sb.hta

[PornoWill]

I got a file named sb.hta put in my startup menu folder today by a site/gallery and the search window on the right side of my browser is set to a site with a GoTo referal search box and some "category" links with referal codes for JetHomePage.com. I removed the file - no problem, but this fucking with my computer I will not take. Either my homepage is set or I get shortcuts with CP descriptions in my favorite folder. And now this.

I will try to find the site again and start a img src campaign to give this lamer a nice bandwidth bill. Anyone want to join in and send them some nice amounts of src traffic?

[viper2K1]

i had that sb.hta file too and I got it from the site i mentioned here:
http://bbs.adultwebmasterinfo.com/ubb/Forum8/HTML/000481.html

[Groovy]

the basterd!

take his server down!!!

[PornoWill]

Thanks for your tip Viper, topsearcher.com is the right one. I will now put up a img src to him on Pornonett, the CJ site that is coming tonight and 3-4 friends sites. Anyone else want to src him please?

[Hypo]

PornoWill,

What this guy did was not illegal, but what you are planning to do would be. Think of some other method to take him down.

[PornoWill]

I can make it easier for you; just put this code on your sites to give the lamer a nice bandwidth bill:

<img src="http://www.topsearcher.com/?Go.hang.yourself.NOW!width="0" heigth="0">

Thanks for your support hopefully. http://bbs.adultwebmasterinfo.com/ubb/smile.gif

[PornoWill]

SORRY; I had an typo there, here is the right code;

<img src="http://www.topsearcher.com/?Go.hang.yourself.NOW!" width="0" heigth="0">

[PornoWill]

<font face="Verdana, Arial" size="2">Originally posted by Hypo:
PornoWill,

What this guy did was not illegal, but what you are planning to do would be. Think of some other method to take him down.</font>

Maybe it's not illegal Hypo, but img src is not illegal either.

[Hypo]

img srcing is a type of D.O.S. attack I think, which is illegal. Others might be able to confirm.

[XP]

Unfortunately sb.hta thing is works like a worm. Owner of HomePage Grabber & AutoBookmark adder wrote that too (TrixScripts)

now he giving everyone that javascript, he offers one bookmark to your site, and one to his site. But he grabs default homepage, default search and puts xx.hta worm to your computer!

God damn sick!
also jethomepage.com is his search site

[lisa-the-slut]

What a dick!!

I have that program in my start menu too....

[PornoWill]

<font face="Verdana, Arial" size="2">Originally posted by Hypo:
img srcing is a type of D.O.S. attack I think, which is illegal. Others might be able to confirm.</font>

If it is illegal, it's a prime example of how the crooks go free while the good guys get tied up. I will do it anyway, I doubt it will have any consequences because of the situation.

[HM]

It seems like I had this file in my startup folder since about 3 days ago (i didn't bother to check what it was until yesterday) and that search search window was really pissing me off! Does anybody know how can I remove anything from my PC that is associated with this worm, other than sb.hta (which I already did)?

[The Badgurl]

When these things show up in your favourites....

is it in any particular folder?


On another note...this fucker is putting child porn links in peeps browsers etc..

Isn't the propogation of child porn itself a very illegal act????

I'ld like to see a judge rule in the sick pricks favour...if any lawsuit ensues...

maybe it will wake his host up to his dirty sick tricks, and get him booted!

[toker]

Ok i have a fix for anyone affected by this file...

Start with the registry and delete the following key values ("Do Not delete the keys themselves") just the values inside.

HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Search Bar
HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Default_Search_URL
HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Search Page
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\Search\\SearchAssistant
HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page

Now open Startup folder
C:\WINDOWS\Start Menu\Programs\StartUp
Delete: Startup/sb.hta

Now open explorer and destroy all cookies and delete bad or unwanted URL's from Favorites!

All fixed http://bbs.adultwebmasterinfo.com/ubb/smile.gif

I will try to get a small fix made ASAP to automate the process for future use.

[PornoWill]

Thanks Toker, but, I luckily only got the homepage set, shortcuts in my fav folder and the search shit on the left side of the browser, which is all easy to change back.

Toker, I need something else though. I need a program which I can use to change a certain register key back and forth between two values fast. I hate having to fire up regedit and go through 10's of folders. Do you have such a program/script or could make one? http://bbs.adultwebmasterinfo.com/ubb/smile.gif


-Will

[HM]

Thanks Toker!

[*Kimmykim*]

go to Microsoft and get a critical update, they say they've got a patch to keep it from happening if you don't have it -- if you do have it they should have instructions on hw to rid yourself of it

[Rod]

I read that this shit isn't illegal at the top of this post....well, you are totally wrong.

It is illegal to add stuff into surfer's computer automatically, without his acceptation.

These kind of script are called viruses http://bbs.adultwebmasterinfo.com/ubb/biggrin.gif

So, if you wanna make a big BW bill to him, go ahead... http://bbs.adultwebmasterinfo.com/ubb/biggrin.gif

[PornoWill]

Finally an acceptor...

Want to join my cult "BandWidth Billers United"?

LOL!

[Jaiden]

Here's more. (sigh)


http://www.topteenxxx.com/
http://www.creditcardporn.ws/s/xxx_for_free.html
http://sexslam.com/
http://porn44.com/
http://www.free-virtual-xxx.com/
http://www.hardcore-teen-fucking.com/freexxxsites/
http://www.hotcyberxxx.com/

[Flash]

<font face="Verdana, Arial" size="2">Originally posted by PornoWill:

I need a program which I can use to change a certain register key back and forth between two values fast. I hate having to fire up regedit and go through 10's of folders. Do you have such a program/script or could make one? http://bbs.adultwebmasterinfo.com/ubb/smile.gif

-Will</font>


Why don't you just extract the specific key with the first value and the second value
you want and then make changes by double clicking either the first exported .reg file or the other one? Works fine if you only need to switch between 2 values http://bbs.adultwebmasterinfo.com/ubb/smile.gif

[PornoWill]

I know, but I would just be sure if Toker had something even faster first, like switching with keys.

[toker]

<font face="Verdana, Arial" size="2">Originally posted by Flash:

Why don't you just extract the specific key with the first value and the second value
you want and then make changes by double clicking either the first exported .reg file or the other one? Works fine if you only need to switch between 2 values http://bbs.adultwebmasterinfo.com/ubb/smile.gif</font>

This is the quickest and best method and saves you from having somone send you a program of sorts that will add some key entrys that you might not want. Open regedit choose the registry values you want save and click "registry/export" you can create as many as you need even entire registry trees and rename to like value.reg value2.reg.

Another trick would be somthing like what i made in this case which is combining multi values in 1 key run from a batch file. Batch files with a few minor command lines can do wonderful things and can be edited by most of you that can do java and other simple script editing tasks.

Anyone who want's it's a mere 1.54kb as simple to use as can be!

http://file-downloads.netfirms.com/quick-fix.zip

[PornoWill]

I'll see if I can make it myself, I need it the way I mentioned because of different circumstances. I'm not experienced but am pretty positive anyway. I'll let you know what happens.