http://www.toonerotica.com/welcome/ - GoFuckYourself.com

Nysus · 08-05-2005, 08:18 AM

Who else is infected with this piece of shit?

No idea who is behind it yet, but I will find out, whether it's the company itself or not; most likely of course.

It is NOT simply a browser hi-jack, but it hi-jacks your computer's DNS; meaning, any URL you try to type in automatically bounces you to http://www.toonerotica.com/welcome/

Only way I got to GFY was through Google toolbar and then do a search, therefore I'm not going through my DNS directly [it makes sense..]

Anyone have a fix or have a patch or figured out a fix?

I've updated ALL programs, and fully scanned while internet off, and on and it's still there, meaning it's new, or just been activated; I was not behind a firewall for a week or two and that's possibly when it happened.

I don't download infected programs either.

Any help would be appreciated; I'm sure it's not just me.

Matt

Theo · 08-05-2005, 08:20 AM

they are good people

GFED · 08-05-2005, 08:22 AM

hosts file?

Nysus · 08-05-2005, 08:34 AM

Hosts file clean.

The alternate is my ISP's DNS has been hacked and when I put in a request for a domain name then my ISP is sending back the wrong entry; which ends up pointing to http://www.toonerotica.com/welcome/

I had my DNS settings set to "Obtain DNS server automatically" but have entered the DNS servers a friend uses. If it's fixed after I reboot, then my ISP is infected, and EVERYONE (including children) who loads IE, or Mozilla, and has settings to "Obtain DNS server automatically" which is what the ISP tells you to do [is default as well] is being sent to a porn site.

So, if it isn't ToonErotica.com doing this, I suggest they find out who is, and stop it, otherwise a low estimate of THOUSANDS of children 18 and under, 5+ years old, are being presented with a porn website, no matter what URL they type in.

Soul Rebel - It's impossible to know who's good or not; I *could* list off people and company names of knowing how they got started and/or big by using similar tactics.

I will post again with the results once I reboot.

Matt

Bansheelinks · 08-05-2005, 08:37 AM

that is just fucking ridiculous

Theo · 08-05-2005, 08:43 AM

nysus,it was a joke ;-)

Project-Shadow · 08-05-2005, 09:52 AM

Rebooted yet?

Nysus · 08-05-2005, 10:11 AM

Yes, I've rebooted.

It seemed to be a combination of a few things; though after finding out about the best spyware removal program everything went away and I can browse normally.

No way to say for sure who did what mostly because the combinations of things were fixed at the same time.

Have to give benefit of the doubt..

Matt

08-05-2005, 08:18 AM	#1
Nysus Confirmed User Industry Role: Join Date: Aug 2001 Posts: 7,817	http://www.toonerotica.com/welcome/ Who else is infected with this piece of shit? No idea who is behind it yet, but I will find out, whether it's the company itself or not; most likely of course. It is NOT simply a browser hi-jack, but it hi-jacks your computer's DNS; meaning, any URL you try to type in automatically bounces you to http://www.toonerotica.com/welcome/ Only way I got to GFY was through Google toolbar and then do a search, therefore I'm not going through my DNS directly [it makes sense..] Anyone have a fix or have a patch or figured out a fix? I've updated ALL programs, and fully scanned while internet off, and on and it's still there, meaning it's new, or just been activated; I was not behind a firewall for a week or two and that's possibly when it happened. I don't download infected programs either. Any help would be appreciated; I'm sure it's not just me. Matt __________________ What name is pr0 / Untouched Markets using these days? Untouched Markets - pr0 - Refund My Money Now Someone owes me $2,000 because they didn't do any work that was paid for pointing at pr0 / William / UntouchedMarkets See https://gfy.com/fucking-around-and-business-discussion/948258-untouchedmarkets-pr0-refund-money-post16744521.html and for more detailed see https://gfy.com/fucking-around-and-business-discussion/948645-re-recent-bullshit-drama-explained-detail-pr0-untouched-markets.html

08-05-2005, 08:22 AM	#3
GFED Confirmed User Industry Role: Join Date: May 2002 Posts: 8,120	hosts file? __________________ https://www.flow.page/savethechildren

08-05-2005, 08:34 AM	#4
Nysus Confirmed User Industry Role: Join Date: Aug 2001 Posts: 7,817	Hosts file clean. The alternate is my ISP's DNS has been hacked and when I put in a request for a domain name then my ISP is sending back the wrong entry; which ends up pointing to http://www.toonerotica.com/welcome/ I had my DNS settings set to "Obtain DNS server automatically" but have entered the DNS servers a friend uses. If it's fixed after I reboot, then my ISP is infected, and EVERYONE (including children) who loads IE, or Mozilla, and has settings to "Obtain DNS server automatically" which is what the ISP tells you to do [is default as well] is being sent to a porn site. So, if it isn't ToonErotica.com doing this, I suggest they find out who is, and stop it, otherwise a low estimate of THOUSANDS of children 18 and under, 5+ years old, are being presented with a porn website, no matter what URL they type in. Soul Rebel - It's impossible to know who's good or not; I could list off people and company names of knowing how they got started and/or big by using similar tactics. I will post again with the results once I reboot. Matt __________________ What name is pr0 / Untouched Markets using these days? Untouched Markets - pr0 - Refund My Money Now Someone owes me $2,000 because they didn't do any work that was paid for pointing at pr0 / William / UntouchedMarkets See https://gfy.com/fucking-around-and-business-discussion/948258-untouchedmarkets-pr0-refund-money-post16744521.html and for more detailed see https://gfy.com/fucking-around-and-business-discussion/948645-re-recent-bullshit-drama-explained-detail-pr0-untouched-markets.html

08-05-2005, 10:11 AM	#8
Nysus Confirmed User Industry Role: Join Date: Aug 2001 Posts: 7,817	Yes, I've rebooted. It seemed to be a combination of a few things; though after finding out about the best spyware removal program everything went away and I can browse normally. No way to say for sure who did what mostly because the combinations of things were fixed at the same time. Have to give benefit of the doubt.. Matt __________________ What name is pr0 / Untouched Markets using these days? Untouched Markets - pr0 - Refund My Money Now Someone owes me $2,000 because they didn't do any work that was paid for pointing at pr0 / William / UntouchedMarkets See https://gfy.com/fucking-around-and-business-discussion/948258-untouchedmarkets-pr0-refund-money-post16744521.html and for more detailed see https://gfy.com/fucking-around-and-business-discussion/948645-re-recent-bullshit-drama-explained-detail-pr0-untouched-markets.html

08-05-2005, 08:20 AM	#2
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	they are good people

08-05-2005, 08:37 AM	#5
Bansheelinks Confirmed User Join Date: Apr 2003 Posts: 6,023	that is just fucking ridiculous

08-05-2005, 08:43 AM	#6
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	nysus,it was a joke ;-)

08-05-2005, 09:52 AM	#7
Project-Shadow Confirmed User Industry Role: Join Date: Feb 2003 Posts: 7,340	Rebooted yet?