Pop-ups

[sponge]

On Fri, 29 Aug 2003 12:05:13 +0000 (UTC), "Mick"
<micky_croker@REMOVE.hotmail.com> wrote:

>Hi all,
> I have been plauged by two pop-ups called "ByeByeAdds.com" &
>"EndAdds.com" which pop up onto my screen whilst I'm on-line. I am
running
>Windows XP & also using MSN. I have used Spybot & addaware but the
>problem still remains. Any help would be greatly appreciated.
>
>Regards,
>Mick

I still see a lot of those on my IDS and IPS. This is messenger spam.
www.endads.com and www.byebyeads.com (and, also, www.destroyads.com)
are all the same scam artists. They operate their sites out of India.
I recommend composing an email and emailing it to the following
addresses, preferably with one or two addresses in the To: field and
the rest in the bcc: field.

ip-admin@giasbm01.vsnl.net.in
gpsingh@giasbm01.vsnl.net.in
postmaster@giasbm01.vsnl.net.in
abuse@cogentco.com
security@cogentco.com
noc@cogentco.com

The problem is that vsnl (India's primary internet backbone), is very
slow to act and has been known in the past to be a black hat, meaning
very spam-friendly. Make a note to Cogentco to sever connectivity with
VSNL if VSNL will not take action.

Make sure to include as much information as possible, even a copy of
the text of the spam if you can. A packet dump isn't a bad idea
either.

Sponge
Sponge's Anti-Spyware Source
www.geocities.com/yosponge

[YoKenny]

sponge wrote:
> On Fri, 29 Aug 2003 12:05:13 +0000 (UTC), "Mick"
> <micky_croker@REMOVE.hotmail.com> wrote:
>
>> Hi all,
>> I have been plauged by two pop-ups called "ByeByeAdds.com" &
>> "EndAdds.com" which pop up onto my screen whilst I'm on-line. I am
>> running Windows XP & also using MSN. I have used Spybot &
>> addaware but the problem still remains. Any help would be greatly
>> appreciated.
>>
>> Regards,
>> Mick
>
> I still see a lot of those on my IDS and IPS. This is messenger spam.
> www.endads.com and www.byebyeads.com (and, also, www.destroyads.com)
> are all the same scam artists. They operate their sites out of India.
> I recommend composing an email and emailing it to the following
> addresses, preferably with one or two addresses in the To: field and
> the rest in the bcc: field.
>
> ip-admin@giasbm01.vsnl.net.in
> gpsingh@giasbm01.vsnl.net.in
> postmaster@giasbm01.vsnl.net.in
> abuse@cogentco.com
> security@cogentco.com
> noc@cogentco.com
>
> The problem is that vsnl (India's primary internet backbone), is very
> slow to act and has been known in the past to be a black hat, meaning
> very spam-friendly. Make a note to Cogentco to sever connectivity with
> VSNL if VSNL will not take action.
>
> Make sure to include as much information as possible, even a copy of
> the text of the spam if you can. A packet dump isn't a bad idea
> either.

Don't get your hopes up. Cogentco is just as black hat.
http://www.spamhaus.org/SBL/listings...p=cogentco.com <== notice the
yellow listings
http://www.spamhaus.org/SBL/listings...co.net%20(arin)
http://www.spamhaus.org/SBL/listings...sp=vsnl.net.in