Explanation about the host file shit

[FreeOnes]

Some people are probably lost, but I'm getting emails like this everyday:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
To whom it may concern,

Ever since I found your site by accident one night, I have been a fan of it for years. It is very thorough and extremely satisfing in that it has everything you could want to search for free. Now whenever I try to connect to your site, I get redirected to this damn search engine called www.hi-search.com. It's pretty damn annoying since it only does it whenever I try to www.freeones.com. The yahoo cache says that your still at your ip and that you've last updated 20 Aug 2003 so I'm just wondering if someone has been redirecting others to their site without your knowledge or if it's just my damn browser. Anyways, I hope this all clears up and keep up the good work.

UsersName
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

This users host file in windows has been modified by the virus and therefore he can't see my site anymore. More info about this virus can be found here: http://msn.mcafee.com/virusInfo/defa...virus_k=100261


Other sites which can not be accessed by infected users are some major billing companies like CCBill.com If YOUR sponsor is using one of these billing companies none of the infected users can ever take a membership. So you will never earn a penny on them. As soon as they try to acces the join page of your sponsor, the infected users are being redirected to a fucking site like hi-search.com Right now about 1% of the porn surfers is already infected. And it is still rising. Just think about it 1% of your year income is blowed away by a fucking russian guy

Once again, www.hi-search.com is being hosted by HOST-SYSTEM.COM (see my other thread) All ip-addresses where these domain are hosted should be taken down in order to have them not profit of the traffic they are stealing from us. For infected users we can't do anything at all to get them back. Only hoping that they clean their host file in windows, install the Microsoft security patch and install a virus scanner and try to visit your site again.

[dgboy]

I got caught by this bastard, none of the normal spyware stuff or virus software I had would sort it.

Thankfully I found this link and managed to get it sorted.

So a really BIG thankyou man

You saved my sanity, just in time

[TheFLY]

Freeones the traffic sleuth

[TheFLY]

So really all you can do is get this fucker's site down...

BUT (and I do mean big BUT) who's to say he won't just release a new virus that can be redirected to any domain that he wants at the flick of a mouse click... or maybe he spreads the traffic out over many sites, many viruses... you're basically telling us this guy is running away with our traffic and getting away with it

How does this virus get onto the machine in the first place?

[TheFLY]

"This detection covers Java applets that attempt to exploit the Microsoft Security Bulletin MS03-011 vulnerability. This severity of this vulnerability is considered to be critical. It allows an attacker to execute malicious code, simply by visiting an infectious website. Detections of this exploit do not necessarily mean that any malicious code was executed. It simply means that a Java applet was found to contain the exploit code. Conversely malicious code may have been run, which could result in any number of modifications to the system.

All vulnerable systems should apply the patch from Microsoft. Patched systems are immune from the effects of the exploit code. However, detection will still occur files attempting to make use of this exploit."

HOLY SHIT. Do you know what I think this means? We all know Microsoft never wanted Java to succeed -- and programmers here know why... Java was touted and designed to be platform independent and SECURE... Java is/was a threat to Microsoft Windows products! Gates doesn't want platform independence -- anyway call it a conspiracy theory, but I wouldn't be suprised if this vulnerability was there on purpose

[TheFLY]

How does this shit happen...? Java was designed to be as secure as hell... Doesn't Java have like 6 levels of security and the bytecode interpreter to prevent this kind of shit? Damn... And these guys think they can make money on a friggin search engine? They're on crack... Who wants to surf a site after being tricked? They got too greedy... They should have sent all the surfers to an Anna Kornikova gallery -- now *that* would have been some funny shit

[The Truth Hurts]

fuck Java.

[Mr.Fiction]

A lot of people are getting redirected to pages other than the one you you listed. They are getting sent to porn sites. It's probably someone else using the same exploit.

[FreeOnes]

Originally posted by Mr.Fiction
A lot of people are getting redirected to pages other than the one you you listed. They are getting sent to porn sites. It's probably someone else using the same exploit.

No it's all the same guy. How do I know that? Because all those different sites are hosted by host-system.com And the owner of host-system.com is the virus guy himself. I will make sure that the telecom company who has provided all the IP-'s will take all this shit down very soon.

[boldy]

Originally posted by freeones


No it's all the same guy. How do I know that? Because all those different sites are hosted by host-system.com And the owner of host-system.com is the virus guy himself. I will make sure that the telecom company who has provided all the IP-'s will take all this shit down very soon.