erotism.com

[ChrisX]

Hey fuck, I go on their free-host ( just to try to delete my old account to not receive their spam again ) and when I click on their support section I got a lot of pop-up windows... but my anti-trojan warm me that something was changed in my registry. Yes they auto download their dialer, change my registry, execute the dialer and add icon on my desktop... <img border="0" title="" alt="[Mad]" src="mad.gif" /> <br /><br />I just try again the same thing just to see if this will happen again but their support section work for this time... but anyway I get this auto dowload from them.

[candidpublishinginc]

Are you positive it was them and no something a webmaster placed in a gallary hosted by them? Isn't erotism.com owned by Gamma?

[slickroyale]

Ive had similar things happen with Erotism, its a weird site, and I deleted it from my bookmarks because of suspicious activity when its open or if it *was* open...<br /><br />Watch sites carefully,...<br /><br /> <img border="0" alt="[Bounce]" title="" src="graemlins/bounce.gif" />

[BFFR]

i've got afew gamma and erotism accounts,Monthly i'm getting afew "info" mails from gamma but i never got any erotism "spam"..<br /><br />i cant say their signup ratios are best but their service is the one of the best may be the BEST..<br /><br />if the only problem is afew pop ups,i think attack to Gamma is pointless <img border="0" title="" alt="[Wink]" src="wink.gif" />

[ChrisX]

Ok I retry it another time.<br /><br />When you type a page that doest not exist like erotism.com/dffdgdgdsfs.html you will get a page not found error 404 with banner and another small 404 error page in a pop up.<br /><br />If you close the small pop-up you will get this page :<br /><a href="http://204.177.92.193/pt/affpp/index_ca.jhtml?pin=500270" target="_blank">http://204.177.92.193/pt/affpp/index_ca.jhtml?pin=500270</a><br /><br />Now wait 2 seconds, other pop-up will appear and bang! you will get the autodownload, change in your registry, auto execute...<br /><br />What I got in my registry is c:\program files\dialers\canada\canada.exe /noconnect<br /><br />I have Internet Explorer 5.5 with service pack 2 and all the security patch... but I got this autodownload anyway <img border="0" title="" alt="[Frown]" src="frown.gif" /> <br /><br />But it's real you know, but I dont know maybe it's another sponsor that erostim.com use.