3 replies to this topic

[Andavari]

This is a list of fake Windows patch websites and other suspicious websites that I collected over some time. The list was derived when I used to use Sygate Personal Firewall.

They can be blocked in web browsers, and the hosts file. Blocking these websites "may" prevent some unsolicited pop-ups, and "may" prevent some malware.

Web Browser Format:

*.antieye.com
www.antieye.com
*.antijunk.com
www.antijunk.com
*.e-regclean.com
www.e-regclean.com
*.e-regfix.com
www.e-regfix.com
*.e-regpatch.com
www.e-regpatch.com
*.eantispy.com
www.eantispy.com

*.fix-comp.com
www.fix-comp.com
*.fixed-pc.com
www.fixed-pc.com
*.messagestop.biz
www.messagestop.biz
*.messagestop.net
www.messagestop.net
*.messengerplug.com
www.messengerplug.com

*.patchnow.net
www.patchnow.net
*.patchwindows.org
www.patchwindows.org
*.patchwindows.net
www.patchwindows.net
*.penispatch.org
www.penispatch.org
*.reg-patch.com
www.reg-patch.com

*.reg-scanner.com
www.reg-scanner.com
*.regcleanerpro.com
www.regcleanerpro.com
*.registryalert.com
www.registryalert.com
*.registryfixit.com
www.registryfixit.com
*.registryfixpro.com
www.registryfixpro.com

*.spamkill.info
www.spamkill.info
*.spyware-scans.com
www.spyware-scans.com
*.updatenow.org
www.updatenow.org
*.updatepatch.info
www.updatepatch.info
*.upgradenow.org
www.upgradenow.org

*.win-fix.com
www.win-fix.com
*.windowspatch.info
www.windowspatch.info
*.windowspatch.net
www.windowspatch.net
*.windowsregfix.com
www.windowsregfix.com
*.winregfix.com
www.winregfix.com

----------------------------------------------------

HOSTS File Format:

# Start of Block Fake Windows Patch Websites
127.0.0.1       antieye.com
127.0.0.1       www.antieye.com
127.0.0.1       antijunk.com
127.0.0.1       www.antijunk.com
127.0.0.1       e-regclean.com
127.0.0.1       www.e-regclean.com
127.0.0.1       e-regfix.com
127.0.0.1       www.e-regfix.com
127.0.0.1       e-regpatch.com
127.0.0.1       www.e-regpatch.com
127.0.0.1       eantispy.com
127.0.0.1       www.eantispy.com
127.0.0.1       fix-comp.com
127.0.0.1       www.fix-comp.com
127.0.0.1       fixed-pc.com
127.0.0.1       www.fixed-pc.com
127.0.0.1       messagestop.biz
127.0.0.1       www.messagestop.biz
127.0.0.1       messagestop.net
127.0.0.1       www.messagestop.net
127.0.0.1       messengerplug.com
127.0.0.1       www.messengerplug.com
127.0.0.1       patchnow.net
127.0.0.1       www.patchnow.net
127.0.0.1       patchwindows.org
127.0.0.1       www.patchwindows.org
127.0.0.1       patchwindows.net
127.0.0.1       www.patchwindows.net
127.0.0.1       penispatch.org
127.0.0.1       www.penispatch.org
127.0.0.1       reg-patch.com
127.0.0.1       www.reg-patch.com
127.0.0.1       reg-scanner.com
127.0.0.1       www.reg-scanner.com
127.0.0.1       regcleanerpro.com
127.0.0.1       www.regcleanerpro.com
127.0.0.1       registryalert.com
127.0.0.1       www.registryalert.com
127.0.0.1       registryfixit.com
127.0.0.1       www.registryfixit.com
127.0.0.1       registryfixpro.com
127.0.0.1       www.registryfixpro.com
127.0.0.1       spamkill.info
127.0.0.1       www.spamkill.info
127.0.0.1       spyware-scans.com
127.0.0.1       www.spyware-scans.com
127.0.0.1       updatenow.org
127.0.0.1       www.updatenow.org
127.0.0.1       updatepatch.info
127.0.0.1       www.updatepatch.info
127.0.0.1       upgradenow.org
127.0.0.1       www.upgradenow.org
127.0.0.1       win-fix.com
127.0.0.1       www.win-fix.com
127.0.0.1       windowspatch.info
127.0.0.1       www.windowspatch.info
127.0.0.1       windowspatch.net
127.0.0.1       www.windowspatch.net
127.0.0.1       windowsregfix.com
127.0.0.1       www.windowsregfix.com
127.0.0.1       winregfix.com
127.0.0.1       www.winregfix.com
# End of Block Fake Windows Patch Websites

[oli]

how do u block them

[Andavari]

oli, on Jul 28 2005, 05:24 AM, said:

how do u block them

<{POST_SNAPBACK}>

Duh, you've got to be kidding

Web Browser Format:

Internet Explorer:
1. Run Internet Explorer.
2. Click Tools->Internet Options->Security->Restricted Sites
Copy a site and paste it into the window, select Add for each one. When all are inputted click Ok.
3. Click Tools->Internet Options->Privacy->Sites
Copy a site and paste it into the window, select Block for each one. When all are inputted click Ok.

Mozilla Suite:
1. Run Mozilla Suite.
2. Click Edit->Preferences->Privacy & Security->Cookies->Cookie Manager->Cookie Sites
Copy a site and paste it into the window, select Block for each one. When all are inputted click Close.
3. Click Edit->Preferences->Privacy & Security->Images->Manage Image Permissions
Copy a site and paste it into the window, select Block for each one. When all are inputted click Close.

-----

HOSTS File Format:

Win9x HOSTS File location (open with Notepad):
"%windir%\HOSTS"

WinXP HOSTS File location (open with Notepad:)
"%systemroot%\SYSTEM32\DRIVERS\ETC\HOSTS"

1. Copy the sites listed in HOSTS File Format in the code listed above from
# Start of Block Fake Windows Patch Websites to # End of Block Fake Windows Patch Websites
2. Paste into the HOSTS File.
3. Save the HOSTS File.
4. Write protect the HOSTS File so it can't be tampered with.

[oli]

yeah im not good