warning nasty program called spy sherriff

MrYum · 2005-10-06, 12:47 AM

Quote:

Originally Posted by porndragon

just be careful or you could nab it again easy to catch and hard as hell to get rid of the guy who wrote that are they by any chance based in florida? muahahahah lol had to say it

THAT would definitely be justifiable homicide!

The cocksmokers that do this shit need to be drawn and quartered

plateman · 2005-10-10, 02:35 AM

Man I took a chance and deleted stuff out of my registery - I got rid of the spy sherriff shit over last weekend after speeding 3 days running scans trying differnet spyware programs ran a repair on xp pro, and really my pc worked pretty good so I thought everything was clean by reading my hijack this file scans, and searching the geek boards for info on exe files for left over scum,...

so then while reviewing I noticed when checking a pay site tour ATK cash site would redirect to some search porn tgp BS and I read the page source and seen all the differnet urls in this network of cheats, so then I thought I'll get it all out when I get more time and info.. So then I click on dirty daughter submit page to sub a gallery and nothing blank so I try another url to there main page and get that fuckin redirect....

so I ran so many spyware and virus programs and they found really nothing aside from getting out the spy sherriff stuff last week,, So then I ran somemore hijack this scans and found some strange ips so I ran a whois on them and then it really is fishy - take a look at the crooks and cheats that put shit on my PC,

Also I found no info in google for this stuff other than the normal stuff nothing on this redirect problem and those ips

O17 - HKLM\System\CCS\Services\Tcpip\..\{01E9D82D-E656-44EA-9217-8B6978807CB5}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{88386A05-38E0-4C6A-BC9C-2AF67A3360D2}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{AEEE9155-F410-4B79-9539-88DD64DCAE3B}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{DB9F72E5-5A58-4E85-BBFB-7E6EDE414856}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{E7B85EDE-0843-4A00-BD41-742512B94D6F}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE5301E5-818E-4595-8C3C-130FC298BC88}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{01E9D82D-E656-44EA-9217-8B6978807CB5}: NameServer = 85.255.113.140,85.255.112.10
O17 - HKLM\System\CS2\Services\Tcpip\..\{01E9D82D-E656-44EA-9217-8B6978807CB5}: NameServer = 85.255.113.140,85.255.112.10

so I backed up my registery and deleted those entries and no more redirects - and you can see if you want who owns those ips, its the same guy for a range of them

plateman · 2005-10-10, 02:52 AM

Fuckin bastards I wonder how much traffic they stolen off of surfers and sites and programs.. now I am gonna run cleanup and go to bed.. well one good thing is I learned a lot about exe files and spyware and other geek things

2005-10-10, 02:35 AM	#2
plateman What can I do - I was born this way LOL Join Date: Oct 2003 Location: ohio Posts: 3,086	Man I took a chance and deleted stuff out of my registery - I got rid of the spy sherriff shit over last weekend after speeding 3 days running scans trying differnet spyware programs ran a repair on xp pro, and really my pc worked pretty good so I thought everything was clean by reading my hijack this file scans, and searching the geek boards for info on exe files for left over scum,... so then while reviewing I noticed when checking a pay site tour ATK cash site would redirect to some search porn tgp BS and I read the page source and seen all the differnet urls in this network of cheats, so then I thought I'll get it all out when I get more time and info.. So then I click on dirty daughter submit page to sub a gallery and nothing blank so I try another url to there main page and get that fuckin redirect.... so I ran so many spyware and virus programs and they found really nothing aside from getting out the spy sherriff stuff last week,, So then I ran somemore hijack this scans and found some strange ips so I ran a whois on them and then it really is fishy - take a look at the crooks and cheats that put shit on my PC, Also I found no info in google for this stuff other than the normal stuff nothing on this redirect problem and those ips O17 - HKLM\System\CCS\Services\Tcpip\..\{01E9D82D-E656-44EA-9217-8B6978807CB5}: NameServer = 85.255.113.140,85.255.112.10 O17 - HKLM\System\CCS\Services\Tcpip\..\{88386A05-38E0-4C6A-BC9C-2AF67A3360D2}: NameServer = 85.255.113.140,85.255.112.10 O17 - HKLM\System\CCS\Services\Tcpip\..\{AEEE9155-F410-4B79-9539-88DD64DCAE3B}: NameServer = 85.255.113.140,85.255.112.10 O17 - HKLM\System\CCS\Services\Tcpip\..\{DB9F72E5-5A58-4E85-BBFB-7E6EDE414856}: NameServer = 85.255.113.140,85.255.112.10 O17 - HKLM\System\CCS\Services\Tcpip\..\{E7B85EDE-0843-4A00-BD41-742512B94D6F}: NameServer = 85.255.113.140,85.255.112.10 O17 - HKLM\System\CCS\Services\Tcpip\..\{EE5301E5-818E-4595-8C3C-130FC298BC88}: NameServer = 85.255.113.140,85.255.112.10 O17 - HKLM\System\CS1\Services\Tcpip\..\{01E9D82D-E656-44EA-9217-8B6978807CB5}: NameServer = 85.255.113.140,85.255.112.10 O17 - HKLM\System\CS2\Services\Tcpip\..\{01E9D82D-E656-44EA-9217-8B6978807CB5}: NameServer = 85.255.113.140,85.255.112.10 so I backed up my registery and deleted those entries and no more redirects - and you can see if you want who owns those ips, its the same guy for a range of them __________________ Submit to: Porn O Plenty XXX Links Reality Here

2005-10-10, 02:52 AM	#3
plateman What can I do - I was born this way LOL Join Date: Oct 2003 Location: ohio Posts: 3,086	Fuckin bastards I wonder how much traffic they stolen off of surfers and sites and programs.. now I am gonna run cleanup and go to bed.. well one good thing is I learned a lot about exe files and spyware and other geek things __________________ Submit to: Porn O Plenty XXX Links Reality Here