[done] Webhelper: The Lop.com Gang and all known Hideouts

[webhelper]

Webhelper: The Lop.com Gang and all known Hideouts
22 March 2004

Known sites
active-max.com: 66.220.17.70
Ao.lop.com:66.220.17.151
Blackstonedata.com (Was owned by Transponder Gang now Jason Lucas Fl Internet Marketing)
Blackstonedata.net (Was owned by Transponder Gang now Jason Lucas Fl Internet Marketing)

chaostic.com: 205.252.89.53
Crap2.com 216.194.89.113 (Porn Affiliate Program)
cybergirlsex.com: 66.220.17.37 (Fl Internet Marketing Jason Lucas)
ecpm.com: 66.220.17.204
find-quick.com: 66.220.17.206
hadassahyouth.com (Non active but owned by Alex Shamash)
lop.com: 66.220.17.153

MAXEXP.COM 66.220.17.39
MAXIMUMEXPERIENCE.COM: 66.220.17.39 (Fl Internet Marketing)
mp3heaven.org 66.220.17.35
mp3search.com: 209.50.253.157 (Directs to Lop.com for Uninstall)
mp3sound.com: 209.50.253.158 (Spawnet Limited)
mysearchnow.com: 66.220.17.211
OHYEA.ORG: 66.220.17.213 (Media Live)
searchwebnow.com: 66.220.17.211
Spawnet.com 216.194.67.59
TRINITYACQUISITIONS.COM: 66.220.17.74 (Trinity Acquisitions Inc. Jason Lucas)
warnet.com: 63.218.224.50 (Sells Warnet Free Edition adware detection and removal)

Wrn.net 216.194.89.114 (Non-Porn Affiliate Program)
XCX.COM: 208.231.27.100 (Spawnet Limited) 2001 had cracks and porn

Business Names
C2 Media Limited
Fla Internet Marketing Inc (Jason Lucas Florida)
Media Live
Mp3 Search
Secure Software Inc. (Alex Shamash and Jason Lucas..Florida)
Spawnet Limited
Trinity Acquisitions Inc.
Warnet AdGaurd
Warnet Limited

DNS Servers
NS1.WARNET.COM 216.194.67.59
NS2.WARNET.COM 216.194.67.60
NS1.SPAWNET.COM 216.194.89.120
NS2.SPAWNET.COM 216.194.89.121
NS3.SPAWNET.COM 216.194.89.122
NS4.SPAWNET.COM 216.194.89.123
NS5.SPAWNET.COM 63.217.26.34
NS1.LOP.COM 66.220.17.5
NS2.LOP.COM 66.220.17.6
COOL.MP3SOUND.COM 208.231.27.120
COOL2.MP3SOUND.COM 208.231.27.121
NS.MAXEXP.COM
NS1.MAXEXP.COM 66.220.17.5
NS2.MAXEXP.COM 66.220.17.6
NS1.XXXSTORAGE.COM


Standard redirects and home page for hijacking
aavc.com 66.220.17.152
acjp.com 66.220.17.152
ebdv.com 66.220.17.152
ebdw.com 66.220.17.152
ebjp.com 66.220.17.152
ebkn.com 66.220.17.152
ebky.com 66.220.17.152
eblv.com 66.220.17.152
wbkb.com 66.220.17.152
ebvr.com 66.220.17.152
ecmh.com 66.220.17.152
ecwz.com 66.220.17.152
ecyb.com 66.220.17.152
eduy.com 66.220.17.152
eeev.com 66.220.17.152
farse.com 66.220.17.39
ibmx.com 66.220.17.152
icwb.com 66.220.17.152
icwo.com 66.220.17.152
icwp.com 66.220.17.152
iddh.com 66.220.17.152
idhh.com 66.220.17.152
ifiz.com 66.220.17.152
iguu.com 66.220.17.152
samz.com 66.220.17.152
saoe.com 66.220.17.218
sbee.com 66.220.17.38
sbjr.com 66.220.17.219
sbnl.com 66.220.17.220
sbnt.com 66.220.17.221
sbvr.com 66.220.17.222
scbm.com 66.220.17.152
sckr.com 66.220.17.223
scrk.com 66.220.17.224
sdry.com 66.220.17.152
seld.com 66.220.17.152
sfux.com 66.220.17.228
sheat.com 66.220.17.39
sipo.com 66.220.17.152
smds.com 66.220.17.152
srib.com 66.220.17.152
srox.com 66.220.17.152
srsf.com 66.220.17.152
ssaw.com 66.220.17.152
ssby.com 66.220.17.152
surj.com 66.220.17.152
tbvg.com 66.220.17.152
tdak.com 66.220.17.229
tdmy.com 66.220.17.231
tefs.com 66.220.17.232
tfil.com 66.220.17.233
tjar.com 66.220.17.235
tjaw.com 66.220.17.236
tjgo.com 66.220.17.239
tjem.com 66.220.17.238
torc.com 66.220.17.152
wabu.com 66.220.17.152
wabq.com 66.220.17.152
wfix.com 66.220.17.240
wflu.com 66.220.17.241


Webhelper
_________________
Wächter der Geschichten
http://www.webhelper4u.com/thewatcher.html

[Beggers]

A very helpful list thankyou, but how do I get rid of them?

I certainly have the trinityacquisitons appearing and one called owning.ath.cx as well as the lop.com.

Any help please.

[Corrine]

Hi, Beggars. To get rid of them, you need to use Ad-Aware SE. Just follow the instructions for setting up your scan and posting your logfile in this thread  http://www.freedomlist.com/forum/viewtopic.php?t=17328   and create a new topic and post your logfile.


_________________


Take a walk through my Security Garden

[fly_on_the_wall]

Jason Lucas has caused quite a buzz by buying out a popular internet message board, godlikeproductions.com. He is posting there under the name "^TrInItY^", and bans anyone who mentions lop.com or spyware.

[FYI]

This same individual has taken umbrage to some of the posts at ProxyWhoreRefuge.com, a splinter forum of ex GLP posters. Apparently he does not like thementioning his "alias" and name together. He is initiating legal proceedings against them.
Be careful.