A lot of those guys often use SSI to hide the bookmark/homepage changing tricks.
Also, they no longer change your homepage to porn sites, that would be too obvious, instead they change it to an IP that calls a copy of YAHOO with a little text pop up.
Or they have their own custom search engines which are nothing more than warmed over cobrands of OVERTURE [formerly GoTo].
The Hun supposedly has scripts that detect this bullshit, I just wish he'd distribute it to other TGPs to end this systemwide problem.
|