CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Complainterator V22.1 July 10 release - please refresh
Goto page 1, 2  Next
 
Post new topic   Reply to topic       All -> FavForums -> Complainterator [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
tembow

Blue Angel
Premium Member

Joined: Oct 10, 2005
Posts: 2933

Blue Security Premium

PostPosted: Sun Jul 06, 2008 4:59 am    Post subject: Complainterator V22.1 July 10 release - please refresh
Reply with quote

This link is the version 22.1 release with reported bugs and updates included to July 10
http://spamtrackers.eu/downloads/Complainterator22.zip

MAJOR CHANGES

Simplified Contacts File

The registrar contacts file is redesigned. The new format is more compact, with a reduction in duplications which were caused by slight variations in registrar names. To distinguish the new V.22 contacts file from the old V.21 contacts file, it has a different name.

Doman Name Obfuscation

It currently supports Hichina, BILT (English name and Chinese name) and 35 Technology (English and Chinese name) for Link Obfuscation.

The Zip file has complainterator.exe, documentation, the new format contacts file, and an empty Archive folder. So you can unzip it and run it in the same folder as the previous release if you want to retain your old Archive folder.

MINOR CHANGES

* (22.1) New bugs that were reported are fixed, including an unreported problem updating the contacts list with new registrars.
* More registrar owned name servers protected from inadvertent removal requests
* More registrar contacts

To test it, please send the emails off to the registrars without modifying the urls, and without adding any others that would need obfuscation. Feel free to add the usual evidence - spamtrackers, siteadvisor, spamhaus etc with no obfuscation.

I would like to know of any problems, especially bounce-backs with full headers. As we become certain about which other registrars have implemented SURBL filtering, they can be added.

More details are in the Spam Wiki
http://spamtrackers.eu/wiki/index.php?title=Complainterator



Last edited by tembow on Thu Jul 10, 2008 11:57 am, edited 2 times in total
Back to top
View users profile Send private message Visit posters website AIM Address
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1087
Location: USA

PostPosted: Sun Jul 06, 2008 1:54 pm    Post subject:
Reply with quote

Wooo hooo! Party Rock new complainterator version! clapping


Off with their heads?....errr....domains! blowtorch


ok, I better get back to work Whistling

Three cheers! cheers

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1087
Location: USA

PostPosted: Tue Jul 08, 2008 5:53 pm    Post subject:
Reply with quote

hmm. don't know if it's a bug or what, but with this new release I've been getting a lot of "Too many WHOIS windows open" errors.

And well, some of these domains, with their long list of nameservers, end up with a lot of open tabs...

Any possibility of lifting the restriction? I've kinda figured out a way to circumvent it, by pausing, closing the previous tab, going to the latest tab, unpause, etc...but that's kind of a pain in the butt Smile

This error pops up with FF as well as IE7.

Gives kinda like a copy/paste screen dump in a new dialog window, with the last statement being about too many WHOIS windows open, hit OK, and complaitnerator exits.

Fixed in 22.1

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
Jim_P

Sergeant
Sergeant
Premium Member

Joined: Apr 19, 2004
Posts: 133

Premium

PostPosted: Tue Jul 08, 2008 6:21 pm    Post subject:
Reply with quote

I was also getting the message but it stopped when I changed the setting from WhoIs DSNstuff to who.is

Back to top
View users profile Send private message
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1087
Location: USA

PostPosted: Tue Jul 08, 2008 7:21 pm    Post subject:
Reply with quote

hmm, alrighty I'll try setting it to use who.is Wink

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
AlphaCentauri

SIRT Handler
Premium Member

Joined: Nov 20, 2003
Posts: 2859

Premium

PostPosted: Tue Jul 08, 2008 8:03 pm    Post subject:
Reply with quote

The "too many whois window" warning is on purpose. If you try to do a Complainterator report and there are other whois windows open, it may switch to the wrong window. Then you get a report that will report the wrong domain to the wrong registrar at the wrong email address -- big problem.

If you get the warning, you do have to close the other whois windows. However, AFAIK, if you open a tab in the same window as the previous whois, rather than a new window, it may work okay. It was always designed to deal with multiple whois tabs.

Back to top
View users profile Send private message
Jim_P

Sergeant
Sergeant
Premium Member

Joined: Apr 19, 2004
Posts: 133

Premium

PostPosted: Tue Jul 08, 2008 8:12 pm    Post subject:
Reply with quote

I was doing nothing different then I have always have been doing. With V22 I started getting consistently "Too Many Windows Open". Sometimes when I reran it worked and other times it did not. When I changed the Who.Is option the error went away.

Bug found, fixed in 22.1

Back to top
View users profile Send private message
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1087
Location: USA

PostPosted: Tue Jul 08, 2008 10:44 pm    Post subject:
Reply with quote

AlphaCentauri wrote:
If you get the warning, you do have to close the other whois windows.
hmm, perhaps it's a bug then :)

Since I only had 2 tabs open when I started the complainterator process,

Gmail in one tab.
SpamCop in the other.

I launched Complainterator, input the spam domain, and let it run, and since there were multiple nameservers it needed to whois each one individually.

But before I launched Complainterator there weren't any "stray" whois windows open.

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
tembow

Blue Angel
Premium Member

Joined: Oct 10, 2005
Posts: 2933

Blue Security Premium

PostPosted: Wed Jul 09, 2008 12:26 am    Post subject:
Reply with quote

It is a bug, but then, not a big one. One error message is coming up due to more than one reason.

The message should read:

"Either
(a) you got a timeout waiting too long for a window to appear (the old "Lost a Window" message) or
(b) you have a separate browser window open with a Whois result and I am confused about which one to use, or
(c) I got a whois result, but there is nothing I can use on it"

It would be better if the relevant message out of those 3 was returned, but it is not so easy to determine which condition has happened. Please regard the message as implying one of 3 problems in the mean time.

The previous release would have failed at the same stage, with either the Lost Window message, or worse, an invalid report prepared.

Bug found, fixed in 22.1



Last edited by tembow on Thu Jul 10, 2008 11:59 am, edited 1 time in total
Back to top
View users profile Send private message Visit posters website AIM Address
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1087
Location: USA

PostPosted: Wed Jul 09, 2008 4:08 am    Post subject:
Reply with quote

ok, it's likely (a) then - since dnsstuff was being really slow today on my end....

Only had IE open (or FF, only one at a time).

Then again....hmmm....it could have been (c) - I think it was a weird tld that was borking it that time...

try complainterating to solemonti.it and see what happens Smile

I _think_ that is the domain that was giving that error.

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
AlphaCentauri

SIRT Handler
Premium Member

Joined: Nov 20, 2003
Posts: 2859

Premium

PostPosted: Wed Jul 09, 2008 4:13 am    Post subject:
Reply with quote

That one works for me, though the whois information is a pretty weird format. I think if the page were slow to load it could definitely be a problem, since the only place the registrar is listed is way down at the bottom.

Back to top
View users profile Send private message
tembow

Blue Angel
Premium Member

Joined: Oct 10, 2005
Posts: 2933

Blue Security Premium

PostPosted: Wed Jul 09, 2008 11:11 am    Post subject:
Reply with quote

ahoier wrote:

try complainterating to solemonti.it and see what happens Smile

I _think_ that is the domain that was giving that error.


Running V22 at accelerator speed=3 and using WHO.IS
Generated requests to
"priority at staff.aruba.it" to remove solemonti.it
Tucows abuse for technorail.com NS

I would not send off the NS request, since it was registered 5-jun-1997 and looks perfectly legitimate. The site looks fine, but I presume it is hijacked.

Back to top
View users profile Send private message Visit posters website AIM Address
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1087
Location: USA

PostPosted: Wed Jul 09, 2008 12:43 pm    Post subject:
Reply with quote

Yea, it's definately hijacked Wink So I forwarded the spam to MIRT to handle, and just sent the site webmaster/admin/host a personal e-mail regarding the infection on their network.

From what I recall, Complainterator made the whois for the domain, popped up the traversal, but then it gave the error at the next whois page for the nameservers.

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
tembow

Blue Angel
Premium Member

Joined: Oct 10, 2005
Posts: 2933

Blue Security Premium

PostPosted: Thu Jul 10, 2008 12:02 pm    Post subject:
Reply with quote

Bugs are fixed in Version 22.1, now available for download.

I discovered an other bug in the updating of the contacts list for new registrars. That is also now fixed.

Please refresh your Version with 22.1 available from the download link at www.complainterator.com.

Back to top
View users profile Send private message Visit posters website AIM Address
secure_blue

Sergeant
Sergeant
Premium Member

Joined: May 05, 2006
Posts: 78
Location: USA
Premium

PostPosted: Thu Jul 10, 2008 12:35 pm    Post subject:
Reply with quote

V22 has been working better for me re: the speed setting. Previously a lotta trouble w/ complaint form not getting filled out unless set speed very low.

Tks 22.1, gonna try it right now !
Q: Hope 22.1 blocks dotster for everydns ?

I mistakenly blocked everydns.com but it should be everydns.net so that will be in the next version, 22.2

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Complainterator All times are GMT
Goto page 1, 2  Next
Page 1 of 2

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer