PDA

View Full Version : How to get this mofo??


bramdaman
10-10-2001, 07:03 AM
unless your system is protect or you know how to set things to default again. do open this link
http://www.xxxclublove.net/cj/

Now I get my default homepaghe set to about:homepage instead on about:blank

about:homepage opens some stupid searchbox at the top of your page. Also I get 2 offshoreclicks auto bookmark things in my favorites.

It seems that the url http://www.thecgi.com/bomb.php?id=101 he is img scring sets my homepage..

Owner:


Enter any domain name for a WHOIS query:

WHOIS

Enter a domain name in the space to the left and click the search button!

Include the TLD (i.e. .com, .uk, etc.)


Registrant:
2k Services, Inc
3500 Maisonneuve West, #1108
Montreal, PQ H3Z 3C1
CA

Domain Name: THECGI.COM

Administrative Contact:
Khokholkov, Vladislav vlad@ols2000.com
3500 Maisonneuve West, #1108
Montreal, PQ H3Z 3C1
CA
514 931 2572

Technical Contact:
Khokholkov, Vladislav vlad@ols2000.com
3500 Maisonneuve West, #1108
Montreal, PQ H3Z 3C1
CA
514 931 2572

Billing Contact:
Khokholkov, Vladislav vlad@ols2000.com
3500 Maisonneuve West, #1108
Montreal, PQ H3Z 3C1
CA
514 931 2572


Record last updated on 02-Oct-2001.
Record expires on 01-Apr-2002.
Record Created on 01-Apr-2000.

Domain servers in listed order:
NS1.OLS2000.COM 209.25.180.230
NS2.OLS2000.COM 209.25.180.246

It looks like Vladislav want trouble

Oh and here's our friend from xxxclublove.net


Enter any domain name for a WHOIS query:

WHOIS

Enter a domain name in the space to the left and click the search button!

Include the TLD (i.e. .com, .uk, etc.)


Registrant:
Caroline Arevalo (XXXCLUBLOVE2-DOM)
PO BOX 764
Othello, WA 99344
US

Domain Name: XXXCLUBLOVE.NET

Administrative Contact, Billing Contact:
Arevalo, Caroline (CA8822) jemalverde@AOL.COM
PO BOX 764
Othello , WA 99344
509-989-0946
Technical Contact:
Jester, Norman (NJ249) chris@SPLITINFINITY.COM
SplitInfinity Networks Operations Center
13553 Poway Rd.
San Diego, CA 92064
858-679-2814 (FAX) 858-679-2854

Record last updated on 26-Sep-2001.
Record expires on 17-Sep-2002.
Record created on 17-Sep-1999.
Database last updated on 9-Oct-2001 22:09:00 EDT.

Domain servers in listed order:

NS1.SPLITINFINITY.NET 209.132.86.17
NS2.SPLITINFINITY.NET 209.132.86.18

Unknown
10-10-2001, 07:37 AM
Look at this:

ref=document.referrer}
document.write('<img src="http://php.offshoreclicks.com/engine.php?&affiliate=jazmin&refer='+ref+'&b='+rand_part+'" width=0 height=0 border=0>');
// -->

Unknown
10-10-2001, 07:39 AM
Better inform OffshoreClicks.

bramdaman
10-10-2001, 10:42 AM
Also 2 nices shortcuts on the desktop.. I just noticed them :(

Hypo
10-10-2001, 04:42 PM
Check your start menu and dial up networking folder too. They usually put stuff there as well.

Mole
10-10-2001, 05:38 PM
After looking at the link, my Norton Antivirus came up with this alert:

Scan type: Realtime Protection Scan
Event: Virus Found!
Virus name: JS.Exception.Exploit
File: I:\Opera\Cache4\opr005QQ.htm
Location: Quarantine
Action taken: Clean failed : Quarantine succeeded : Access denied