Man I took a chance and deleted stuff out of my registery - I got rid of the spy sherriff shit over last weekend after speeding 3 days running scans trying differnet spyware programs ran a repair on xp pro, and really my pc worked pretty good so I thought everything was clean by reading my hijack this file scans, and searching the geek boards for info on exe files for left over scum,...
so then while reviewing I noticed when checking a pay site tour ATK cash site would redirect to some search porn tgp BS and I read the page source and seen all the differnet urls in this network of cheats, so then I thought I'll get it all out when I get more time and info.. So then I click on dirty daughter submit page to sub a gallery and nothing blank so I try another url to there main page and get that fuckin redirect....
so I ran so many spyware and virus programs and they found really nothing aside from getting out the spy sherriff stuff last week,, So then I ran somemore hijack this scans and found some strange ips so I ran a whois on them and then it really is fishy - take a look at the crooks and cheats that put shit on my PC,
Also I found no info in google for this stuff other than the normal stuff nothing on this redirect problem and those ips
O17 - HKLM\System\CCS\Services\Tcpip\..\{01E9D82D-E656-44EA-9217-8B6978807CB5}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{88386A05-38E0-4C6A-BC9C-2AF67A3360D2}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{AEEE9155-F410-4B79-9539-88DD64DCAE3B}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{DB9F72E5-5A58-4E85-BBFB-7E6EDE414856}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{E7B85EDE-0843-4A00-BD41-742512B94D6F}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE5301E5-818E-4595-8C3C-130FC298BC88}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{01E9D82D-E656-44EA-9217-8B6978807CB5}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CS2\Services\Tcpip\..\{01E9D82D-E656-44EA-9217-8B6978807CB5}: NameServer = 85.255.113.140,85.255.112.10
so I backed up my registery and deleted those entries and no more redirects - and you can see if you want who owns those ips, its the same guy for a range of them
|