Full Circle Magazine: Issue 33

Issue 33 is out: creating a media center, education, and syncA new month (well, in two days) and a new magazine issue is out.This month, we’ve got:- Command and Conquer. - How-To : Program in Python – Part 7, Create A Media Center with a Revo, Ubuntu and Boxee, and The Perfect Server – Part 3. - My Story – Ubuntu in Public Education, and Why I Use Linux. - Review – Exaile. - MOTU Interview –

Read More

Spambot Search Tool: v0.43

* Fixed bug when SBST run on Windows Server systems (doesn't seem to like some of the error handling)* Fixed Colours for new manual submission ;o)Download:http://support.it-mate.co.uk/?mode=Products&p=spambotsearchtool

Read More

As if by magic .....

... awww, did my last post annoy someone? T'would seem so, as I noticed the following new user registration whilst going through the new account;Recognize the IP range? (same IP as the Craigslist fraud rubbish, and same range as Blackhatworld - both mentioned in the previous post).

Read More

Craigs List: Allow me to beat you over the head (softly of course)

I received an e-mail around 30 mins or so ago, pointing me to craigslistinc.org. The individual that reported it had been called by someone referencing this site, claiming to be an employee of Craigs List.I did a little digging and yep, it's a phishing scam. I decided to call Craigs List to inform them of the site, and the additional stuffage I found - a decision I was about to regret. Calling

Read More

Pinball Publisher Network: The ghost of Zango toolbar has a Facebook fan page

Here’s something they don’t teach in marketing 101: If you’re pushing software that no one wants -- like, say, annoying adware -- and your downloads are going nowhere, what do you do?Answer: you push somebody else’s popular software AND BUNDLE YOUR CRAP WITH IT!Remember Zango? It was that irritating adware company that spent years and a million weasel words trying to make its operation seem

Read More

Info: hpHosts server downtime

Just a note folks, I'm beginning the conversion of the hpHosts databases as I write this, so the hpHosts website will be down for the next few hours whilst the conversion takes place.

Read More

vURL Online: Now back online

I've just gotten back folks, and am happy to announce, vURL has now been fully converted to MySQL, and is now back online.Please let me know if you notice any problems.

Read More

The Great 99 Cent Software Experiment of 2010

I’m curious and thinking a crazy single day experiment could be fun and may be worth the risk. So what the hell. If you want to upgrade to WinPatrol PLUS on January 29th, I’ll give you a lifetime WinPatrol membership for less than a dollar. Instead of the regular price of $29.95 I’ll provide a coupon on WinPatrol.com that brings the price down to $0.99 USD. That comes out to approx. .70 € to our

Read More

Enigma Software Group: So much for "building relationships"

I'll not go into the ESG/SpyHunter history, you can read about that elsewhere. Suffice to say, after discussions with Enigma Software Group, and changes they made, I removed them from hpHosts back in 2008;http://hphosts.blogspot.com/2008/08/enigma-software-group-removed-from.htmlSo you'll forgive me for being surprised to receive an e-mail from their lawyer, threatening to sue me. I did however,

Read More

SEVAHOST-AS Seva-Host Ltd (AS49313) and SMS Fraud

I received an e-mail earlier, pointing to an Angelfire hosted site;yzisuteq.angelcities.com/utakeseh.htmlExpecting malware or fake meds, I decided to take a look to see which of the two it was. Surprisingly I was wrong - it was neither. The site leads to mobilnaked.com, a site completely in Russian (and annoyingly, given most of the text is actually image based, untranslatable with Google).

Read More

AdSlash.com is a bogus ad network

We've seen a number of ads being punted through AdSlash.com to legitimate ad networks, but it appears that these are leading to a PDF Exploit (don't visit these sites, obviously!).For example:fwlink.nx7.zedo.com.adslash.com/?alx=a27131939386&td=qcbp71pz=42834&sz=728x90&_zm=359161&st=n1n4&id=131939386&zcw=gh17chl277&xryr=3913771&mp=1460h1fwlink.nx7.zedo.com.adslash.com/stats_js_e.php?id=131939386

Read More

Yet another phishing campaign: ukbusinessforums.co.uk + Netelligent + touchcampaign.com + v2mailservice.com

I received a rather surprising e-mail earlier. Surprising because it was sent to an e-mail address I used specifically for registering on the ukbusinessforums.co.uk website a few years ago, and not an address I'd published anywhere (and nope, I'd not given them permission to give it to anyone else).This particular e-mail is shown to the left, but in short, advertises pdf-adobe.org, which leads to

Read More

Lunarpages followup

Remember this folks?http://hphosts.blogspot.com/2009/08/update-google-webalizer-exploits.htmlWell, I've been seeing more and more sites across LP IP ranges, containing malicious code, and since I'd not heard back from them concerning the sites listed in the above, I decided to go through those previously mentioned back in August last year, to see which are still carrying malicious code.

Read More

msmvps.com down

Seems msmvps.com is down at present folks. No idea why, it's resolving just fine, but the server is refusing the connection (checked via several different sources)./editIt's back folks :o)

Read More

Crimeware friendly ISP's: AS8206 JUNIK-RIGA-LV JUNIKNET Autonomous System JUNIK ISP Network Riga, Latvia

And in todays firing line, competing with the rest for the title of worlds most crimeware friendly ISP, we have AS8206, Latvian based ISP, Junik-Riga-LV.Junik is being listed for 2 very specific reasons, they're providing connectivity for;AS29106 VolgaHost-as PE Bondarenko Dmitriy VladimirovichAS49314 NEVAL PE Nevedomskiy Alexey AlexeevichOh dear, this isn't going to end well is it?Neval has been

Read More

Botnet domains + DNS resolution

Just a note folks, whilst investigating why the domains associated with botnets weren't resolving (been receiving a plethora of e-mails for everything from SendSpace to HM Revenue and Customs to HSBC etc etc), I did a check on OpenDNS's servers and discovered an issue with their Lodon based server (still failed to resolve even after a cache check).All of their other servers are unaffected by

Read More

Dear PayPal: What the heck are you smoking?

With the blackhat SEO campaigns taking advantage of Haiti to infect people and rip them all of, you'd have thought PayPal would've had a little forethought before sending this out.I must ask PayPal, what the heck were you thinking when the thought "Ooooh, lets send an EMAIL to our members, in HTML of course, to ask them for MONEY!".Anyone ever tell you about phishing scams and the like?Your

Read More

Immediate hpHosts server downtime

Just a note folks, the hpHosts server is making some very strange noises (typical, get 2 servers re-built and another decides it wants to be a problem), and doesn't sound too well, so I'm going to take it offline with immediate effect, to take a look and see what the problem is.I'm not expecting the downtime to be more than 30-45 mins or so.

Read More

hpHOSTS - UPDATED January 12th, 2010

hpHOSTS - UPDATED January 12th, 2010The hpHOSTS Hosts file has been updated. There is now a total of 118,743 listed hostsnames.If you are NOT using the installer, please read the included Readme.txt file for installation instructions. Enjoy! :)Latest Updated: 12/01/2010 18:00Last Verified: 11/01/2010 12:00Download hpHosts now!http://hosts-file.net/?s=Download

Read More

Riccom Ltd: Where'd they go?

I thought you guys would be interested in the latest validation results, which shows where quite a few prior Riccom customers have now gone over to. Note: the results do not include PTR details (only did a quick validation as I'm busy with work and hpHosts at present).http://hosts-file.net/misc/hpObserver_results_-_Riccom_91.212.107.0-255-update-12012010.htmlThe shortlist of ISP's they've moved

Read More

HostExploit: Top Bad Hosts

HostExploit has provided a facility that now allows you to see which of the ISP's currently online, are within their list of the worlds worst. Names you'll currently see include Velcom, Netelligent, ZHM, NetDirect, Neval etc etc etc.Take a peek, and pop over to their new SiteVet (well, new to me anyway) site, which provides extensive details (some details only provided if you pay a fee apparently

Read More

Crimeware friendly ISP's: RETN-AS (AS9002)

You may be asking yourself, why are RETN-AS being listed as crimeware friendly? Well, to keep this short and simple, I'll tell you - NET-UA-AS limited corp (AS40965 195.95.151.0/24) and SOFTNET (AS50073 193.104.110.0/24 SOFTNET Software Service Prague s.r.o.).The SOFTNET range was first seen in November 2009, and ever since then, has served nothing but exploits, rogues, and other malicious

Read More

raktor.net de-listed

raktor.net has been de-listed folks.I hate being human sometimes :o(

Read More

hpHosts update delayed

Just a note folks, due to the machine that was processing the database (determines which are alive, and which are not), deciding it wanted to crash during the saving process, the latest hpHosts release will be delayed for a few days.On a brighter note, I've now got the mail server onto a new (well old PIII) dedicated machine, and config'd/tested, so I can now send e-mail again - yipee!.

Read More

Network downtime

Alas poor yorik, tis not my week .... not content with the motherboard in the Intranet/vURL server dying, the HDD suffered a death in the gateway server, rendering access to the network impossible. I've got the gateway back online on a temporary machine, but still have to re-build the mail server (going to have to talk to Alt-N about that).

Read More

vURL Online and Intranet server

Due to an as yet unknown fault, the vURL and Intranet server, is currently offline. I'm suspecting a hardware fault at this point as it's not picked up on the KVM anymore, which suggests a fried graphics card/motherboard.Sadly, I'll not be home until Tuesday, but have someone working on sorting it out for me./editSadly, it's been confirmed that the servers motherboard has fried, so I'll have to

Read More

Full Circle Magazine: Issue 32

At the writing of this post, it’s new year’s for most of the world (and definitely will be by the time most of you read this). Not only is it a new year, it’s a new decade full of promises for the computing world and the world at large. I hope you’ve enjoyed our foray into Ubuntu and Linux for the past few years. Here’s to many more!That being said, what better way to start off a new year than

Read More