DataOffers.com 64.5.201.170
entertainmentrewards.com 64.5.230.188
GROUPCONFIRM.COM 64.5.201.208 (TRAFFIX AUTORESPONDER SYSTEM)
grouplotto.com 64.5.217.241
Infiknowledge.com:64.5.217.223
INFINAMES.COM (No IP)
JEWELCLAIMCENTER.COM 64.5.217.76
PICKOFTHEWEB.COM 64.5.217.53
prizeamerica.com 64.5.217.241
prizecade.com 64.5.230.150
QUINTEL.com 63.250.32.194
supernamehosts.com (No IP)
takeoneentertainment.com 64.5.217.241
thanksmuch.com 128.242.83.52
thebargainspot.com:64.5.217.241
***************************

Mindset Interactive/Addictivetechnologies

1000funnyvideos.com:207.182.241.238
addictivetechnologies.com:207.182.237.210
addictiveplay.com:207.182.241.238
(addictiveplay.com Goes to skilljam.com:12.129.204.208 owned by eUniverse)
at-games.com:66.98.229.16

at-offers.com:207.182.241.238
Skinnable Interface
Programmable Countdown Timer
Programmable Alarm
Access To Hundreds of Games
Adware Supported

AT-Talk.com (Not yet started as of 5/26/2004)
F1Organizer.com:207.182.241.228
F1Organizer.net:207.182.241.228
MINDSETI.COM:207.182.237.210
MINDSETINTERACTIVE.COM:207.182.237.210
NetpalNow.com:207.182.237.210
netpaloffers.net:64.202.167.192(Now parked)
NetPalGames.com:66.98.229.16


Affiliates and partners

free-windows-games.com:67.18.119.91
(installs adware for free games)
http://free-windows-games.com/privacy.html

The Favoriteman im64.dll code shows direct affiliations

gamehouse.com:216.127.40.150
(NetPal shows gamehouse.com is a direct partner affiliate)
Folder=AT-Games
Link=http://www.gamehouse.com/affiliates/template.jsp?AID=2226
Name=Gamehouse Games

FlyorDie.com:128.121.241.246
(NetPal affiliate and direct partner)
[AddF3]
Folder=AT-Games
Link=http://www.regnow.com/softsell/visitor.cgi?affiliate=24998&action=site&vendor=7834
Name=FlyorDie Games

incredifind.com:12.129.205.105 of eUniverse (see eUniverse section below)
regnow.com:208.197.4.115 (DigitalRiver.com - Main affiliate program)


******************
eUniverse Sites
euniverse.com:12.129.204.158
expage.com:12.129.204.15
thunderdownloads.com:12.129.204.204
flowgo.com:12.129.204.125
crazymates.com:12.129.204.46
popups.ad-logics.com:12.129.205.120
ad-logics.com:12.129.204.65
skilljam.com:12.129.204.208
partner2profit.com:12.129.204.122
myfunstart.com:12.129.205.206
ads.euniverseads.com:12.129.204.160
euniverseads.com:216.35.114.145
Mycoolscreen.com:12.129.204.219
gamerival.com:12.129.204.107
sirsearch.com:12.129.205.102
incredifind.com:12.129.205.105
increaseyourhealth.com:12.129.204.183
Gamecity.net: 12.129.204.107
femaleadvantage.com:12.129.204.47
ecommercetransactionsllc.com:12.129.204.99
dietingplans.com:12.129.205.162
cupidjunction.com:66.48.37.81

*****************

OptinRealBig – Scott Richter Gang
AIMPHUCK.COM: 206.161.120.99 installs Bundleware Nictech Networks
allchickswithdicks.com:69.6.21.11
ANALSLAMMERS.COM: 64.202.167.129
AUCTIONSNAP.com: 69.6.21.32
auctionwhiz.com: 69.6.21.18
bashapop.com: 69.6.21.18 bashapop popup killer
bluerocketonline.com:69.6.16.15
c4c01.com: 66.179.100.178
cash4creatives.com:69.6.21.229 redirects to hugermelons.com
CPAEMPIRE.COM: 69.6.21.177
cuterteen.com :69.6.21.11dfmmb.com
DOGEINSTEIN.COM :69.6.21.18
DUSTIN-PARKER.COM
eatmypussyright.com: 69.6.21.11
easycream.com 69.6.21.18
funamateur.com: 69.6.21.11
geekpost.com
GREATCARRATES.com (CPAEmpire.com)
hugermelons.com: 69.6.21.11
imbum.com: 206.161.120.99 installs NetPalOffers imbum.cab/imbum.exe
JOKETRADE.COM: 206.161.120.99 NetPalOffers imbum.cab/imbum.exe
JAYSWEBSERVICE.COM :69.6.21.60
MOOSQ.COM :69.6.21.18 re-directs to ss01.net on submit to unsubscribe
MYSTERYOFTAROT.com (4/1/2004)
netfuncards.com: 66.238.181.67
pillsofpleasure.com 69.6.21.18
realbigcash.com: 69.6.21.18 Adult affiliate program signup site.
realbighosting.com: 69.6.21.18 Godaddy affiliate which re-directs to secureserver.net
realcheapgifts.com: 69.6.21.18 selling laser gunrealgreatgifts.com
redhotwonders.com :69.6.21.11 (porn) Under 18 link: imbum.com
saverealbigdeals.com:69.6.21.50
smallnsexy.com:69.6.21.11
ss01.net: 69.6.21.191
tekmailer.com:69.6.6.252 Unsubscribe page
tomuchdick.com 69.6.21.11
whackapop.com:69.6.21.18 bashapop popup killer
youngerasian.com:69.6.21.11


TrekData Gang

adgoblin.com:38.118.144.187
Blazinglogic.com 38.118.144.180
Bluehavenmedia.com 66.98.130.46
clubpie.com 66.199.187.175 (Now nameadmininc.com)
Em5000.com 66.98.248.9
Gamesource101.com 207.44.198.25 - 207.44.198.27
gigatechsoftware.com 66.117.8.38
GREASYCOW.COM 66.117.8.38
i5interactive.com 63.84.174.254
LEADGREED.COM 216.21.229.209
LionsPrideEnterprises.com 209.234.155.99
Netsource101.com 207.44.198.26
No-pops.com 38.118.144.180
No-pops.net 38.118.144.180
nuker.com:38.118.144.185
popup-nuker.com: (Trekdata) 38.118.144.182
Rankyou.com 207.44.198.27
SEXEBITS.COM(Porn) 207.44.198.26
SoftwareDS.com 66.98.130.46
spamnuker.com:38.118.144.180
spicycomet.com (No IP)
Spyhear.com 38.118.144.180
spywarenuker.com 38.118.144.185
spywarenukerdownload.com 206.114.180.66
Top11.net(Now owned by Ultimate Search, Inc.)
Topeleven.net 66.98.130.46
Trekblue.com 38.118.144.180 - 38.118.144.188
Trekdata.com 38.118.144.180 - 38.118.144.188
TrekEight.com 38.118.144.180 - 38.118.144.188
Trek8.com 38.118.144.180 - 38.118.144.188
TWISTEDHUMOR.COM 207.44.198.26
WAYWEIRD.COM 38.118.144.184

Affiliates:
aksoftware.com (Lists spywarenuker and noadware affiliates)
roar.com
spy-ware-nuker.com

Lop.com Gang
active-max.com: 66.220.17.70
allaboutsearching.com:66.220.17.200
Ao.lop.com:66.220.17.151
Blackstonedata.com (Was owned by Transponder Gang now Jason Lucas Fl Internet Marketing)
Blackstonedata.net (Was owned by Transponder Gang now Jason Lucas Fl Internet Marketing)
chaostic.com: 205.252.89.53
Crap2.com 216.194.89.113 (Porn Affiliate Program)
cybergirlsex.com: 66.220.17.37 (Fl Internet Marketing Jason Lucas)
ecpm.com: 66.220.17.204
find-quick.com: 66.220.17.206
hadassahyouth.com (Non active but owned by Alex Shamash)
lop.com: 66.220.17.153
MAXEXP.COM 66.220.17.39
MAXIMUMEXPERIENCE.COM: 66.220.17.39 (Fl Internet Marketing)
mp3heaven.org 66.220.17.35
mp3search.com: 209.50.253.157 (Directs to Lop.com for Uninstall)
mp3sound.com: 209.50.253.158 (Spawnet Limited)
mysearchnow.com: 66.220.17.211
OHYEA.ORG: 66.220.17.213 (Media Live)
searchwebnow.com: 66.220.17.211
Spawnet.com 216.194.67.59
TRINITYACQUISITIONS.COM: 66.220.17.74 (Trinity Acquisitions Inc. Jason Lucas)
warnet.com: 63.218.224.50 (Sells Warnet Free Edition adware detection and removal)
Wrn.net 216.194.89.114 (Non-Porn Affiliate Program)
XCX.COM: 208.231.27.100 (Spawnet Limited) 2001 had cracks and porn

Standard redirects and home page for hijacking
aavc.com 66.220.17.152
acjp.com 66.220.17.152
ebdv.com 66.220.17.152
ebdw.com 66.220.17.152
ebjp.com 66.220.17.152
ebkn.com 66.220.17.152
ebky.com 66.220.17.152
eblv.com 66.220.17.152
wbkb.com 66.220.17.152
ebvr.com 66.220.17.152
ecmh.com 66.220.17.152
ecwz.com 66.220.17.152
ecyb.com 66.220.17.152
eduy.com 66.220.17.152
eeev.com 66.220.17.152
farse.com 66.220.17.39
ibmx.com 66.220.17.152
icwb.com 66.220.17.152
icwo.com 66.220.17.152
icwp.com 66.220.17.152
iddh.com 66.220.17.152
idhh.com 66.220.17.152
ifiz.com 66.220.17.152
iguu.com 66.220.17.152
samz.com 66.220.17.152
saoe.com 66.220.17.218
sbee.com 66.220.17.38
sbjr.com 66.220.17.219
sbnl.com 66.220.17.220
sbnt.com 66.220.17.221
sbvr.com 66.220.17.222
scbm.com 66.220.17.152
sckr.com 66.220.17.223
scrk.com 66.220.17.224
sdry.com 66.220.17.152
seld.com 66.220.17.152
sfux.com 66.220.17.228
sheat.com 66.220.17.39
sipo.com 66.220.17.152
smds.com 66.220.17.152
srib.com 66.220.17.152
srox.com 66.220.17.152
srsf.com 66.220.17.152
ssaw.com 66.220.17.152
ssby.com 66.220.17.152
surj.com 66.220.17.152
tbvg.com 66.220.17.152
tdak.com 66.220.17.229
tdmy.com 66.220.17.231
tefs.com 66.220.17.232
tfil.com 66.220.17.233
tjar.com 66.220.17.235
tjaw.com 66.220.17.236
tjgo.com 66.220.17.239
tjem.com 66.220.17.238
torc.com 66.220.17.152
wabu.com 66.220.17.152
wabq.com 66.220.17.152
wfix.com 66.220.17.240
wflu.com 66.220.17.241


BulletProofSoft (BPS Gang)

Activex.us - (Domains by Proxy, Inc.) 216.40.206.208
Adnuker.com - (Domains by Proxy, Inc.) 207.44.200.48
Ads4me.net - (Domains by Proxy, Inc.) 207.44.200.48
Audioshareware.com - (H4Host.com) 216.40.206.208
Audiotools.ws - (H4Host.com) 216.40.206.208
bulletproofsoft.com - (Domains by Proxy, Inc.) 216.40.227.156
bulletproofsoft.info:66.98.154.33
bulletproofsoft.ws:66.98.154.33
Clicknzip.com - (Domains by Proxy, Inc.) 207.44.200.48
Downloadupload.com - (H4Host.com) 216.40.206.208
Esftp.com - (Domains by Proxy, Inc.) 216.40.206.208
File4me.com -(Elbanhawy Investments Now H4Host.com) 216.40.206.208
Filehog.com – (H4Host.com) 207.44.200.48
Fireballftp.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208
Ftpking.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208
Ftpmonster.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208
Ftpright.net - (Domains by Proxy, Inc.) 216.40.206.208
getridspyware.com: (H4Host.com 66.98.154.33
h4host.com - (Domains by Proxy, Inc.) 216.40.227.9
IMAGINEER-WEB.com 216.40.227.154
Job4middleeast.com -
(Boston Executive Limousine Now Domains by Proxy, Inc.) 216.40.206.208
Jobbid.ws - (H4Host.com) 216.40.206.208
Jobbid4me.com -(Boston Executive Limousine Now Domains by Proxy, Inc.) 216.40.206.208
mawaqit.com 216.40.227.9
Mediatools.ws - (H4Host.com) 216.40.206.208
Monsterzip.com - (Domains by Proxy, Inc.) 216.40.206.208
noadware.com: - (Domains by Proxy, Inc.) 66.98.154.33
bulletproofsoft.info:66.98.154.33
bulletproofsoft.ws:66.98.154.33
Onestopsoft.com - (Domains by Proxy, Inc.) 216.40.206.208
popupshield.net -(Domains by Proxy, Inc.) 216.40.206.208
popupsnuker.com: (Godaddy) 216.40.206.172 (installs ebates and navecel)
Robust.ws - (H4Host.com) 216.40.206.208
Robustftp.com - (Domains by Proxy, Inc.) 216.40.206.208
Royalftp.com - (Domains by Proxy, Inc.) 216.40.206.208
Sharewaredepo.com - (H4Host.com) 216.40.206.208
Sharewarepile.com - (H4Host.com) 216.40.206.208
Softdepo.com - (H4Host.com) 216.40.206.208
Softwareclub.ws - (Domains by Proxy, Inc.) 216.40.206.208
Softwaredepo.com - (H4Host.com) 216.40.206.208
Softwarepile.com - (Domains by Proxy, Inc.) 216.40.206.208
soundindepth.com – (Domains by Proxy) 216.40.206.208
spaminnihilator.com – (Domains by Proxy) 216.40.206.208
Spamnullifier.com - (Domains by Proxy, Inc) 216.40.206.208
spywarezapper.com (Domains by Proxy, Inc) 66.98.154.33
Spider.ws - (Chia Lor) 216.40.206.208
Tbel.net - (Boston Executive Limousine) 216.40.206.208
Traceremover.com - (Elbanhawy Investments) 216.40.206.208
Tracezapper.com - (Elbanhawy Investments) 216.40.206.208
Trackscrubber.com - (Elbanhawy Investments) 216.40.206.208
Trackzapper.com - (Elbanhawy Investments) 216.40.206.208
Windowscleanser.com - (Domains by Proxy, Inc.) 216.40.206.208
Windowsclenser.com - (H4Host.com) 216.40.206.208
Zillaftp.com - (Domains by Proxy, Inc.) 216.40.206.208
Zillasoft.ws - (H4Host.com) 216.40.206.208

Cloned Download Sites Linked to the BPS
digitalriver.com 209.87.182.60
RegSoft.net:208.248.77.64
regnow.com:208.197.4.115 (This is used by NetPalOffers)
topdownloads.com 209.87.178.244
tdwebhost.com 64.246.54.50
pigeons-news.com 64.246.54.50
Convertdvd.info:64.246.54.50
VAN-OPSTAL.COM:64.246.54.50
WALLPAPERS.ORG:64.246.54.50
adaware.info 64.246.54.50 (download comes from realclicks.com)
uploadnet.com 64.246.54.50
startpage2000.com:64.246.54.50
spycleaner.net:64.246.54.50
realclicks.com:207.44.194.97
freeware.cc:207.44.194.97
freeware2000.com:207.44.194.97
herder.net 64.45.60.40 (Herder, J.N, jorrit)
enova.nl 62.148.166.3
topdownloads.net:66.98.178.22
topdownloadsnetworks.com 66.98.178.22
PIGEONS.NET:66.98.178.22
subloads.com:66.98.178.22
downloadsnet.com:66.98.178.22
supportmail.info:216.168.224.63
rizalsoftware.com:207.44.194.97
backupdvd.info:207.44.194.97


Sites of the Adware
topmoxie.com 66.220.2.164
ebates.com 63.236.57.90
navexcel.com 128.121.212.181


CyberHeat:

ADULTCAMS.COM
ADWAREREMOVERGOLD.COM
BESTMOVIES.COM
CARTOON69.COM
CYBERHEATINC.COM
DATASHREDDERGOLD.COM
DISCOUNTREALITYSITES.COM
EMAILSPAMBLOCK.COM
EVIDENCECLEANERGOLD.COM
EMAILSPAMBLOCK.COM
EUROTEENSXXX.COM
EVIDENCECLEANERGOLD.COM
FREEHOTPICS.COM
GAYMATUREXXX.COM
GIRLSGETCRAZY.COM
HISFIRSTGAYSEX.COM
HOW2ENLARGEPENIS.COM
HOW2PICKUPGIRLS.COM
HOW2PLEASEHER.COM
INTERRACIALJOY.COM
MODEMSPEEDBOOSTER.COM
PCSPEEDBOOSTER.COM
PRIMENETWORK.NET
SEEKIO.COM
SPORTEROTICA.COM
SURFERSUITESOFTWARE.COM
TOPBUCKS.COM
TOPCASH.COM
UPAYPERVIEW.COM


NicTech Networks

101h.com:216.219.239.247
nictechnetworks.com:207.36.117.38
LOOK2ME2.COM:69.20.20.161
LOOK2ME.COM:69.20.20.161
bundleware.com:69.20.20.162 (Produces the software bundle installers)
zestyfind.com: 69.20.20.164 (New addition: used in the hijacking)
admedian.com:69.20.20.165
CuttestStudents.com:207.36.117.38
flashmyass.com:207.36.117.38
greekorgeek.com: 207.36.117.38
Hotteststudents.com:207.36.117.38
similarsingles.com:207.36.117.38 (Date and Rate porn)
SpotOnNews.com:207.36.117.38 (Desktop news that really isn’t)
spyban.net (out of action but still has live files) (spywarekilla and noadware clone)
studylater.com:207.36.117.38
thindivide.com:207.36.117.38 (P2P File sharing)
ThirdEyeCon.com:207.36.117.38
(Affiliated with Nictech Networks)
Rdestiny LLC
ZeroTrace.com


Ad Shooter
ADSHOOTER.COM - This looks to be the server that the installation files come from.
www.adshooter.com resolves to 66.115.182.10
MARKETINGX.COM This is tjheir marketing site
CUSTOMERSUPPORTHELP.COM
PLATINUMBUCKS.COM This is the porn Affiliate program site


AIM Icon Buddy Sites

IMBum.com (Major install site for NetPalOffers and Bundleware) They have a link titled

Joketrade.com (NetpalOffers)
Aimphuck.com (Bundleware)
DollSpot.com
Jensicons.com
Originalicons.com
buddyicon.info
aimdolls.com (NetpalOffers)
DollChick.com Wild Media
dollrock.com Wild Media
aimtop100.com Various Rotational Adware


SCREEN SAVERS /WALLPAPER / MUSIC/GAME SITES
123greetings.com
absolutelyric.com
altogames.com
artistdesktopthemes.com
altoentertainment.com
Colonize.com
dailymp3.com
fancube.com
Freeze.com
g-sistah.com
jenniferlopez.com
lyricsmansion.com
pathison.com
playminigolf.com
popularscreensavers.com
plyrics.com
sara-freder.com
Screensaver.com|
tabpower.com
Wallpapers4u.com
x-wallpapers.com (xxxtoolbar.com)
fabuloussavers.com
screensaverheaven
1001celebrities.com
ezthemes.com
play2enter.com (surf control)


Known Windows CHM Help Exploit using the Windows Media Player

SMARTBOTPRO.NET 205.236.189.50
MCPROMOTIONS.COM 209.217.54.210
www.server224.smartbotpro.net 209.50.251.164
passthison.com 209.50.251.195
SPYKILLERPRO.COM 69.59.138.155
DEFAULT-HOMEPAGE-NETWORK.COM
69.36.129.75
69.36.129.71
69.36.129.70
69.36.129.69
69.36.129.67

**********************
Scam Cloneware

http://www.webhelper4u.com/clones/noadware.html
(screen shots and profile of the author of the softwares)

Noadware.net:69.20.71.82 Bilal Ahmed
noadware.us:64.202.167.129 Bilal Ahmed
no-adware.net:64.202.167.129 Bilal Ahmed (Redirects to noadware.net)
spywarekilla.com 207.44.208.34 Bilal Ahmed
spyware-cop.com:207.44.208.34 Bilal Ahmed

scanspyware.net:12.30.241.242
PC Security Center
Bilal Ahmed
9th Street APL 15L
Brooklyn, New York 11215 US
+1.7187682154
102519@whois.gkg.net

*****************
palso.com:64.15.205.202
aksoftware.com (Lists spywarenuker and noadware affiliates)

*****************

loud Marketing CDT Inc.
Bridge.dll is a new adware program that stealth-downloads and runs on system startup. It

acts as a search page hijacker taking you to one of four possible servers. This may be a

variant of SearchBarCash but at the time of this writing, little detail is available

http://www.pestpatrol.com/pestinfo/l/loudmarketing.asp

scanspyware.com 69.28.208.77
flingstone.com:69.28.208.77
skoobidoo.com:69.28.208.77
searchbrowser.com:69.28.208.77
cdtnet.net:69.28.208.77
blazefind.com:69.28.208.77
searchbarcash.com:69.28.208.77
public.searchbarcash.com:69.28.208.77
mail.loudmarketing.com:69.28.208.71
stephanie.cdtnet.net:69.28.208.71
MY-INTERNET.INFO (No IP)
imashare.com (No IP)




SJB Enterprises, Inc.
SJBCORP.COM - Marketing
NETSHAGG.COM 205.134.161.89 (Installs 3rd party adware)
mypcdownload.com 205.134.161.89
mynetprotector.com 205.134.161.89
mynetcompanion.com 205.134.161.89


More Scamware
Onlinepcfix.com:128.121.194.10 (spyferret)
Spyferret.com:199.239.233.2

CPM Media
2nd-thought.com:69.28.210.140

WhenU.com
whenusearch.com:209.11.45.139
spweather.whenu.com:216.200.68.6

***************

Le WEB (WEBJC-DOM) (Astology Readings)
109 rue du GL de Gaulle
RAMBOUILLET 78120 FR
Domain Name: WEBJC.COM

sara-freder.com:62.210.164.83
pasqualina.com:62.210.164.84
***********

IBIS
websearch.com:146.82.109.220
weblizer.com:208.185.247.157
download.websearch.com:146.82.109.210


************
180Solutions

180Solutions.com 216.74.27.20
zango.com:216.74.27.20
captioncity.com:216.74.57.131
*************************
MyGeeks.com

MyGeeks.com:65.211.123.3

searchcentrix.com:12.47.196.49
downloads.searchcentrix.com:216.133.67.109

***************
DirtyDuckets
clicktracking.info:66.55.162.59


*********
peopleonpage, inc
Kent Ertugrul
26, Avenue Kleber
Paris, 75006 FR
peopleonpage.com:207.44.142.4
download.peopleonpage.com:66.98.188.54

************

7adpower.com:66.194.37.33 (Porn dialers)

************
adelphia.net:68.168.78.26
adtomi.com:216.127.80.113

*********
mediacharger.com:209.132.205.222
download.mediacharger.com:209.132.205.222
swimsuitnetwork.cab (ActiveInstall.dll)

*******************************8
Ad Scams

ClickNVote.com (Owned by known Spammer)
clicknvote.com:69.59.175.148
Vote2004Today.com:64.202.163.162
_________________
Wächter der Geschichten:
http://www.webhelper4u.com/thewatcher.html
Member of ASAP Since 2004
Back to top
View user's profile Send private message Visit poster's website
wawadave
Warrior Obsessed


Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum

PostPosted: Thu May 27, 2004 11:57 am    Post subject: Reply with quote

thankyou webhelper!!!! and radio!
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd
Back to top
View user's profile Send private message Send e-mail Visit poster's website
radio
Moderator & HJT Expert


Joined: 21 May 2004
Last Visit: 05 Aug 2011
Posts: 260

PostPosted: Thu May 27, 2004 12:10 pm    Post subject: Reply with quote

I got the tip from Lonny at Net-Integration...

I'm just the middleman Razz Laughing
_________________
PcPitstop Forums
Back to top
View user's profile Send private message Visit poster's website
DeleterFX
Warrior


Joined: 25 May 2004
Last Visit: 30 Apr 2008
Posts: 259
Location: Maine

PostPosted: Thu May 27, 2004 12:37 pm    Post subject: Reply with quote

Thank god webhelper is on the case, you too radio! oh and thank you friend for the tip
_________________
You've Been Deleted
CCSP Website

Member of The ASAP Since 2004
Back to top
View user's profile Send private message AIM Address
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spyware/Adware in the News All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group