InBoxRevenge KS Forum

Ok, problem solved. I had the restriction on what javascript can do set too tight.
I had scripts prevented from:
-Disable or replace context menus
-Hide the status bar
-Change status bar text

Apparently one or more of these is required for the 'nator to run properly.

Actually none of the above, but it does dynamically write content to the browser, which it sounds like the context menu item would be responsible for. (They should be more broad.)

Thanx for this feedback!

SiL

I can't seem to get TOR to want to work on my 'puter... I'll have to keep trying.

Interesting! It now always tries to download the final cart.asp page. They must be sensing these orders somehow.

This means I have to move to a firefox extension build or greasemonkey script.

This is excellent! I hope it cost them some $$$

Thanx folks.

SiL

Try using Vidalia (a GUI for Tor). This allows you to view a network map with your current connections listing which nodes they are going through. You can have multiple routes active at once if you are sending a lot of traffic, but when accessing a single webpage, it is usually straightforward to see the exit node name and then look up its details.This will happen fairly frequently - when you're going through 3 nodes, a problem with any of them will result in a lost connection.

Here's the current complete list of mirrored copies of the most recent Pharmacy Expressorator(TM)

http://www.mytempdir.com/1092153
http://www.mytempdir.com/1093721
http://www.mytempdir.com/1093732
http://www.mytempdir.com/1093733
http://www.mytempdir.com/1093735
http://www.mytempdir.com/1093737
http://www.mytempdir.com/1093740

Enjoy!

SiL

A little thing I noticed ... when running this lovely toy I found the pages load slightly faster if I change the default setting in Privoxy so that instead of handing back the Pharm Ex site's own url as the refferer, I set it to something else, like www;herbalkings.net

Cuts the load time in half.

Well PE seem to have altered their site so it's now using a URL parameter for the session ID, to block this script. Way to go arseholes, how about stop spamming us instead?

Yes you are right I am unable to order any pills, and I can't find a "contact us" to send them some more abuse.
Can anything be done to make the expressorator work again? I really hope for something like greasemonkey which I have had delight in using against those other assholes My Canadian Pharmacy!

Hey it's Xmas, but in a break during baking I thought I'd check this out.

I'll work on a modification to this.

Keep in mind: this is an awesome shift to see. It must mean that they hate taking extra time to process these orders, so there must have been enough of them that they had to do something about it. Nice!

Should be a pretty straightforward modification.

I'm noticing a record number of spam messages for MCP and Pharmacy Express today (in the midst of ridiculous stock spams.)

They *are* assholes.

Thanx for reporting this change. Merry Xmas everyone.

SiL

Not all PE sites have changed over - I suspect that the ones that have received the most "attention" (like rx555.com) have been given priority but www.kerunhandgunfandesikuntun.com and www.randesuikintungandesun.com are still on the old system so anyone needing some "extra shots" can place their orders using these domains.Hee hee - did you get any "PHYA had a pullback of 25% after some well-deserved profit taking on Thursday"? Looks like a spammer may have got caught out by a dump themselves!

Good to know (and weird. Maybe they're experimenting.)

I still haven't been near computers too much the past couple days. A much needed break, let me tell you.



Hm... That's a stock I just have never even seen in my spam intake. I find that interesting. Clearly there is some sort of strategy behind which stocks are spammed, when, and how often. The ones I've been spammed with in the past four days are as follows:

CBFE (China Biolife Enterprises, Inc.) [2] (via a literally unreadable gif)
CTCX (Critical Care, Inc.) [1] (via mangled gif)
GDKI (Goldmark Industries) [1] (via a seemingly flat gif)
NNYG (Northamerican Energy Group Corp.) [1] (via really illiterate text)
GCME (Greater China Media & Entertainment) [1] (via fairly readable, market-savvy text)

I haven't bothered looking up any of the stats on these particular stock. I would not immediately assume that the spammers actually lost anything, as they likely had some automated means of performing their sale of the stock once it hit a predetermined threshold.

QUITE off-topic but it's interesting. Maybe we should start a stock-tracking thread?

Thanx again for this info.

SiL

My mate Angus does a great listing of what he receives, which I find to be more concrete than the amount I receive. He posts the website of the company involved and I've scoured up some of the contact information for these companies, to let them know that I'm on to them.

http://www.spamnation.info/stocks/index.php

Well here we are: a new year, and apparently a drastically different methodology from the spammers behind Pharmacy Express.

This is a completely re-coded utility from the ground up, since they moved their entire operation to a new programming language (PHP) and server type (Apache, versus IIS / Windows.) They completely re-did their entire ordering system and appear to have added more products, so I've made sure the entire catalogue of their so-called "products" are made available here.

Please note that this particular version only works on the newer PHP versions of this website. Sites which have been spammed using this methodology include:



There have been others but they have all recently been shut down (and rightly so.)

There are a few extra steps to take, so please read carefully before placing orders. As always, the recommended environment for running this utility includes the following:

- Firefox
- TOR / Vidalia / Privoxy
- Enable javascript for local files (if you run the "NoScript" extension.)
- A desire to kill spammers.

So without further ado, here are the downloads. Each of these are identical, I just wanted as many mirrors as possible due to the flakiness of mytempdir. Spread the word.

http://www.mytempdir.com/1150578
http://www.mytempdir.com/1150579
http://www.mytempdir.com/1150580
http://www.mytempdir.com/1150582
http://www.mytempdir.com/1150584
http://www.mytempdir.com/1150585
http://www.mytempdir.com/1150586
http://www.mytempdir.com/1150588
http://www.mytempdir.com/1150590

Also: if you find any new ones (or are spammed with them) which feature the new php setup, please post them in the targets thread.

Thanks as always for reading. They want the orders. Let's give them to them.

SiL

Hmm, for some reason I'm getting as far as the Check Out page but it won't automatically fill it in.

Any suggestions?