Fight Back for Golarger Spam
By Jian Shuo Wang on 2003-02-28 23:51 · SpamYesterday, I talked about golarger, which I claim to be both Net Send Spammer and Blog Comment Spammer. Shortly after that, I am very happy to see SImo posted about the effort to fight back for Golarger Spam. Please read this.
!!! FIGHT BACK FROM NET SEND SPAM !!!
In contesy of Simo, I quoted his comment here.
!!! FIGHT BACK FROM NET SEND SPAM !!!
It does pay to advise the ISP that the NET SEND SPAM is coming from….Please see this email I just recived :
Hello,
your report was registered, due disciplinary measures about our customer are on the way.
Meanwhile, please accept our apology for Your trouble.
Best regards.
=================================================
Abuse Staff
Seat Pagine Gialle s.p.a.
Area Internet - abuse@tin.it
Consulta la guida sulla sicurezza alla pagina http://tin.virgilio.it/periniziare/guida/sicurezza.html
==================================================
===== Original Message =====
From: “Simon Frappell”
To:
Sent: Thursday, February 27, 2003 12:52 PM
Subject: Net Send Spam Abuse
Hi,
I’m getting Net Spam coming from this address : 80.116.221.181. Can
you please see that this is stopped.
Spam details :
02/27/03 21:29:42 UPLOAD_SUCCEEDED OK REPORT_INSERTED
FWIN,2003/02/27,21:29:40 +10:00
GMT,80.116.221.181:26142,203.45.218.24:137,UDP
Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 27/02/2003
Time: 9:26:53 PM
User: N/A
Computer: PSYCHO
Description:
Application popup: Messenger Service : Message from GOLARGER to on
2/27/2003 8:45:34 PM
We are the #1 MALE ORGAN ENLARGEMENT
supplement on the web. We guarantee the
success of our program or we will refund every
penny. Come find out why more men AND WOMEN
come to us than any other site.
Enlarge your member 1-3 inches in a matter of days!
Whois information captured by my Firewall. :
inetnum: 80.116.128.0 - 80.116.255.255
netname: TINIT-ADSL-LITE
descr: Telecom Italia
descr: Accesso ADSL BBB
country: IT
admin-c: BS104-RIPE
tech-c: BS104-RIPE
status: ASSIGNED PA
remarks: Please send abuse notification to
notify: ripe-staff@telecomitalia.it
mnt-by: TIWS-MNT
changed: net_ti@telecomitalia.it 20020801
source: RIPE
route: 80.116.0.0/16
descr: INTERBUSINESS
origin: AS3269
notify: network@cgi.interbusiness.it
mnt-by: INTERB-MNT
changed: net_ti@telecomitalia.it 20020517
source: RIPE
person: BBBEASYIP STAFF
address: Via Val Cannuta, 250
address: I-00100 Roma
address: Italy
phone: +39 06 36881
e-mail: ripe-staff@telecomitalia.it
nic-hdl: BS104-RIPE
notify: ripe-staff@telecomitalia.it
changed: net_ti@telecomitalia.it 20001019
source: RIPE
Awaiting your reply,
Simon Frappell.
Beautiful fight back, SImo. I wonder what the “due disciplinary measures” are. I am looking to see if there is any further investigation of this issue. Please keep us updated. Thanks.
Easiest way - turn off Messenger service
The easist way to stop receiving this kind of message is to turn off Windows Messenger service. If you are running Windows XP, following these steps:
Click Start button on your toolbar.
Click Run…
Enter “Services.msc” (without quotation marks) and click OK.
Browse the list till you find “Messenger” in Name column
Right click and click “Stop” on the pop up menu. That is not all. If you don’t want the service to start the next time you start your computer, continue with the following steps:
Double click it. The Messenger Properties (Local Computer) dialog box comes out.
Choose “Disable” in “Startup type” drop down box.
Click OK.
Related
Simple steps to Stop NET SEND SPAM
What is “NET SEND SPAM”?
More about the net send spammer Golarger.com
34 Comments
I believe anyone who read about the content of this page know that I have nothing to do with the annoying spam. I just one of the thousands of people who want to stop the spam. By dropping "please quit sending this spam to me" on this board does not help.
Organization:
Jason Spencer
Bob Lerman
45 Henry St
Brooklyn, NY 11201
US
Phone: 718-654-7898
Email: b_lerman2002@yahoo.com
Registrar Name....: Register.com
Registrar Whois...: whois.register.com
Registrar Homepage: http://www.register.com
Domain Name: GOLARGER.COM
Created on..............: Wed, Dec 04, 2002
Expires on..............: Thu, Dec 04, 2003
Record last updated on..: Sat, Mar 15, 2003
Administrative Contact:
Jason Spencer
Bob Lerman
45 Henry St
Brooklyn, NY 11201
US
Phone: 718-654-7898
Email: b_lerman2002@yahoo.com
Technical Contact:
Jason Spencer
Bob Lerman
45 Henry St
Brooklyn, NY 11201
US
Phone: 718-654-7898
Email: b_lerman2002@yahoo.com
Zone Contact:
Jason Spencer
Bob Lerman
45 Henry St
Brooklyn, NY 11201
US
Phone: 718-654-7898
Email: b_lerman2002@yahoo.com
Domain servers in listed order:
DNS5.REGISTER.COM 216.21.234.73
DNS6.REGISTER.COM 216.21.226.73
http://home.wangjianshuo.com/archives/20030321_physical_location_of_golargercom.htm
I live in Thailand. I was motivated to make a pilgramage to Texas to remove Mr. Green's testicles, until I read this thread and noticed that register.com reports golarger's domain(www.largewinner.com) differently than as found by Wangjian.
Microsoft: I will remove your balls if given the chance.
golarger: ditto
and what does "Microsoft: I will remove your balls if given the chance." mean.
:-)
-services
scroll down until you find messenger, right click and under run on startup, change it to disabled
I agree that the company(ies) producing net send spam should be prosecuted, but in the mean time this should help rid you of annoying text pop ups.
Thanks again!
JM
http://www.auburn.edu/oit/security/messengerService.html
Aim: LS Cthulhu
if you need any other support or just wanna chat
Cheers
I agree 100% with all the comments already posted and would quite happily see ALL SPAMMERS terminated at birth !!