have spyware?

[DoC]

Have you ever downloaded music online?
When you surf online, do you get pop up ads?
If so, there's a 94% chance your PC is infected with potentially harmful
SpyWare!
Click here to scan your PC now ABSOLUTELY FREE and see for yourself!
http://hop.clickbank.net/?jjperez/trekblue8

[AvianFlux]

HpHOSTS file tags clickbank.net [IP> 67.139.254.125] as a
adware/malware/spyware server!

Advice: Don't go there!

[Jay T. Blocksom]

On Mon, 11 Apr 2005 09:14:35 GMT, in <alt.privacy.spyware>, "DoC"
<jperez77069@houston.rr.com> wrote:
>
> From: "DoC" <jperez77069@houston.rr.com>
> Newsgroups: alt.privacy.spyware
> Subject: have spyware?
> Lines: 8
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
> X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
> X-RFC2646: Format=Flowed; Original
> Message-ID: <%dr6e.17795$Xp.17602@tornado.texas.rr.com>
> Date: Mon, 11 Apr 2005 09:14:35 GMT
> NNTP-Posting-Host: 66.69.128.138
> X-Complaints-To: abuse@rr.com
> X-Trace: tornado.texas.rr.com 1113210875 66.69.128.138
> (Mon, 11 Apr 2005 04:14:35 CDT)
> NNTP-Posting-Date: Mon, 11 Apr 2005 04:14:35 CDT
> Organization: Road Runner High Speed Online http://www.rr.com
> Xref: number1.nntp.dca.giganews.com alt.privacy.spyware:49395
>
> Have you ever downloaded music online?
> When you surf online, do you get pop up ads?
> If so, there's a 94% chance your PC is infected with potentially harmful
> SpyWare!
> Click here to scan your PC now ABSOLUTELY FREE and see for yourself!
> http://[REDACTED]
>

Complaints to: <abuse@rr.com>, <abuse@twtelecom.net>


--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet02[at]appropriate-tech.net

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this domain is expressly prohibited under
47 USC S227 and State Law. Violators are subject to prosecution.

[Jay T. Blocksom]

On 11 Apr 2005 06:38:59 -0700, in <alt.privacy.spyware>, "AvianFlux"
<neomoniker@hotmail.com> wrote:
>
> HpHOSTS file
[snip]

Which is hopelessly out of date (and nearly always will be).

> ... tags clickbank.net [IP> 67.139.254.125]
[snip]

<clickbank.net> currently resolves to [64.128.87.134]
<hop.clickbank.net> currently resolves to [64.128.87.125]

Both are hosted by Time Warner Telecom:

--> Server Used: [ whois.arin.net ]
--> 64.128.87.134 = [ www1.twt.clickbank.net ]
-->
--> OrgName: Time Warner Telecom
--> OrgID: TWTC
--> Address: 10475 Park Meadows Drive
--> City: Littleton
--> StateProv: CO
--> PostalCode: 80124
--> Country: US
--> NetRange: 64.128.0.0 - 64.129.63.255
--> CIDR: 64.128.0.0/16 64.129.0.0/18
--> NetName: TWTC-NETBLK-11
--> NetHandle: NET-64-128-0-0-1
--> Parent: NET-64-0-0-0-0
--> NetType: Direct Allocation
--> NameServer: NS1.MILW.TWTELECOM.NET
--> NameServer: NS1.IPLT.TWTELECOM.NET
--> NameServer: NS1.ORNG.TWTELECOM.NET
--> Comment:
--> RegDate: 2004-04-26
--> Updated: 2004-04-26
--> TechHandle: ZT87-ARIN
--> TechName: Time Warner Telecom
--> TechPhone: 1-800-898-6473
--> TechEmail: ipmanager@twtelecom.net
-->
--> OrgAbuseHandle: TWTAD-ARIN
--> OrgAbuseName: Time Warner Telecom Abuse Desk
--> OrgAbusePhone: 1-800-898-6473
--> OrgAbuseEmail: abuse@twtelecom.net
-->
--> OrgNOCHandle: TDN1-ARIN
--> OrgNOCName: TWTC Data NOC
--> OrgNOCPhone: 1-800-898-6473
--> OrgNOCEmail: support@twtelecom.net
-->
--> OrgTechHandle: NST12-ARIN
--> OrgTechName: NOC SWIP Team
--> OrgTechPhone: 1-800-898-6473
--> OrgTechEmail: swip@twtelecom.com
-->
--> OrgName: COLOC8 INC.
--> OrgID: COLOC-2
--> Address: Administrative Offices
--> Address: 917 Lusk Street 3rd Floor
--> City: Boise
--> StateProv: ID
--> PostalCode: 83706-2830
--> Country: US
--> ReferralServer: rwhois: //rwhois1.coloc8.net: 4321
--> NetRange: 64.128.87.0 - 64.128.87.255
--> CIDR: 64.128.87.0/24
--> NetName: TWTC-SOC118571
--> NetHandle: NET-64-128-87-0-1
--> Parent: NET-64-128-0-0-1
--> NetType: Reassigned
--> Comment:
--> RegDate: 2005-02-25
--> Updated: 2005-02-25
--> OrgAbuseHandle: AST40-ARIN
--> OrgAbuseName: Abuse and Security Team
--> OrgAbusePhone: 1-208-489-3435
--> OrgAbuseEmail: colo-abuse@coloc8.net
-->
--> OrgNOCHandle: NOB2-ARIN
--> OrgNOCName: Network Operations Bureau
--> OrgNOCPhone: 1-208-489-3435
--> OrgNOCEmail: colo-noc@coloc8.net
-->
--> OrgTechHandle: TSG18-ARIN
--> OrgTechName: Technical Support Group
--> OrgTechPhone: 1-208-489-3435
--> OrgTechEmail: colo-tech@coloc8.net
-->
--> ARIN WHOIS database last updated 2005-04-12 19: 10

> as a adware/malware/spyware server!
>
[snip]

Which is near-certainly correct, despite the problems noted above.

> Advice: Don't go there!

Agreed.

And the best way to ensure that is to make "clickbank.net" a permanent entry
in your DNSKong "named.txt" file. That neatly obviates the "musical hosting"
games they play.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet02[at]appropriate-tech.net

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this domain is expressly prohibited under
47 USC S227 and State Law. Violators are subject to prosecution.